Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: Ja1OyzxJDETEVmqZ/FLE4FjLzcQMkFjw+edc1mTDZg4=
Subject key identifier: C3:55:12:C6:68:AF:CC:19:A4:97:FE:E8:EA:21:05:D5:C6:C5:EB:E8
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 0196753093B4990B88C41D5FEA12AB6F7774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 03:00:39 +0000
Manifest this update: Sun 27 Apr 2025 03:00:39 +0000
Manifest next update: Mon 28 Apr 2025 03:00:39 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: B+S02ZQOT8k5aEuDgz1813x683g1FijlwEBgO48cdLI=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:93:b4:99:0b:88:c4:1d:5f:ea:12:ab:6f:77:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Apr 27 03:00:39 2025 GMT
Not After : Apr 28 03:00:39 2025 GMT
Subject: CN=c35512c668afcc19a497fee8ea2105d5c6c5ebe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:c0:e0:5e:30:5f:d9:5c:30:ac:1d:7f:a5:
78:3f:f9:05:e4:f2:ea:2e:a2:e2:d3:1e:39:a3:57:
89:31:f7:3f:04:94:70:69:0f:ce:73:b4:62:d9:5c:
2a:10:fe:7a:54:b9:17:43:68:ce:a2:9e:72:8f:36:
21:c5:b9:61:f6:a2:e8:19:6b:84:d0:b6:58:a9:1a:
57:9c:35:0d:e9:f8:d6:6b:f6:6b:87:91:00:85:53:
c1:9d:0b:a0:1f:c8:f1:56:b7:36:c2:87:34:bb:26:
bb:fa:ff:dd:67:58:d3:5f:b8:91:30:66:f9:7a:7f:
f7:e0:ca:e8:bd:67:23:8f:53:ef:78:84:79:3c:0a:
4c:b5:8d:a6:a6:cd:21:7b:f6:8c:e7:bb:b1:b7:e0:
07:4b:ef:af:5e:ef:cd:e7:97:8e:77:4e:b4:dc:01:
84:3b:1d:d7:ca:12:a2:6d:0c:15:1a:f6:7a:f9:f1:
39:be:ec:d6:e4:70:85:d0:4c:62:7c:b6:e5:65:94:
44:c3:d5:a6:8c:47:fc:f2:c2:0d:1c:d0:1e:f5:ab:
30:9b:20:89:c7:0f:58:20:b2:74:be:5d:5d:a0:51:
da:05:57:bb:4b:78:6f:09:2c:25:b4:2d:8e:fd:64:
38:69:a6:68:e1:ea:01:a3:be:30:b0:0f:e9:14:83:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:12:C6:68:AF:CC:19:A4:97:FE:E8:EA:21:05:D5:C6:C5:EB:E8
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d9:30:20:dc:ee:9b:cc:89:2f:3a:67:ea:40:16:41:56:cf:
5e:13:0f:99:69:42:4f:28:37:f9:7b:45:46:7f:89:6b:2b:02:
f2:a6:19:a3:1a:fc:cc:fb:01:ab:d3:2b:12:c3:73:4e:e2:88:
95:43:49:83:fc:1c:86:8d:22:95:5d:60:16:85:61:d5:07:72:
eb:24:79:3f:64:9a:63:b2:90:06:64:8e:73:85:b0:0b:87:e0:
d5:ad:78:55:fa:b6:f3:9c:ae:c4:b1:40:40:dc:a3:97:01:02:
3b:70:39:75:a6:7b:12:a9:58:39:11:56:a2:bf:8a:35:be:e9:
ec:67:6b:ad:81:ab:e3:c2:59:56:44:af:3d:3a:0f:61:1c:76:
76:cf:7f:06:bb:f4:ae:d1:ac:d7:ca:00:e9:59:c7:5e:9e:57:
80:31:25:97:05:f0:7d:15:b7:12:7f:e2:da:e3:c3:58:13:c1:
dd:c9:0c:7d:a2:66:32:96:89:6e:c8:a6:0d:34:93:5c:70:6b:
82:e1:4a:ed:db:73:57:10:df:9b:2f:87:17:4d:1c:38:0c:0f:
9f:40:85:2f:dc:69:21:0e:d8:23:2e:1d:64:b7:9e:bc:06:2d:
d2:0f:11:6d:92:ce:ae:e5:44:3b:16:85:71:10:9d:80:b5:d2:
08:65:d5:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MJO0mQuIxB1f6hKrb3d0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4
NDQzODgwHhcNMjUwNDI3MDMwMDM5WhcNMjUwNDI4MDMwMDM5WjAzMTEwLwYDVQQD
EyhjMzU1MTJjNjY4YWZjYzE5YTQ5N2ZlZThlYTIxMDVkNWM2YzVlYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYDA4F4wX9lcMKwdf6V4P/kF5PLq
LqLi0x45o1eJMfc/BJRwaQ/Oc7Ri2VwqEP56VLkXQ2jOop5yjzYhxblh9qLoGWuE
0LZYqRpXnDUN6fjWa/Zrh5EAhVPBnQugH8jxVrc2woc0uya7+v/dZ1jTX7iRMGb5
en/34MrovWcjj1PveIR5PApMtY2mps0he/aM57uxt+AHS++vXu/N55eOd0603AGE
Ox3XyhKibQwVGvZ6+fE5vuzW5HCF0ExifLblZZREw9WmjEf88sINHNAe9aswmyCJ
xw9YILJ0vl1doFHaBVe7S3hvCSwltC2O/WQ4aaZo4eoBo74wsA/pFIPiYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNVEsZor8wZpJf+6OohBdXGxevoMB8GA1UdIwQY
MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt
MWMxOTk0OWI5NmI2LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2
LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtkwINzu
m8yJLzpn6kAWQVbPXhMPmWlCTyg3+XtFRn+JaysC8qYZoxr8zPsBq9MrEsNzTuKI
lUNJg/wcho0ilV1gFoVh1Qdy6yR5P2SaY7KQBmSOc4WwC4fg1a14Vfq285yuxLFA
QNyjlwECO3A5daZ7EqlYORFWor+KNb7p7GdrrYGr48JZVkSvPToPYRx2ds9/Brv0
rtGs18oA6VnHXp5XgDEllwXwfRW3En/i2uPDWBPB3ckMfaJmMpaJbsimDTSTXHBr
guFK7dtzVxDfmy+HF00cOAwPn0CFL9xpIQ7YIy4dZLeevAYt0g8RbZLOruVEOxaF
cRCdgLXSCGXVZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:08:19 2025 by rpki-client