Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: Texg8K4vQkarpDWnLcLLUOuDzgb/jIUzWxvphSg2/xo=
Subject key identifier: 93:10:6E:D6:58:A2:94:F3:95:00:1F:B3:E4:79:F2:AB:E6:05:59:98
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019683231C40D1322AD0DD77303B8DC76447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0A08
Signing time: Tue 29 Apr 2025 20:00:38 +0000
Manifest this update: Tue 29 Apr 2025 20:00:38 +0000
Manifest next update: Wed 30 Apr 2025 20:00:38 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: 3CebXxzqeIIezJwegFlCdT4Rqq49qeXwvgVF9gsCExk=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:1c:40:d1:32:2a:d0:dd:77:30:3b:8d:c7:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Apr 29 20:00:38 2025 GMT
Not After : Apr 30 20:00:38 2025 GMT
Subject: CN=93106ed658a294f395001fb3e479f2abe6055998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:6b:84:3d:85:1c:3a:df:27:61:d1:85:43:
c5:83:0f:5d:f6:de:eb:05:fc:2f:a0:c0:e7:cc:9b:
af:d1:45:7f:ef:86:2e:ae:d2:d1:64:bc:7c:0e:2c:
8d:8e:6d:85:b3:e5:ab:00:69:c8:df:33:66:38:c9:
97:91:e0:21:13:ad:05:25:25:68:16:c7:43:31:01:
5c:e4:e3:86:73:f8:7d:8a:77:a8:bd:a2:2a:47:fa:
74:b0:ea:be:ef:08:8d:c7:64:97:5c:15:b0:67:46:
3b:5c:e2:74:5e:23:0e:3f:09:58:67:e4:eb:bf:0d:
e1:bf:da:5d:83:8f:33:ac:6c:92:c5:e4:cc:29:c9:
bf:cb:b4:d8:2b:a7:66:ab:fd:75:dc:8a:a6:9c:7c:
33:79:8b:a1:84:37:5a:1e:33:27:c4:30:a7:3f:21:
55:98:76:9e:e3:01:48:2c:dd:59:bc:55:a4:b1:5f:
e2:8a:ba:2b:32:6b:2e:5e:b3:47:40:2b:9c:b6:22:
41:de:7d:2c:0c:a0:dc:14:d7:ae:e2:15:24:ef:48:
24:72:f8:ec:0b:5f:65:f8:8c:96:de:db:fc:62:3e:
d4:d9:e5:16:00:f5:c6:9c:9d:eb:61:58:c6:9e:ab:
88:4a:70:19:93:0a:57:6b:e3:c9:a4:8f:d1:8a:79:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:6E:D6:58:A2:94:F3:95:00:1F:B3:E4:79:F2:AB:E6:05:59:98
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:c2:a1:6b:ec:65:cd:12:d7:57:35:f1:30:a8:6d:5e:23:
23:85:a9:d1:03:8d:b0:73:e1:b6:a6:5e:45:30:56:47:e0:2f:
9e:30:1d:aa:ec:91:f2:68:30:51:ab:dd:3a:f6:51:4c:96:df:
8b:bb:59:cf:39:b2:99:1c:52:c5:7d:c8:ac:89:77:36:48:44:
76:bc:78:59:6e:aa:4f:03:91:19:44:9d:78:4e:ea:19:fd:e5:
d6:94:4f:c2:29:62:79:31:90:bd:7a:7d:07:1d:79:c5:94:1d:
87:50:ee:fb:f9:22:3e:d4:e7:3a:ea:df:a2:14:85:a8:cb:3f:
8b:77:42:57:e1:4e:a7:e0:b5:8d:ab:96:52:92:f0:5e:a5:df:
61:11:7c:ec:d2:70:9b:2c:08:99:4c:02:1e:d7:75:02:d4:90:
aa:86:42:ee:15:93:fa:5d:d9:dd:d6:af:65:83:9f:25:a6:d8:
c0:be:7c:1e:00:13:02:bc:2c:73:cd:99:7d:3e:9a:39:b6:a9:
79:4e:38:4a:b7:16:c5:ce:8e:9b:71:de:6d:38:aa:76:24:07:
d2:8f:de:80:9c:fb:41:3f:e1:c0:9b:54:1a:e9:a7:6f:60:5b:
0a:9b:8d:fa:f4:12:37:01:c7:62:92:27:e2:7c:25:d0:76:92:
16:a4:0a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIxxA0TIq0N13MDuNx2RHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz
NmM0MjgwHhcNMjUwNDI5MjAwMDM4WhcNMjUwNDMwMjAwMDM4WjAzMTEwLwYDVQQD
Eyg5MzEwNmVkNjU4YTI5NGYzOTUwMDFmYjNlNDc5ZjJhYmU2MDU1OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA011rhD2FHDrfJ2HRhUPFgw9d9t7r
BfwvoMDnzJuv0UV/74YurtLRZLx8DiyNjm2Fs+WrAGnI3zNmOMmXkeAhE60FJSVo
FsdDMQFc5OOGc/h9ineovaIqR/p0sOq+7wiNx2SXXBWwZ0Y7XOJ0XiMOPwlYZ+Tr
vw3hv9pdg48zrGySxeTMKcm/y7TYK6dmq/113IqmnHwzeYuhhDdaHjMnxDCnPyFV
mHae4wFILN1ZvFWksV/iirorMmsuXrNHQCuctiJB3n0sDKDcFNeu4hUk70gkcvjs
C19l+IyW3tv8Yj7U2eUWAPXGnJ3rYVjGnquISnAZkwpXa+PJpI/RinlDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMQbtZYopTzlQAfs+R58qvmBVmYMB8GA1UdIwQY
MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt
N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0
LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljXCoWvs
Zc0S11c18TCobV4jI4Wp0QONsHPhtqZeRTBWR+AvnjAdquyR8mgwUavdOvZRTJbf
i7tZzzmymRxSxX3IrIl3NkhEdrx4WW6qTwORGUSdeE7qGf3l1pRPwilieTGQvXp9
Bx15xZQdh1Du+/kiPtTnOurfohSFqMs/i3dCV+FOp+C1jauWUpLwXqXfYRF87NJw
mywImUwCHtd1AtSQqoZC7hWT+l3Z3davZYOfJabYwL58HgATArwsc82ZfT6aObap
eU44SrcWxc6Om3HebTiqdiQH0o/egJz7QT/hwJtUGumnb2BbCpuN+vQSNwHHYpIn
4nwl0HaSFqQK2Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:21:46 2025 by rpki-client