Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: qL3uncwC7qgjJg5NOkb0u0dM/529OlLuYcUZLS7BUVM=
Subject key identifier: 98:A7:B4:BC:B4:0B:AB:89:A5:8D:44:80:06:08:E1:6A:ED:06:4D:C2
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019678315DA0EF5B15BF1E38217AC0B3006F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0B94
Signing time: Sun 27 Apr 2025 17:00:23 +0000
Manifest this update: Sun 27 Apr 2025 17:00:23 +0000
Manifest next update: Mon 28 Apr 2025 17:00:23 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: Ys+n5nR4gDt5EG3vX91IvoW4ie3R734KkvOTXBUVsMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:5d:a0:ef:5b:15:bf:1e:38:21:7a:c0:b3:00:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Apr 27 17:00:23 2025 GMT
Not After : Apr 28 17:00:23 2025 GMT
Subject: CN=98a7b4bcb40bab89a58d44800608e16aed064dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:ab:49:ce:3b:60:f1:2c:0c:0b:15:ac:3c:
76:82:9d:44:90:34:33:68:a4:6d:05:92:e7:89:ab:
a8:e4:0a:69:30:a6:b8:5a:52:fa:cd:81:51:f7:fe:
ca:15:0d:75:e8:da:af:79:19:91:7c:cd:a4:62:b1:
de:ac:71:a3:88:e5:67:06:79:07:a8:6f:64:9b:3d:
5a:54:56:e8:2b:3d:e2:cf:24:bd:27:ab:6d:b9:7d:
79:e8:87:e8:4b:41:41:db:7a:6f:b7:10:0a:57:21:
1e:b2:94:e6:0f:56:a9:52:2f:10:bb:2d:fe:7a:9e:
01:f9:f6:07:01:e4:68:fd:d6:5e:aa:ad:22:e4:14:
3d:cb:77:c1:93:ba:d6:8a:c0:30:58:11:b5:3f:d5:
5d:ca:ee:ca:73:df:38:18:08:57:0b:1c:46:36:b6:
7b:2b:fe:0c:15:ff:bc:cc:17:a1:98:bf:fc:ab:13:
21:80:c4:9d:b9:8c:91:5a:9e:b2:fe:de:fa:01:86:
43:c4:02:d5:96:57:89:3b:a0:8d:90:06:f8:b0:28:
3f:d8:f7:eb:0c:75:d1:48:18:24:95:ee:ba:bc:c1:
02:26:74:f3:4d:dc:ba:7d:6f:c1:9c:03:b5:28:c2:
94:22:b4:54:8b:69:d8:19:ee:71:38:75:22:99:06:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:B4:BC:B4:0B:AB:89:A5:8D:44:80:06:08:E1:6A:ED:06:4D:C2
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:2c:28:b2:69:ac:44:28:e8:c4:1e:c5:13:39:3e:7e:9f:
22:89:bb:64:61:0c:59:1b:26:a4:f8:59:32:e3:3d:bc:74:ea:
2c:48:e5:b0:92:8e:7b:17:27:a2:f5:84:ad:e8:b3:24:cf:60:
e4:62:bc:4f:14:80:34:da:51:ae:3c:76:42:88:b6:57:7d:9b:
e7:6c:8e:78:f9:83:5d:45:2e:41:86:62:e0:d7:58:5e:74:a7:
a9:50:7d:6c:3d:02:39:e3:18:53:aa:3d:28:c8:1e:da:df:4c:
0b:2b:4f:75:56:1d:84:c8:3b:f1:06:22:03:cb:bd:ed:c1:66:
ee:2d:9d:9f:b5:15:99:be:08:1b:5a:ab:7d:b5:5b:ad:da:c5:
16:f6:c3:ae:92:54:0d:1b:23:75:d2:18:2a:59:a0:cf:d1:b6:
9c:d9:48:d9:c2:f3:ac:48:1c:c6:b9:70:c0:d1:1c:a2:45:60:
a0:2b:51:a5:78:35:f6:e3:18:f4:b7:f4:54:f4:26:4b:73:60:
65:81:91:3c:bb:09:fc:fe:a8:1a:4e:f2:a1:3f:22:56:b6:cc:
28:b3:25:e6:03:00:6f:06:4b:70:9b:0b:05:cc:3a:9b:a4:fc:
e7:40:92:fa:0d:06:5f:1a:53:1b:47:aa:8f:32:3a:2b:cb:06:
63:0e:58:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MV2g71sVvx44IXrAswBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjUwNDI3MTcwMDIzWhcNMjUwNDI4MTcwMDIzWjAzMTEwLwYDVQQD
Eyg5OGE3YjRiY2I0MGJhYjg5YTU4ZDQ0ODAwNjA4ZTE2YWVkMDY0ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy+rSc47YPEsDAsVrDx2gp1EkDQz
aKRtBZLniauo5AppMKa4WlL6zYFR9/7KFQ116NqveRmRfM2kYrHerHGjiOVnBnkH
qG9kmz1aVFboKz3izyS9J6ttuX156IfoS0FB23pvtxAKVyEespTmD1apUi8Quy3+
ep4B+fYHAeRo/dZeqq0i5BQ9y3fBk7rWisAwWBG1P9Vdyu7Kc984GAhXCxxGNrZ7
K/4MFf+8zBehmL/8qxMhgMSduYyRWp6y/t76AYZDxALVlleJO6CNkAb4sCg/2Pfr
DHXRSBgkle66vMECJnTzTdy6fW/BnAO1KMKUIrRUi2nYGe5xOHUimQY5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJintLy0C6uJpY1EgAYI4WrtBk3CMB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbEsKLJp
rEQo6MQexRM5Pn6fIom7ZGEMWRsmpPhZMuM9vHTqLEjlsJKOexcnovWEreizJM9g
5GK8TxSANNpRrjx2Qoi2V32b52yOePmDXUUuQYZi4NdYXnSnqVB9bD0COeMYU6o9
KMge2t9MCytPdVYdhMg78QYiA8u97cFm7i2dn7UVmb4IG1qrfbVbrdrFFvbDrpJU
DRsjddIYKlmgz9G2nNlI2cLzrEgcxrlwwNEcokVgoCtRpXg19uMY9Lf0VPQmS3Ng
ZYGRPLsJ/P6oGk7yoT8iVrbMKLMl5gMAbwZLcJsLBcw6m6T850CS+g0GXxpTG0eq
jzI6K8sGYw5Y6g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:38 2025 by rpki-client