Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: 3TSc4aLQ1w2hya3XCo7m6qbeHqYay3sqUx3kUnIWQ3o=
Subject key identifier: 43:28:C9:49:9F:B5:64:0E:A2:F1:34:68:A8:76:1B:09:AB:1F:C7:43
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 0196929653FCCED8D738E1F9FA36B6B06DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 20:00:47 +0000
Manifest this update: Fri 02 May 2025 20:00:47 +0000
Manifest next update: Sat 03 May 2025 20:00:47 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: bjxAxP7ey9Xdfir5m+Pbha6pm5NAibGnIWxlD2cNv5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:96:53:fc:ce:d8:d7:38:e1:f9:fa:36:b6:b0:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: May 2 20:00:47 2025 GMT
Not After : May 3 20:00:47 2025 GMT
Subject: CN=4328c9499fb5640ea2f13468a8761b09ab1fc743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:02:14:7e:bd:49:8d:e5:df:e7:81:f4:cb:
b6:a6:99:6e:f4:21:ca:17:71:b7:42:52:f4:1a:6f:
46:9a:47:d2:b4:68:1b:f7:4d:e1:f5:82:c7:05:74:
07:88:6e:10:8b:d5:45:5e:14:cc:83:7c:ab:e7:20:
ff:6a:06:39:ed:9b:b6:ce:da:34:95:3d:d7:ae:f6:
93:b8:98:fc:f5:53:b6:f0:96:09:b2:b1:46:80:71:
3d:ac:a9:24:ef:5b:e9:74:85:30:ce:27:a1:d5:97:
07:e5:1b:02:d2:78:ac:66:31:8e:75:8c:84:6f:61:
5c:a6:a7:68:f6:e1:d8:df:4f:a9:e2:4e:14:cb:f0:
76:89:93:a1:53:b6:6e:a4:89:02:35:6c:99:cd:1d:
67:80:cb:ce:87:af:11:41:fa:79:17:c2:17:8d:4a:
2e:fe:67:02:34:61:c2:f7:31:42:f4:ce:a0:de:2c:
b5:c0:ce:cf:b6:c3:7a:fe:c4:ba:49:d7:70:dc:4e:
12:8a:cf:22:26:3d:b2:90:c6:4d:d4:09:3e:8d:e2:
c7:cc:47:0a:10:9f:fb:ce:e0:e7:db:3f:38:5d:6a:
04:23:0f:7d:e2:55:1e:a5:71:a0:3f:75:10:9d:2a:
27:80:61:cc:a0:63:59:ff:31:df:32:45:f6:bb:37:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:C9:49:9F:B5:64:0E:A2:F1:34:68:A8:76:1B:09:AB:1F:C7:43
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:00:dd:c0:8d:d4:98:0e:61:59:2a:28:0e:ef:20:d5:f6:66:
16:e0:e7:52:01:05:c2:8d:d4:9b:73:eb:cf:f9:c3:08:8c:0e:
31:0a:2c:d6:01:f4:3f:dd:f9:15:f2:eb:9d:65:79:52:5a:02:
7c:97:11:af:f2:06:80:b0:0c:65:68:7f:c7:73:90:47:c0:c6:
cb:22:58:9c:58:73:97:a8:28:41:a8:6a:75:7e:47:92:eb:e9:
87:50:60:28:4e:d3:c9:f4:55:ef:54:f7:a5:95:bf:3a:43:03:
a3:26:4e:a3:cc:88:cd:c8:b1:14:5d:4e:eb:c2:62:09:5b:ad:
64:0a:f9:bc:e5:da:51:90:d1:e3:b0:1a:aa:32:3e:1b:15:7a:
94:21:c1:e9:73:e9:70:64:19:fc:51:ad:83:b2:57:14:51:47:
66:73:0c:7f:be:3d:20:86:db:85:81:97:b1:dc:14:74:3f:1b:
b9:78:4a:55:22:9f:00:8e:e2:59:e7:7d:97:be:68:e3:0f:6c:
a3:46:52:75:f3:51:97:34:53:03:f6:1e:7d:e1:db:2e:b2:a5:
31:99:40:ba:ab:cc:25:0a:07:c5:5a:06:ef:e4:dd:a7:39:a2:
03:a0:d9:79:67:a4:1c:b9:0a:5e:89:c7:a6:36:b3:de:62:52:
a1:a0:7b:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaSllP8ztjXOOH5+ja2sG3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmYyMDQwZDk0Yzk5NWIwNDYxZGM1MTE0YTRjMDg3MzUx
ZTk5ZjIwHhcNMjUwNTAyMjAwMDQ3WhcNMjUwNTAzMjAwMDQ3WjAzMTEwLwYDVQQD
Eyg0MzI4Yzk0OTlmYjU2NDBlYTJmMTM0NjhhODc2MWIwOWFiMWZjNzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d8CFH69SY3l3+eB9Mu2pplu9CHK
F3G3QlL0Gm9GmkfStGgb903h9YLHBXQHiG4Qi9VFXhTMg3yr5yD/agY57Zu2zto0
lT3XrvaTuJj89VO28JYJsrFGgHE9rKkk71vpdIUwzieh1ZcH5RsC0nisZjGOdYyE
b2Fcpqdo9uHY30+p4k4Uy/B2iZOhU7ZupIkCNWyZzR1ngMvOh68RQfp5F8IXjUou
/mcCNGHC9zFC9M6g3iy1wM7PtsN6/sS6Sddw3E4Sis8iJj2ykMZN1Ak+jeLHzEcK
EJ/7zuDn2z84XWoEIw994lUepXGgP3UQnSongGHMoGNZ/zHfMkX2uzebnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMoyUmftWQOovE0aKh2GwmrH8dDMB8GA1UdIwQY
MBaAFMtvIEDZTJlbBGHcURSkwIc1HpnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYt
MTk4MDhiZjQ0NDcxLzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81MTRhYTUtYzUxZC00OGIxLWFlMDYtMTk4MDhiZjQ0NDcx
LzEveTI4Z1FObE1tVnNFWWR4UkZLVEFoelVlbWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowDdwI3U
mA5hWSooDu8g1fZmFuDnUgEFwo3Um3Prz/nDCIwOMQos1gH0P935FfLrnWV5UloC
fJcRr/IGgLAMZWh/x3OQR8DGyyJYnFhzl6goQahqdX5Hkuvph1BgKE7TyfRV71T3
pZW/OkMDoyZOo8yIzcixFF1O68JiCVutZAr5vOXaUZDR47AaqjI+GxV6lCHB6XPp
cGQZ/FGtg7JXFFFHZnMMf749IIbbhYGXsdwUdD8buXhKVSKfAI7iWed9l75o4w9s
o0ZSdfNRlzRTA/YefeHbLrKlMZlAuqvMJQoHxVoG7+TdpzmiA6DZeWekHLkKXonH
pjaz3mJSoaB7pg==
-----END CERTIFICATE-----
Generated at Fri May 2 23:53:27 2025 by rpki-client