Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: BPerT0MiTa/EmOtQZDxQV2xTstNouGYmo93C0NhGsUA=
Subject key identifier: F5:F2:5E:20:E5:1C:61:D4:4E:2B:DA:17:94:88:A4:88:A9:ED:5D:25
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 01967454D89061BBBEEA83073DC8667A7B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0DFB
Signing time: Sat 26 Apr 2025 23:00:39 +0000
Manifest this update: Sat 26 Apr 2025 23:00:39 +0000
Manifest next update: Sun 27 Apr 2025 23:00:39 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: S82GqtdRah3o33xErz53BEYxSCdiuwD4IxBGZEOCyeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:d8:90:61:bb:be:ea:83:07:3d:c8:66:7a:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Apr 26 23:00:39 2025 GMT
Not After : Apr 27 23:00:39 2025 GMT
Subject: CN=f5f25e20e51c61d44e2bda179488a488a9ed5d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:41:e5:68:05:e8:07:6a:e1:88:22:13:89:
22:d5:cd:e9:5a:13:ec:91:6c:c9:d9:bb:2b:5c:f1:
f9:68:30:fa:4e:8d:da:8e:99:53:08:56:d7:23:f8:
11:5b:ff:e8:93:6b:12:ba:42:1c:17:9b:b2:38:8a:
3c:c7:36:fe:bc:50:56:0a:74:e9:f4:9a:d2:bc:c0:
6f:74:8f:42:30:c2:83:25:21:30:f0:a5:39:c1:97:
62:31:fa:3a:7f:51:c0:98:f4:3d:44:07:ff:3d:4c:
81:7f:a5:49:b8:d6:5e:79:11:f1:f7:ba:c1:04:7e:
cc:ab:9b:30:20:45:41:13:da:1a:2d:e2:b4:49:ef:
45:d0:09:81:1d:b2:58:40:8a:3b:df:85:8f:1d:46:
95:d7:09:4f:6c:50:5e:a6:8f:38:8b:bc:2c:8e:56:
09:ac:f9:5e:2f:32:ab:0b:2b:9b:02:50:0e:f6:31:
94:84:5b:98:8a:14:5b:42:25:6a:8e:7a:25:a2:51:
98:5e:75:80:45:8b:03:90:89:59:f9:f9:68:c4:50:
2b:38:e4:d2:f8:27:67:29:86:91:f4:83:13:0a:99:
54:26:cd:14:a0:32:1e:d6:84:99:be:f8:46:53:02:
9c:52:96:0c:5b:f8:92:b7:42:65:33:b9:08:b5:61:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F2:5E:20:E5:1C:61:D4:4E:2B:DA:17:94:88:A4:88:A9:ED:5D:25
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:d2:17:53:55:95:d0:b8:a5:45:ea:8f:a5:17:25:b2:4c:
b2:4c:9b:6b:c3:76:82:60:a9:bc:ce:de:8a:c5:33:87:13:0b:
68:de:ee:7e:e2:0b:d7:46:a3:73:7f:d1:f7:e9:3a:70:3f:4e:
94:ca:c4:8f:73:7c:67:d4:1a:f9:6e:b9:c5:6a:d4:0c:2d:ee:
62:de:5c:6d:80:f9:f6:35:95:63:ce:fc:aa:38:67:c4:bb:c6:
16:46:99:ac:0e:52:5d:bb:01:aa:d7:89:4d:5c:e3:13:ce:8b:
90:4c:17:64:ae:07:e5:9b:50:1c:67:7f:f7:b3:f6:74:e0:71:
8e:08:69:1e:18:3c:ac:7f:48:45:1f:03:f8:56:09:9b:9f:88:
bc:84:62:f9:80:ef:a3:f6:31:85:cd:57:aa:f6:87:40:da:a8:
5f:43:e1:e5:af:cd:50:65:e8:5a:a8:de:fc:e3:f3:6c:42:57:
79:e3:6f:1a:11:a9:70:b8:cf:f1:5a:81:7a:ad:09:53:9b:43:
aa:e5:ac:48:6a:93:e2:8f:60:29:95:ae:87:2b:c5:1b:5e:8f:
00:f1:7f:1e:ef:c4:0c:43:15:04:83:88:e0:3c:2b:49:7d:6f:
b6:45:a9:4d:66:aa:b5:4f:eb:10:c9:77:88:8b:d3:71:55:77:
05:0b:ac:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VNiQYbu+6oMHPchmenueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj
MzlmMzQwHhcNMjUwNDI2MjMwMDM5WhcNMjUwNDI3MjMwMDM5WjAzMTEwLwYDVQQD
EyhmNWYyNWUyMGU1MWM2MWQ0NGUyYmRhMTc5NDg4YTQ4OGE5ZWQ1ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9B5WgF6Adq4YgiE4ki1c3pWhPs
kWzJ2bsrXPH5aDD6To3ajplTCFbXI/gRW//ok2sSukIcF5uyOIo8xzb+vFBWCnTp
9JrSvMBvdI9CMMKDJSEw8KU5wZdiMfo6f1HAmPQ9RAf/PUyBf6VJuNZeeRHx97rB
BH7Mq5swIEVBE9oaLeK0Se9F0AmBHbJYQIo734WPHUaV1wlPbFBepo84i7wsjlYJ
rPleLzKrCyubAlAO9jGUhFuYihRbQiVqjnololGYXnWARYsDkIlZ+floxFArOOTS
+CdnKYaR9IMTCplUJs0UoDIe1oSZvvhGUwKcUpYMW/iSt0JlM7kItWHTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXyXiDlHGHUTivaF5SIpIip7V0lMB8GA1UdIwQY
MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt
MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi
LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8DSF1NV
ldC4pUXqj6UXJbJMskyba8N2gmCpvM7eisUzhxMLaN7ufuIL10ajc3/R9+k6cD9O
lMrEj3N8Z9Qa+W65xWrUDC3uYt5cbYD59jWVY878qjhnxLvGFkaZrA5SXbsBqteJ
TVzjE86LkEwXZK4H5ZtQHGd/97P2dOBxjghpHhg8rH9IRR8D+FYJm5+IvIRi+YDv
o/Yxhc1XqvaHQNqoX0Ph5a/NUGXoWqje/OPzbEJXeeNvGhGpcLjP8VqBeq0JU5tD
quWsSGqT4o9gKZWuhyvFG16PAPF/Hu/EDEMVBIOI4DwrSX1vtkWpTWaqtU/rEMl3
iIvTcVV3BQusoQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:09 2025 by rpki-client