Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: m/gGCM0akYGw7ciOdmuuIv47vN74294vTtWOwDEgMCI=
Subject key identifier: A7:ED:EE:30:2C:77:14:AA:77:98:77:AB:D3:35:D3:69:68:05:68:8E
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 019681A2AD0D669A67A6A12C5BCA50AED4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 13:00:44 +0000
Manifest this update: Tue 29 Apr 2025 13:00:44 +0000
Manifest next update: Wed 30 Apr 2025 13:00:44 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: 5G+oJ14q5TbKZjXGtm5QRK3JSVR0De6PVOVypi8TUgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:ad:0d:66:9a:67:a6:a1:2c:5b:ca:50:ae:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Apr 29 13:00:44 2025 GMT
Not After : Apr 30 13:00:44 2025 GMT
Subject: CN=a7edee302c7714aa779877abd335d3696805688e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:fc:b7:99:43:f1:a8:20:fd:93:19:51:e6:
72:95:f7:63:e6:5e:06:e5:09:59:be:98:b5:67:bc:
fc:7b:36:62:89:b5:39:60:36:b8:a7:e4:26:3a:de:
26:0c:bf:57:44:51:92:03:9d:6a:74:17:19:47:88:
e3:b1:38:9a:c6:5a:b0:f2:e4:04:88:df:f2:ae:fd:
12:a1:4c:d8:86:53:a8:2c:22:e3:1a:d6:a8:73:44:
bc:9e:69:6a:0c:a9:a7:bc:98:2b:94:6d:c5:8f:07:
03:c4:67:98:d9:ad:06:48:ac:25:73:ac:7e:13:f8:
9b:7c:91:8a:a5:cf:1a:89:1d:61:35:c6:f2:2b:4f:
15:de:67:1f:b2:56:43:fb:ff:08:88:3a:89:95:75:
91:8f:3f:e4:46:c9:80:dd:7d:54:e0:a4:eb:02:5a:
64:6e:6f:76:ff:3d:24:5a:44:53:ce:49:dc:67:51:
e0:00:9f:95:59:07:75:b8:dd:6d:10:74:dc:02:2a:
27:e0:ec:55:2b:e7:11:96:88:61:62:f3:a6:5a:b4:
89:d8:4c:a5:3a:b7:5e:dd:ab:f5:08:7b:b5:75:f7:
d3:90:d9:54:a4:08:66:60:54:09:f2:65:39:d4:ea:
81:42:4f:f6:62:8b:76:03:f5:56:f6:80:76:99:7e:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:EE:30:2C:77:14:AA:77:98:77:AB:D3:35:D3:69:68:05:68:8E
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d1:82:49:89:1b:12:8d:21:0a:62:03:7e:86:17:a4:61:b4:
46:09:f4:45:26:8b:9c:70:35:0c:13:6b:63:c6:19:47:b5:4e:
72:1f:c1:ce:4a:e6:43:51:50:42:0a:0a:15:4b:01:0f:76:97:
fc:8d:d6:9e:bf:70:4d:46:df:43:23:46:d4:70:6b:7b:0d:1b:
a3:4d:d6:cd:ce:5b:90:c9:0f:cd:76:6f:30:0f:83:fc:15:4e:
ab:78:db:bd:84:c8:8d:83:89:cd:b3:5c:26:d3:2a:8c:4e:80:
61:9d:a6:49:a9:1e:68:da:30:2a:59:09:40:89:b7:e9:cc:10:
dc:ef:10:d5:96:ca:49:8c:8a:fc:ca:f6:83:06:a1:1a:2e:51:
06:9e:f9:10:35:da:37:29:87:46:89:bf:e2:2f:4c:c6:e4:db:
c8:75:4d:cd:1c:4d:86:6e:b4:1e:86:ec:6d:3c:1d:00:4b:63:
38:16:54:d0:c3:4c:4f:f4:34:38:9b:6a:61:fa:35:30:20:03:
bd:e4:e9:3f:37:fa:8c:10:20:25:2d:c2:88:8d:0c:b1:2c:90:
c5:2c:11:55:4b:39:1b:9f:03:a1:9d:ea:e3:1d:8e:36:7c:43:
56:2b:40:ab:6a:8f:4d:36:5f:cf:5c:98:45:e3:44:24:db:b4:
cd:fa:9f:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBoq0NZppnpqEsW8pQrtTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWQ0NDNmODVkMGVlYzY2MzY0Y2Q3NTM2ZjE4ODg4YWMx
Zjk5ZTMwHhcNMjUwNDI5MTMwMDQ0WhcNMjUwNDMwMTMwMDQ0WjAzMTEwLwYDVQQD
EyhhN2VkZWUzMDJjNzcxNGFhNzc5ODc3YWJkMzM1ZDM2OTY4MDU2ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSv8t5lD8agg/ZMZUeZylfdj5l4G
5QlZvpi1Z7z8ezZiibU5YDa4p+QmOt4mDL9XRFGSA51qdBcZR4jjsTiaxlqw8uQE
iN/yrv0SoUzYhlOoLCLjGtaoc0S8nmlqDKmnvJgrlG3FjwcDxGeY2a0GSKwlc6x+
E/ibfJGKpc8aiR1hNcbyK08V3mcfslZD+/8IiDqJlXWRjz/kRsmA3X1U4KTrAlpk
bm92/z0kWkRTzkncZ1HgAJ+VWQd1uN1tEHTcAion4OxVK+cRlohhYvOmWrSJ2Eyl
Orde3av1CHu1dffTkNlUpAhmYFQJ8mU51OqBQk/2Yot2A/VW9oB2mX7DvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKft7jAsdxSqd5h3q9M102loBWiOMB8GA1UdIwQY
MBaAFMjtRD+F0O7GY2TNdTbxiIisH5njMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYt
NmQwNDMxMGUzNDJiLzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYtNmQwNDMxMGUzNDJi
LzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtGCSYkb
Eo0hCmIDfoYXpGG0Rgn0RSaLnHA1DBNrY8YZR7VOch/BzkrmQ1FQQgoKFUsBD3aX
/I3Wnr9wTUbfQyNG1HBrew0bo03Wzc5bkMkPzXZvMA+D/BVOq3jbvYTIjYOJzbNc
JtMqjE6AYZ2mSakeaNowKlkJQIm36cwQ3O8Q1ZbKSYyK/Mr2gwahGi5RBp75EDXa
NymHRom/4i9MxuTbyHVNzRxNhm60HobsbTwdAEtjOBZU0MNMT/Q0OJtqYfo1MCAD
veTpPzf6jBAgJS3CiI0MsSyQxSwRVUs5G58DoZ3q4x2ONnxDVitAq2qPTTZfz1yY
ReNEJNu0zfqfLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:19:01 2025 by rpki-client