Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: Sz5u9PSHz4kaxMzvMdYtHvf4pQsEZo3TQBGLR8UgQ+Q=
Subject key identifier: 85:4A:D4:C6:79:00:93:C5:85:3D:21:02:DA:44:25:93:35:D8:BD:D6
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 019685ED34D2F59FC2642EEB932DA463E929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 148C
Signing time: Wed 30 Apr 2025 09:00:37 +0000
Manifest this update: Wed 30 Apr 2025 09:00:37 +0000
Manifest next update: Thu 01 May 2025 09:00:37 +0000
Files and hashes: 1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: b0TU5wJ7Uh7IZwC5t1H/DtfaaA9s5OJLC5KKP5I6SrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:34:d2:f5:9f:c2:64:2e:eb:93:2d:a4:63:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Apr 30 09:00:37 2025 GMT
Not After : May 1 09:00:37 2025 GMT
Subject: CN=854ad4c6790093c5853d2102da44259335d8bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:95:fd:4e:02:3d:e3:32:79:21:f2:bd:ec:
ef:67:8d:38:42:ee:b6:a2:cc:a8:44:ec:1d:c5:d4:
cd:18:00:bb:45:c9:50:26:e2:40:1e:72:6e:22:bf:
ea:9f:97:54:31:c5:3c:ab:55:f6:d6:81:06:b0:97:
ed:a2:64:06:44:a9:ad:fd:8d:6d:eb:d1:0f:8b:ef:
21:96:3e:54:8d:3e:d9:95:0f:79:53:ab:81:a4:90:
88:dd:72:26:da:2d:79:e4:ff:23:9e:81:b4:ad:ff:
a1:d5:99:33:26:ce:15:29:d6:48:10:b6:de:0e:56:
c5:08:43:e1:ff:ba:08:e5:d0:1d:b9:f5:b3:f2:f6:
c2:b0:85:3d:b9:11:d2:99:b4:a1:67:ea:74:b7:1a:
d7:68:ea:bf:95:63:c5:36:79:ce:60:3a:f7:b0:fc:
a7:f2:be:df:d1:5d:04:37:79:26:3c:41:a5:1a:f0:
cb:71:80:15:f1:15:de:12:46:a0:82:59:18:c2:96:
c8:2e:22:a1:0f:eb:ff:f0:0b:ee:cf:6e:21:28:b8:
67:91:70:24:22:0a:2d:8b:44:4e:4d:b4:d9:c8:dc:
66:24:b9:40:16:4e:87:bc:60:75:ef:2b:35:fe:32:
16:30:c8:ac:c1:8a:f1:82:62:4f:22:c8:b4:58:98:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:D4:C6:79:00:93:C5:85:3D:21:02:DA:44:25:93:35:D8:BD:D6
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c1:08:89:52:48:5d:c3:2e:49:02:fb:db:b8:cb:03:ea:46:
4c:ed:b2:d8:a0:ff:d5:4a:ba:72:15:02:1e:d3:52:79:9a:43:
16:3b:c6:7e:92:d6:fc:58:27:21:5c:11:9a:89:08:47:91:64:
26:d7:b5:3a:0c:45:87:68:c9:9b:7b:71:1b:9b:a6:e7:9e:18:
c3:2c:ff:dc:71:d8:4c:f1:ca:65:57:f8:8e:57:a0:11:e7:8c:
c6:1d:f0:ab:e0:e9:7b:39:e6:c6:4d:c8:00:5a:8e:e7:2b:c8:
c5:83:f4:64:8b:bf:2b:46:17:1e:70:e5:64:f3:26:13:09:f8:
ae:6b:12:07:25:28:90:1b:d8:b1:aa:e5:eb:87:4c:33:9f:6e:
44:6d:6f:ea:50:7f:80:e2:95:5c:4a:58:31:1b:5f:d2:3d:0d:
0c:59:a1:74:e9:cf:ad:72:51:e6:e5:d3:fc:7f:4c:be:3b:78:
d8:f0:51:39:fc:ca:5d:71:f0:50:f4:e6:19:03:6f:71:cf:36:
13:48:b5:37:24:7d:bd:de:29:e0:c5:d4:aa:e1:bf:31:0f:c2:
43:12:cf:d5:a8:3e:a1:bb:40:cb:91:eb:0f:5d:96:32:ab:0a:
53:a4:da:60:f2:2d:05:21:0d:85:ce:df:96:fc:c3:65:b6:65:
34:2b:2e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaF7TTS9Z/CZC7rky2kY+kpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTUwY2ExNzEzNDgzN2E1MGQzMDYzZDQzZDQ0MzM4NWFi
ZTZmNDkwHhcNMjUwNDMwMDkwMDM3WhcNMjUwNTAxMDkwMDM3WjAzMTEwLwYDVQQD
Eyg4NTRhZDRjNjc5MDA5M2M1ODUzZDIxMDJkYTQ0MjU5MzM1ZDhiZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9yV/U4CPeMyeSHyvezvZ404Qu62
osyoROwdxdTNGAC7RclQJuJAHnJuIr/qn5dUMcU8q1X21oEGsJftomQGRKmt/Y1t
69EPi+8hlj5UjT7ZlQ95U6uBpJCI3XIm2i155P8jnoG0rf+h1ZkzJs4VKdZIELbe
DlbFCEPh/7oI5dAdufWz8vbCsIU9uRHSmbShZ+p0txrXaOq/lWPFNnnOYDr3sPyn
8r7f0V0EN3kmPEGlGvDLcYAV8RXeEkagglkYwpbILiKhD+v/8Avuz24hKLhnkXAk
Igoti0ROTbTZyNxmJLlAFk6HvGB17ys1/jIWMMiswYrxgmJPIsi0WJhtowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVK1MZ5AJPFhT0hAtpEJZM12L3WMB8GA1UdIwQY
MBaAFMjlDKFxNIN6UNMGPUPUQzhavm9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUt
NWVmZjczZTg5ZmJiLzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUtNWVmZjczZTg5ZmJi
LzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosEIiVJI
XcMuSQL727jLA+pGTO2y2KD/1Uq6chUCHtNSeZpDFjvGfpLW/FgnIVwRmokIR5Fk
Jte1OgxFh2jJm3txG5um554Ywyz/3HHYTPHKZVf4jlegEeeMxh3wq+Dpeznmxk3I
AFqO5yvIxYP0ZIu/K0YXHnDlZPMmEwn4rmsSByUokBvYsarl64dMM59uRG1v6lB/
gOKVXEpYMRtf0j0NDFmhdOnPrXJR5uXT/H9Mvjt42PBROfzKXXHwUPTmGQNvcc82
E0i1NyR9vd4p4MXUquG/MQ/CQxLP1ag+obtAy5HrD12WMqsKU6TaYPItBSENhc7f
lvzDZbZlNCsuSA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:28:29 2025 by rpki-client