Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File: YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier: ah+pjQtYuH8QiapKum+yqLgUWomcU58Rvk15thJoDbM=
Subject key identifier: A5:1C:05:51:A4:CB:CA:1D:F6:B6:2D:01:A2:B3:00:84:2A:05:BB:37
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer: /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial: 019674F9D6296B1C44F4528792AD0606EEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number: 0593
Signing time: Sun 27 Apr 2025 02:00:52 +0000
Manifest this update: Sun 27 Apr 2025 02:00:52 +0000
Manifest next update: Mon 28 Apr 2025 02:00:52 +0000
Files and hashes: 1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: traf8kMGyXYD9mhHwKHrfxx5Y9CdWOvfJmyr8CGO4g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:d6:29:6b:1c:44:f4:52:87:92:ad:06:06:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Validity
Not Before: Apr 27 02:00:52 2025 GMT
Not After : Apr 28 02:00:52 2025 GMT
Subject: CN=a51c0551a4cbca1df6b62d01a2b300842a05bb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:da:66:71:f5:20:74:a1:7d:71:c2:c2:4c:
5e:00:69:ae:76:7a:1d:3e:d8:8b:f3:ba:70:8a:d8:
99:99:90:36:5b:6c:a4:74:8e:c1:cd:ef:01:53:0e:
c5:a3:84:6e:61:56:ef:93:c3:fa:75:fa:8e:e2:cf:
7e:7f:f0:b6:c3:79:d8:05:19:71:bf:42:c7:e4:ad:
25:c4:7b:21:3a:66:72:2c:f8:9a:a6:16:6b:5f:25:
41:fc:8e:f4:f9:ce:60:07:5e:68:0f:30:77:33:42:
c6:77:d9:e7:ec:3a:9f:73:6d:ba:57:db:a5:41:f7:
c7:d9:7e:ff:bf:d8:39:44:f6:fa:7e:c7:c9:84:83:
9d:b3:70:24:19:3b:61:f3:fb:09:b6:a6:c2:ef:3c:
43:45:12:ab:58:c1:aa:ea:b6:91:ef:98:0e:70:55:
35:bf:d3:3d:c8:e0:32:be:55:da:cc:f2:35:9d:93:
d6:b8:a8:b6:07:50:c8:f3:59:78:b8:4f:1a:74:0f:
aa:c5:71:52:bc:4c:ba:36:7c:09:62:7f:bc:76:a0:
91:ab:4b:d9:4a:64:e2:3a:fb:83:51:b8:33:5b:73:
f5:b4:17:62:df:f3:c6:ad:88:3c:b7:89:97:9f:e9:
1e:a7:6f:0b:30:65:c6:95:3c:69:f5:b6:0b:c6:1b:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:05:51:A4:CB:CA:1D:F6:B6:2D:01:A2:B3:00:84:2A:05:BB:37
X509v3 Authority Key Identifier:
keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:66:95:db:57:39:5f:6b:96:7a:19:b6:e3:c3:9c:f5:08:a1:
d9:4d:ac:a9:51:d2:05:a9:31:9e:8d:45:bd:4f:23:05:6f:a9:
2c:c8:ab:e1:e8:4f:5a:93:a3:9c:2b:57:68:99:6c:e9:eb:31:
fa:17:32:18:ae:ab:84:05:97:4d:a0:07:24:d7:b6:d3:76:a4:
aa:3a:fc:20:8d:be:c8:5f:ed:62:ca:c4:7c:d5:9b:15:ee:0d:
6e:3d:87:2a:cf:18:a5:5a:db:45:f7:25:c1:0d:4f:03:10:b7:
28:8b:35:3a:7d:7a:e7:be:c3:d6:8d:b7:fc:59:64:1d:0e:34:
bb:ed:d4:42:d7:2f:c2:9a:d6:98:f7:02:48:83:84:23:30:45:
5f:46:d8:7c:7b:bc:8c:ea:09:41:cb:f0:b7:ac:e9:aa:44:95:
e9:f8:9f:05:6e:1d:b0:14:9c:03:b9:9a:7d:7a:35:55:ac:66:
d9:b6:29:1a:c7:73:84:7e:f2:15:30:51:a0:fd:ba:92:2b:ef:
99:e1:a1:36:9e:91:20:39:81:03:6c:dd:de:78:d2:4a:24:48:
47:83:6a:23:13:a8:eb:ee:4d:5c:30:54:8b:e8:2b:b0:94:cd:
17:a4:f8:66:c1:25:89:5d:58:d6:8c:b6:56:5d:99:bd:81:fa:
e5:8d:cc:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+dYpaxxE9FKHkq0GBu7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2FiMTgyMGNlNDhjNTc5ZGE0MGM2NmQ4NTI2NWYxYzJj
ZmNiNGUwHhcNMjUwNDI3MDIwMDUyWhcNMjUwNDI4MDIwMDUyWjAzMTEwLwYDVQQD
EyhhNTFjMDU1MWE0Y2JjYTFkZjZiNjJkMDFhMmIzMDA4NDJhMDViYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUzaZnH1IHShfXHCwkxeAGmudnod
PtiL87pwitiZmZA2W2ykdI7Bze8BUw7Fo4RuYVbvk8P6dfqO4s9+f/C2w3nYBRlx
v0LH5K0lxHshOmZyLPiaphZrXyVB/I70+c5gB15oDzB3M0LGd9nn7Dqfc226V9ul
QffH2X7/v9g5RPb6fsfJhIOds3AkGTth8/sJtqbC7zxDRRKrWMGq6raR75gOcFU1
v9M9yOAyvlXazPI1nZPWuKi2B1DI81l4uE8adA+qxXFSvEy6NnwJYn+8dqCRq0vZ
SmTiOvuDUbgzW3P1tBdi3/PGrYg8t4mXn+kep28LMGXGlTxp9bYLxhtJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUcBVGky8od9rYtAaKzAIQqBbs3MB8GA1UdIwQY
MBaAFGI6sYIM5IxXnaQMZthSZfHCz8tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDIt
NmMzZDExZDQwZDc4LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDItNmMzZDExZDQwZDc4
LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2aV21c5
X2uWehm248Oc9Qih2U2sqVHSBakxno1FvU8jBW+pLMir4ehPWpOjnCtXaJls6esx
+hcyGK6rhAWXTaAHJNe203akqjr8II2+yF/tYsrEfNWbFe4Nbj2HKs8YpVrbRfcl
wQ1PAxC3KIs1On16577D1o23/FlkHQ40u+3UQtcvwprWmPcCSIOEIzBFX0bYfHu8
jOoJQcvwt6zpqkSV6fifBW4dsBScA7mafXo1Vaxm2bYpGsdzhH7yFTBRoP26kivv
meGhNp6RIDmBA2zd3njSSiRIR4NqIxOo6+5NXDBUi+grsJTNF6T4ZsEliV1Y1oy2
Vl2ZvYH65Y3MAg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:31 2025 by rpki-client