Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: c0IRGAd+MFNfxTQptxryc1ksNS5ElJcVD2pLZ79G8kE=
Subject key identifier: 0F:27:20:30:94:B5:21:D4:5A:2A:BE:12:51:4D:D2:C7:8B:4A:8D:6E
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 019674C2D5EDFBC21C4DF8FA8BE65753CB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 01:00:47 +0000
Manifest this update: Sun 27 Apr 2025 01:00:47 +0000
Manifest next update: Mon 28 Apr 2025 01:00:47 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: P1l7q7pIhyrEfexBtb0kCexNZZqTNrhD9dbuWETqiwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:d5:ed:fb:c2:1c:4d:f8:fa:8b:e6:57:53:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Apr 27 01:00:47 2025 GMT
Not After : Apr 28 01:00:47 2025 GMT
Subject: CN=0f27203094b521d45a2abe12514dd2c78b4a8d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:6e:6e:05:5d:61:2d:cf:22:47:20:52:19:
ab:04:55:e3:2b:c6:6b:08:48:ec:eb:3e:42:1d:74:
19:c0:f8:f8:7a:40:08:50:ec:9e:c5:2f:a6:1b:3d:
37:ad:05:4b:6f:14:de:bb:bd:9e:1c:7c:12:84:c1:
fc:7f:71:9f:0b:a7:5b:f0:06:eb:3b:62:4b:5f:83:
e1:af:55:96:a4:0c:e1:07:a0:d7:4a:92:c4:6c:81:
a3:39:df:e2:03:ce:2b:d9:0e:6c:29:4a:69:56:ba:
a6:79:ff:b7:0e:b2:d5:d2:62:6f:47:94:94:2a:02:
bc:f0:08:f9:0c:59:a2:b2:27:09:13:bc:cf:cd:56:
a1:6c:c2:ae:2a:3f:4e:25:1e:92:b0:7f:1b:05:c3:
1b:b1:27:02:09:3e:d3:ce:d4:49:fe:df:01:e9:f9:
8e:55:eb:f3:0b:e8:f9:6f:e5:d8:5d:79:3c:0c:22:
ee:21:b2:74:d2:e5:1d:df:3d:66:8c:c8:02:76:22:
63:b8:fa:6b:4a:3b:d9:f7:6b:ab:ec:6c:34:1b:24:
48:16:61:5b:bf:3e:e4:ed:99:e3:69:7d:54:ed:33:
cd:cc:29:a3:d1:e0:6d:58:7a:b6:07:95:85:b5:b3:
d2:ae:1c:0a:e8:22:f9:8e:94:08:fd:f8:44:85:14:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:20:30:94:B5:21:D4:5A:2A:BE:12:51:4D:D2:C7:8B:4A:8D:6E
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:0c:b0:92:fc:2c:a6:c6:42:a2:e9:c0:e4:8a:89:81:11:
f4:e6:42:1f:b4:32:ae:09:df:49:99:8a:d0:04:f9:76:be:1d:
18:7b:dd:ce:8e:d4:22:60:d0:f3:bf:d9:37:29:ec:71:41:08:
45:13:23:49:9e:89:86:12:e0:90:0e:b0:0d:7b:11:41:7b:05:
0f:08:2e:34:ae:00:0f:06:04:89:6e:3f:9f:16:4e:46:22:25:
ea:03:21:23:32:28:c8:b0:9a:4b:3b:fd:8f:68:f2:bc:f0:ab:
a9:b8:35:d5:29:9c:45:f2:bb:95:0d:7a:a6:ba:5d:1f:29:5b:
f0:e9:20:60:d5:bc:38:4c:48:7f:09:35:07:42:e0:28:04:6d:
d9:b0:aa:b4:a7:c9:b0:9e:6b:e6:4e:c3:30:01:35:19:b7:e0:
7b:c1:08:03:1d:98:0d:a4:3a:dc:15:30:a8:6c:21:e2:ea:ee:
d7:c8:42:77:0e:6e:09:af:99:b5:31:1c:be:d1:5b:63:c2:05:
0d:c7:34:5e:32:b4:d7:a8:74:c3:4b:f0:85:6f:4a:45:75:3f:
c2:f4:68:58:14:5a:b3:23:03:75:5b:dc:68:38:f2:22:67:b0:
15:7b:a4:1f:8f:60:86:ff:8f:ee:c4:61:1a:bd:fc:2e:95:93:
b2:9f:8c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wtXt+8IcTfj6i+ZXU8tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm
YjI0NzAwHhcNMjUwNDI3MDEwMDQ3WhcNMjUwNDI4MDEwMDQ3WjAzMTEwLwYDVQQD
EygwZjI3MjAzMDk0YjUyMWQ0NWEyYWJlMTI1MTRkZDJjNzhiNGE4ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCtubgVdYS3PIkcgUhmrBFXjK8Zr
CEjs6z5CHXQZwPj4ekAIUOyexS+mGz03rQVLbxTeu72eHHwShMH8f3GfC6db8Abr
O2JLX4Phr1WWpAzhB6DXSpLEbIGjOd/iA84r2Q5sKUppVrqmef+3DrLV0mJvR5SU
KgK88Aj5DFmisicJE7zPzVahbMKuKj9OJR6SsH8bBcMbsScCCT7TztRJ/t8B6fmO
VevzC+j5b+XYXXk8DCLuIbJ00uUd3z1mjMgCdiJjuPprSjvZ92ur7Gw0GyRIFmFb
vz7k7ZnjaX1U7TPNzCmj0eBtWHq2B5WFtbPSrhwK6CL5jpQI/fhEhRQK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8nIDCUtSHUWiq+ElFN0seLSo1uMB8GA1UdIwQY
MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt
ZmJhNDliMGNkZGVkLzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk
LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNwMsJL8
LKbGQqLpwOSKiYER9OZCH7QyrgnfSZmK0AT5dr4dGHvdzo7UImDQ87/ZNynscUEI
RRMjSZ6JhhLgkA6wDXsRQXsFDwguNK4ADwYEiW4/nxZORiIl6gMhIzIoyLCaSzv9
j2jyvPCrqbg11SmcRfK7lQ16prpdHylb8OkgYNW8OExIfwk1B0LgKARt2bCqtKfJ
sJ5r5k7DMAE1Gbfge8EIAx2YDaQ63BUwqGwh4uru18hCdw5uCa+ZtTEcvtFbY8IF
Dcc0XjK016h0w0vwhW9KRXU/wvRoWBRasyMDdVvcaDjyImewFXukH49ghv+P7sRh
Gr38LpWTsp+MaA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:54 2025 by rpki-client