Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
File: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft (raw, json)
Hash identifier: kIwDheM8IzrpDbE19UBSvzKAitFzw0TNM8bxjzTIxbs=
Subject key identifier: 76:4A:C4:86:7D:C5:83:D7:DE:8B:7A:51:93:35:0B:E6:50:52:41:DA
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Certificate issuer: /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial: 01967FB4CD8BBDE62A5E993F402210C81C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
Manifest number: 05FC
Signing time: Tue 29 Apr 2025 04:01:17 +0000
Manifest this update: Tue 29 Apr 2025 04:01:17 +0000
Manifest next update: Wed 30 Apr 2025 04:01:17 +0000
Files and hashes: 1: RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa (hash: CWqw/aMDA6ZuqW+g16a2LFyjcXoDj/1ZGqdzZueDSNs=)
2: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl (hash: 3eLvDrKW1RNC5n0xrOl8nsKHEdhVtfsOwXoU01PkJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:cd:8b:bd:e6:2a:5e:99:3f:40:22:10:c8:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Validity
Not Before: Apr 29 04:01:17 2025 GMT
Not After : Apr 30 04:01:17 2025 GMT
Subject: CN=764ac4867dc583d7de8b7a5193350be6505241da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:4a:30:ad:e7:0b:ec:a3:5f:b6:a1:36:8a:
c8:31:01:ef:96:09:85:7a:68:6d:8d:c2:96:b8:7e:
a4:24:8c:f0:c3:43:14:6d:3b:64:7a:1c:a9:a4:b3:
a0:32:24:67:a7:8d:16:12:91:be:96:40:e8:07:fa:
55:9b:89:5d:b0:95:64:cc:9e:7d:a1:6f:01:5d:42:
a7:39:87:ef:15:bd:19:15:81:07:b7:ff:9d:8f:5e:
4c:de:09:73:39:5c:a2:a4:41:cf:cc:01:98:34:af:
43:18:25:86:77:14:a2:2d:cd:96:9b:5e:da:4c:f3:
32:72:51:a5:29:80:06:4c:17:7d:c2:82:5c:b2:fc:
b2:2b:22:ed:82:c4:c2:3f:5a:5c:46:f8:be:43:47:
9a:21:31:fd:c1:b2:02:c8:c5:ac:4e:00:2a:06:53:
b6:f6:76:7f:57:2b:7c:b8:24:7d:dd:10:2d:46:c3:
f0:fa:e1:cc:f2:4f:a1:68:75:6d:61:0b:68:f1:50:
1c:bb:4b:0c:d1:5b:c9:c3:73:40:7d:bb:69:93:9c:
dd:12:25:00:ef:01:bb:0d:03:52:0e:f5:8b:84:2b:
67:02:23:ea:76:f8:f4:71:02:90:ab:bd:ba:b6:30:
05:94:4a:0a:10:0d:1f:cc:9f:a7:7c:29:73:5b:22:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:C4:86:7D:C5:83:D7:DE:8B:7A:51:93:35:0B:E6:50:52:41:DA
X509v3 Authority Key Identifier:
keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:eb:d2:54:68:43:b5:f9:ce:3b:16:e0:5c:a8:11:33:49:2d:
5e:bd:4f:3c:c0:a1:ee:ef:88:56:e3:58:05:d3:ac:fa:f2:41:
5b:6b:27:eb:a7:4b:32:f8:1a:a2:0e:f4:65:d2:2b:50:bf:b3:
a1:b6:ac:20:ca:4a:26:67:da:c8:23:81:8e:03:87:bd:cc:4c:
73:76:bb:32:9e:22:5d:90:54:23:b3:a7:d6:12:66:f5:18:52:
2d:ec:0d:72:66:49:62:21:f2:70:f5:f5:75:3a:41:0c:af:53:
82:9e:e8:83:58:33:36:c1:b2:c2:c7:e0:4d:9c:f1:af:9f:01:
37:18:7a:c8:c0:3e:d6:20:70:da:4d:95:80:90:d6:20:b4:ee:
80:60:0f:ea:11:9a:5d:e5:a7:7c:26:96:95:8d:0e:77:00:14:
0b:39:c7:f8:19:cf:ea:32:82:cb:70:ef:91:44:29:cd:05:49:
e5:38:3a:6b:ef:3f:3f:11:5b:1a:98:09:78:f0:6a:97:5d:78:
03:cc:0a:1a:96:e1:22:9d:36:58:69:89:3a:bf:65:1e:ba:66:
91:fe:87:e1:35:b1:33:e5:31:ac:59:2e:9a:ee:9e:60:92:79:
61:0b:af:f4:1a:fe:51:f8:a1:ca:55:ae:5e:44:7d:d0:e8:9a:
dd:7a:85:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tM2LveYqXpk/QCIQyBx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2Q4Zjk5ZGZhMzA5MmQxZjY3NTdlZmFjYjQ5ZjllMDBl
NmQ0YjkwHhcNMjUwNDI5MDQwMTE3WhcNMjUwNDMwMDQwMTE3WjAzMTEwLwYDVQQD
Eyg3NjRhYzQ4NjdkYzU4M2Q3ZGU4YjdhNTE5MzM1MGJlNjUwNTI0MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ehKMK3nC+yjX7ahNorIMQHvlgmF
emhtjcKWuH6kJIzww0MUbTtkehyppLOgMiRnp40WEpG+lkDoB/pVm4ldsJVkzJ59
oW8BXUKnOYfvFb0ZFYEHt/+dj15M3glzOVyipEHPzAGYNK9DGCWGdxSiLc2Wm17a
TPMyclGlKYAGTBd9woJcsvyyKyLtgsTCP1pcRvi+Q0eaITH9wbICyMWsTgAqBlO2
9nZ/Vyt8uCR93RAtRsPw+uHM8k+haHVtYQto8VAcu0sM0VvJw3NAfbtpk5zdEiUA
7wG7DQNSDvWLhCtnAiPqdvj0cQKQq726tjAFlEoKEA0fzJ+nfClzWyLwcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZKxIZ9xYPX3ot6UZM1C+ZQUkHaMB8GA1UdIwQY
MBaAFGI9j5nfowktH2dX76y0n54A5tS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWoyUG1kLWpDUzBmWjFmdnJMU2ZuZ0RtMUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC85ZTM2YjItM2YyZC00NDRmLTlkM2Et
NDBiY2I3NGU0YzI4LzEvWWoyUG1kLWpDUzBmWjFmdnJMU2ZuZ0RtMUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC85ZTM2YjItM2YyZC00NDRmLTlkM2EtNDBiY2I3NGU0YzI4
LzEvWWoyUG1kLWpDUzBmWjFmdnJMU2ZuZ0RtMUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAevSVGhD
tfnOOxbgXKgRM0ktXr1PPMCh7u+IVuNYBdOs+vJBW2sn66dLMvgaog70ZdIrUL+z
obasIMpKJmfayCOBjgOHvcxMc3a7Mp4iXZBUI7On1hJm9RhSLewNcmZJYiHycPX1
dTpBDK9Tgp7og1gzNsGywsfgTZzxr58BNxh6yMA+1iBw2k2VgJDWILTugGAP6hGa
XeWnfCaWlY0OdwAUCznH+BnP6jKCy3DvkUQpzQVJ5Tg6a+8/PxFbGpgJePBql114
A8wKGpbhIp02WGmJOr9lHrpmkf6H4TWxM+UxrFkumu6eYJJ5YQuv9Br+UfihylWu
XkR90Oia3XqFTQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:24 2025 by rpki-client