
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File: Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier: prgxCHxSrQp3J7b/5LGFooWab1KT+a7qIc1RStO+WRA=
Subject key identifier: B2:20:62:E5:58:DF:EC:50:81:FB:54:23:09:2F:49:D8:38:7E:64:5B
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 0196778CD6AAC6F5D1243749FB2B090ED93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number: 1214
Signing time: Sun 27 Apr 2025 14:00:40 +0000
Manifest this update: Sun 27 Apr 2025 14:00:40 +0000
Manifest next update: Mon 28 Apr 2025 14:00:40 +0000
Files and hashes: 1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: xNAnPt5lquLsR4ozYTs7qWMAm6gGIFjt8J+TrMCFvy0=)
2: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (hash: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:d6:aa:c6:f5:d1:24:37:49:fb:2b:09:0e:d9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Apr 27 14:00:40 2025 GMT
Not After : Apr 28 14:00:40 2025 GMT
Subject: CN=b22062e558dfec5081fb5423092f49d8387e645b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d4:ff:02:e6:ca:12:32:f2:a9:f6:da:ce:4e:
fa:e8:d6:68:13:1a:27:96:d2:b2:87:d6:a6:51:b6:
08:c6:29:97:da:74:4a:0b:e5:6d:f8:7d:fa:75:58:
98:b4:8d:3d:9a:38:2b:ba:6f:a1:9c:1e:0c:9d:de:
53:22:e9:47:b7:7e:ec:4c:23:cd:60:ab:58:3c:40:
4c:07:8f:51:0c:e9:07:38:8c:02:12:62:3c:be:6f:
d3:6c:48:ee:1a:0f:2a:02:a0:28:6c:a7:73:cc:ce:
66:0b:f2:40:76:5f:ce:e7:7d:dc:d5:b4:89:ef:bc:
22:61:89:28:e2:38:03:85:9f:ef:81:9f:eb:bb:3d:
dd:8d:4b:0e:30:1f:d3:e8:1c:f9:aa:65:7a:4c:ca:
41:f4:a0:6b:e1:59:6f:63:a7:7f:62:08:88:b4:e4:
d2:85:05:d8:08:af:a0:90:cd:59:43:0c:fb:b4:90:
7f:99:c3:5f:78:68:9f:e9:10:ae:c7:9e:ab:cb:ad:
69:55:d9:a7:24:d8:83:fc:8b:0e:72:35:8a:34:ce:
56:64:6b:f3:cd:0d:90:4b:45:6e:b8:b7:7e:6d:b2:
6a:b6:ed:d6:10:18:ed:34:a4:73:61:7a:f9:62:16:
78:66:10:5e:a3:cc:b6:cb:c8:20:ea:59:c2:14:98:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:62:E5:58:DF:EC:50:81:FB:54:23:09:2F:49:D8:38:7E:64:5B
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:bb:4c:44:96:71:8f:71:13:27:8a:c7:77:94:91:e8:f5:db:
66:7f:1c:0d:32:69:6c:a3:7a:99:b4:fe:61:f5:fe:ba:6c:ca:
99:f3:e6:4f:1c:ad:5e:d2:63:d1:6c:8e:fd:f5:c7:c1:f3:6f:
b0:27:3e:e4:44:ce:86:88:4b:7a:61:1e:23:43:69:9b:50:95:
00:90:5e:a5:09:50:78:e9:53:58:1d:bd:48:7c:59:5d:5c:90:
54:32:f8:bd:a0:d9:de:1d:a4:09:c8:1e:f9:5d:5d:6a:82:d4:
37:11:c2:bc:75:0f:97:0b:a1:7e:64:f3:b6:58:08:e1:59:c8:
c3:6a:fd:70:1c:19:79:b7:1e:da:77:90:83:50:ca:3b:70:55:
e6:54:15:d5:51:6a:0b:81:d4:c1:f1:fe:5d:7a:c8:b7:c4:16:
22:b1:f2:05:9e:6b:0f:35:98:f5:a9:a5:20:d8:64:5f:f1:2b:
ea:20:16:9f:fb:9f:42:fa:92:d9:d1:75:c8:b5:77:36:d9:37:
e3:2b:77:39:88:98:b1:65:04:b9:75:28:6f:63:bf:d4:45:16:
7c:42:7b:14:c0:91:4d:7b:58:97:a2:9a:8a:2e:2d:9e:52:ff:
eb:45:aa:5c:e7:50:a7:fd:24:42:f0:26:d1:79:e2:e4:42:dd:
4a:3a:4b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jNaqxvXRJDdJ+ysJDtk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzAzY2E1MGM0MzJhY2Q3ZjFjYmJhN2MwN2RhMjIwMjI5
OWNhNjMwHhcNMjUwNDI3MTQwMDQwWhcNMjUwNDI4MTQwMDQwWjAzMTEwLwYDVQQD
EyhiMjIwNjJlNTU4ZGZlYzUwODFmYjU0MjMwOTJmNDlkODM4N2U2NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dT/AubKEjLyqfbazk766NZoExon
ltKyh9amUbYIximX2nRKC+Vt+H36dViYtI09mjgrum+hnB4Mnd5TIulHt37sTCPN
YKtYPEBMB49RDOkHOIwCEmI8vm/TbEjuGg8qAqAobKdzzM5mC/JAdl/O533c1bSJ
77wiYYko4jgDhZ/vgZ/ruz3djUsOMB/T6Bz5qmV6TMpB9KBr4VlvY6d/YgiItOTS
hQXYCK+gkM1ZQwz7tJB/mcNfeGif6RCux56ry61pVdmnJNiD/IsOcjWKNM5WZGvz
zQ2QS0VuuLd+bbJqtu3WEBjtNKRzYXr5YhZ4ZhBeo8y2y8gg6lnCFJj6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIgYuVY3+xQgftUIwkvSdg4fmRbMB8GA1UdIwQY
MBaAFGNwPKUMQyrNfxy7p8B9oiAimcpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNBOHBReERLczFfSEx1bndIMmlJQ0taeW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hZjMzNGEtZjliMy00MTlkLWI1OTAt
ZmIwZmIxYzA2Yzc0LzEvWTNBOHBReERLczFfSEx1bndIMmlJQ0taeW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9hZjMzNGEtZjliMy00MTlkLWI1OTAtZmIwZmIxYzA2Yzc0
LzEvWTNBOHBReERLczFfSEx1bndIMmlJQ0taeW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3rtMRJZx
j3ETJ4rHd5SR6PXbZn8cDTJpbKN6mbT+YfX+umzKmfPmTxytXtJj0WyO/fXHwfNv
sCc+5ETOhohLemEeI0Npm1CVAJBepQlQeOlTWB29SHxZXVyQVDL4vaDZ3h2kCcge
+V1daoLUNxHCvHUPlwuhfmTztlgI4VnIw2r9cBwZebce2neQg1DKO3BV5lQV1VFq
C4HUwfH+XXrIt8QWIrHyBZ5rDzWY9amlINhkX/Er6iAWn/ufQvqS2dF1yLV3Ntk3
4yt3OYiYsWUEuXUob2O/1EUWfEJ7FMCRTXtYl6Kaii4tnlL/60WqXOdQp/0kQvAm
0Xni5ELdSjpLXg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:57:41 2025 by rpki-client