Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: NOUsi0LKev+gDWJQ8dXJsJxkYNd/FkbZR49KHbFt7KM=
Subject key identifier: BB:40:52:F1:5B:74:0A:C3:E5:C1:AB:F6:49:8D:7E:73:5E:86:7C:24
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 019677C3A5B42D220995A7D004A7FE58F915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 15:00:32 +0000
Manifest this update: Sun 27 Apr 2025 15:00:32 +0000
Manifest next update: Mon 28 Apr 2025 15:00:32 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: Ef6KZSPhNBWP6QLuReQfGg7S7WahHHdoQlJ9kl5I7oo=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:a5:b4:2d:22:09:95:a7:d0:04:a7:fe:58:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Apr 27 15:00:32 2025 GMT
Not After : Apr 28 15:00:32 2025 GMT
Subject: CN=bb4052f15b740ac3e5c1abf6498d7e735e867c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:b6:00:37:33:f9:18:8e:93:eb:df:1e:3e:
6f:83:f9:2b:96:b6:53:de:e3:b1:fc:9a:81:3d:fd:
8f:11:a6:77:2f:d1:76:aa:46:98:4e:0e:00:3f:2a:
ba:84:58:7b:0c:14:b0:c0:33:07:07:f4:b5:f4:6a:
68:45:a4:da:6e:77:56:22:12:e8:51:1c:99:b5:fc:
3b:81:de:af:d4:5d:a0:9e:54:74:3b:47:05:01:ff:
dd:21:69:b1:6e:e1:b7:fc:ac:cb:2e:f9:33:3d:4e:
6e:6a:e8:85:cf:4c:e7:3b:fd:8e:35:77:93:66:72:
be:e2:c9:ef:c7:53:b7:24:af:d0:fd:11:f2:78:0a:
f8:f6:60:08:c9:99:97:7e:63:02:53:f7:7d:96:e2:
fc:88:bf:b2:df:36:f2:b7:93:ef:18:d7:c2:eb:58:
93:50:41:f0:03:8e:51:1e:09:fd:5d:4d:ef:a2:65:
58:41:5f:f0:b4:4f:1b:f7:a0:dd:95:0b:a2:8b:21:
83:55:63:1f:ed:0a:10:af:fb:2d:5b:32:f8:06:e9:
dd:30:f2:2f:ac:e2:b7:e8:59:36:4e:7e:4d:3b:a7:
60:56:76:2c:fc:30:c7:ce:46:d7:0c:a6:89:8d:f2:
85:b5:98:56:6c:76:d9:57:aa:4a:e5:bd:e8:57:3b:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:52:F1:5B:74:0A:C3:E5:C1:AB:F6:49:8D:7E:73:5E:86:7C:24
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:64:05:d4:f4:2d:26:cb:b8:58:e2:71:e2:ea:4d:90:d8:2f:
07:e6:53:e1:82:b0:a9:6e:44:84:b5:a0:00:07:52:bb:9f:8b:
ef:47:b9:83:64:17:a2:2b:4e:9a:8b:26:ac:99:41:88:7b:95:
2d:84:38:46:f6:4a:d7:58:d8:08:22:bc:5c:db:6e:62:83:04:
08:5b:00:a4:ce:c7:69:d6:b6:b0:55:77:e9:10:cf:ed:90:ce:
59:05:2e:7c:a0:f2:4e:37:ae:d7:9d:fe:45:87:56:ca:36:2a:
6e:78:5e:bf:33:31:7c:4c:7c:e4:ce:d0:74:53:a3:71:d0:8b:
44:6c:07:5b:dd:e7:22:b9:af:54:f7:24:30:b9:0e:73:07:c5:
4f:8d:0f:e2:ab:46:4f:25:8e:e2:56:62:da:8b:0c:2a:3f:6b:
7e:26:a6:a8:32:a1:ed:2f:fd:99:e6:6c:1a:78:8f:d2:ee:17:
02:fa:8f:fb:ad:e0:60:f5:c5:6a:4a:94:5c:71:be:3a:71:db:
d9:a7:02:62:99:3b:08:a4:b9:19:72:94:14:64:76:9b:ca:fd:
7b:b8:f8:eb:39:de:57:2d:97:6f:ef:9d:54:1e:08:8c:f5:f5:
06:fc:e2:76:08:ed:1e:6c:f8:41:05:02:3b:29:06:b7:e7:8a:
80:71:29:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w6W0LSIJlafQBKf+WPkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw
YWZiMDQwHhcNMjUwNDI3MTUwMDMyWhcNMjUwNDI4MTUwMDMyWjAzMTEwLwYDVQQD
EyhiYjQwNTJmMTViNzQwYWMzZTVjMWFiZjY0OThkN2U3MzVlODY3YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBO2ADcz+RiOk+vfHj5vg/krlrZT
3uOx/JqBPf2PEaZ3L9F2qkaYTg4APyq6hFh7DBSwwDMHB/S19GpoRaTabndWIhLo
URyZtfw7gd6v1F2gnlR0O0cFAf/dIWmxbuG3/KzLLvkzPU5uauiFz0znO/2ONXeT
ZnK+4snvx1O3JK/Q/RHyeAr49mAIyZmXfmMCU/d9luL8iL+y3zbyt5PvGNfC61iT
UEHwA45RHgn9XU3vomVYQV/wtE8b96DdlQuiiyGDVWMf7QoQr/stWzL4BundMPIv
rOK36Fk2Tn5NO6dgVnYs/DDHzkbXDKaJjfKFtZhWbHbZV6pK5b3oVzvj4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtAUvFbdArD5cGr9kmNfnNehnwkMB8GA1UdIwQY
MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt
NjYzNWRlYmMzOTVjLzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj
LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGQF1PQt
Jsu4WOJx4upNkNgvB+ZT4YKwqW5EhLWgAAdSu5+L70e5g2QXoitOmosmrJlBiHuV
LYQ4RvZK11jYCCK8XNtuYoMECFsApM7Hada2sFV36RDP7ZDOWQUufKDyTjeu153+
RYdWyjYqbnhevzMxfEx85M7QdFOjcdCLRGwHW93nIrmvVPckMLkOcwfFT40P4qtG
TyWO4lZi2osMKj9rfiamqDKh7S/9meZsGniP0u4XAvqP+63gYPXFakqUXHG+OnHb
2acCYpk7CKS5GXKUFGR2m8r9e7j46zneVy2Xb++dVB4IjPX1BvzidgjtHmz4QQUC
OykGt+eKgHEpBA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:21 2025 by rpki-client