Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: xmdYhroSBedUkfDI1MHIFZzvt9hEQPyt4pVTK+ybduo=
Subject key identifier: AC:F5:DF:54:2E:98:6A:0A:90:AD:9E:1A:7D:F6:DA:99:47:29:B6:0A
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 01967CB2F5A1418EFBE99F2BA39E58846A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0CA1
Signing time: Mon 28 Apr 2025 14:00:25 +0000
Manifest this update: Mon 28 Apr 2025 14:00:25 +0000
Manifest next update: Tue 29 Apr 2025 14:00:25 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: +m7zCmQfpUkB9543+JQmVy6jC87glZa8KCzlgtHrBlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:f5:a1:41:8e:fb:e9:9f:2b:a3:9e:58:84:6a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Apr 28 14:00:25 2025 GMT
Not After : Apr 29 14:00:25 2025 GMT
Subject: CN=acf5df542e986a0a90ad9e1a7df6da994729b60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:cd:83:e3:b0:63:57:aa:a2:c7:04:bc:de:
44:25:c2:10:0f:0f:5d:13:f0:7b:05:a3:0d:de:72:
2f:3f:e2:06:f0:25:f8:c4:6b:7b:02:57:72:f2:c6:
b5:a4:99:91:7c:dd:3a:e9:de:53:13:db:17:c6:0a:
45:41:4c:b7:d8:9f:92:f3:08:99:fe:59:a0:5a:e0:
4b:10:86:df:53:d2:e8:f3:5f:c8:6f:88:c8:5e:24:
ff:d9:b6:31:30:52:30:13:09:c8:d9:7e:3d:91:33:
69:dc:ae:0c:96:d2:a2:d3:ed:00:6b:c5:49:95:2e:
91:cf:7f:3a:46:e3:02:5b:60:37:be:c5:0c:a0:b2:
9a:65:ef:70:12:0f:fa:ac:0d:24:b5:52:25:84:98:
fc:af:db:9b:d3:89:77:05:da:3d:5f:0a:4e:1e:72:
a6:2a:6e:42:29:57:dc:e6:4c:c3:d5:2b:86:46:b0:
70:6f:33:54:58:e5:b6:93:f0:db:09:f9:08:92:9f:
54:be:71:90:46:d7:da:c8:d2:07:af:21:68:56:e3:
df:b7:45:75:80:0b:77:b0:86:59:bd:df:ff:f3:47:
69:42:32:20:1d:20:7d:86:b5:a1:02:94:4c:c5:b3:
97:1a:c3:54:1a:86:08:16:15:8a:a1:61:7c:9a:aa:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:DF:54:2E:98:6A:0A:90:AD:9E:1A:7D:F6:DA:99:47:29:B6:0A
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:b3:b9:97:84:35:4e:d8:2c:07:55:f7:fb:d4:aa:8f:1d:
2c:39:e4:9d:9b:62:99:06:a8:6f:66:82:fc:25:f6:e2:cc:48:
6c:0e:e6:a6:23:3f:88:05:fd:ad:5b:3b:c1:d8:04:41:32:86:
8f:16:94:b6:9e:f8:79:5e:2f:51:0e:c1:72:12:0a:b6:f7:ef:
54:bd:75:64:39:be:09:3e:67:01:c1:6d:28:06:9f:cd:bd:41:
4c:9d:d5:21:43:f5:af:02:d7:61:4a:d4:aa:2f:ff:b4:1c:46:
59:81:ea:aa:f8:25:b9:6b:95:51:ac:15:a8:db:a6:28:4b:d8:
f1:d7:91:62:67:7b:99:8c:b0:eb:0c:15:bc:a3:0f:ac:e7:95:
70:0f:72:fa:3b:66:1e:09:65:27:41:7e:75:37:4d:41:f7:f3:
f9:4b:d0:c1:f0:9b:e3:df:89:2e:25:99:d0:f1:bc:b8:27:dc:
dd:0a:e2:2e:36:79:63:58:11:79:00:57:d0:f6:f1:92:ba:72:
f7:59:0d:07:bd:44:59:00:6b:b4:98:b5:e2:99:70:e5:80:63:
3d:52:1c:42:eb:89:6e:f6:c2:28:e8:6f:ac:5d:02:91:3e:cf:
32:33:65:a2:cb:dd:9b:b1:5e:39:27:7b:ef:bc:59:9f:0a:2d:
79:24:9c:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8svWhQY776Z8ro55YhGowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx
ZGU1OWIwHhcNMjUwNDI4MTQwMDI1WhcNMjUwNDI5MTQwMDI1WjAzMTEwLwYDVQQD
EyhhY2Y1ZGY1NDJlOTg2YTBhOTBhZDllMWE3ZGY2ZGE5OTQ3MjliNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1rNg+OwY1eqoscEvN5EJcIQDw9d
E/B7BaMN3nIvP+IG8CX4xGt7Aldy8sa1pJmRfN066d5TE9sXxgpFQUy32J+S8wiZ
/lmgWuBLEIbfU9Lo81/Ib4jIXiT/2bYxMFIwEwnI2X49kTNp3K4MltKi0+0Aa8VJ
lS6Rz386RuMCW2A3vsUMoLKaZe9wEg/6rA0ktVIlhJj8r9ub04l3Bdo9XwpOHnKm
Km5CKVfc5kzD1SuGRrBwbzNUWOW2k/DbCfkIkp9UvnGQRtfayNIHryFoVuPft0V1
gAt3sIZZvd//80dpQjIgHSB9hrWhApRMxbOXGsNUGoYIFhWKoWF8mqrj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz131QumGoKkK2eGn322plHKbYKMB8GA1UdIwQY
MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt
ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj
LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDazuZeE
NU7YLAdV9/vUqo8dLDnknZtimQaob2aC/CX24sxIbA7mpiM/iAX9rVs7wdgEQTKG
jxaUtp74eV4vUQ7BchIKtvfvVL11ZDm+CT5nAcFtKAafzb1BTJ3VIUP1rwLXYUrU
qi//tBxGWYHqqvgluWuVUawVqNumKEvY8deRYmd7mYyw6wwVvKMPrOeVcA9y+jtm
HgllJ0F+dTdNQffz+UvQwfCb49+JLiWZ0PG8uCfc3QriLjZ5Y1gReQBX0Pbxkrpy
91kNB71EWQBrtJi14plw5YBjPVIcQuuJbvbCKOhvrF0CkT7PMjNlosvdm7FeOSd7
77xZnwoteSScKw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:33:59 2025 by rpki-client