Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: EBBQc2QoCjOD9157tQf/oF9XuhUYg709Vd1nZlS36No=
Subject key identifier: 16:24:9A:DA:F9:43:57:42:23:E4:82:FD:82:AB:B8:3C:86:37:B0:1B
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 0196718AC932C17D885944D9E4E438E944FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 0F73
Signing time: Sat 26 Apr 2025 10:00:42 +0000
Manifest this update: Sat 26 Apr 2025 10:00:42 +0000
Manifest next update: Sun 27 Apr 2025 10:00:42 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: fjoPzDgWbFBdKCVVs24i+3Ws66KbVXaFoCg/CccWKns=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:c9:32:c1:7d:88:59:44:d9:e4:e4:38:e9:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Apr 26 10:00:42 2025 GMT
Not After : Apr 27 10:00:42 2025 GMT
Subject: CN=16249adaf943574223e482fd82abb83c8637b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:d3:80:cd:47:96:61:b5:e6:d6:59:1a:19:
49:1c:f8:c7:39:2c:4b:c6:61:b1:98:76:73:23:33:
e9:a8:77:7c:e7:4c:ed:f9:89:9b:7c:f4:ab:6a:53:
64:4b:1a:33:15:93:55:6f:8c:47:6d:b4:3f:ab:4b:
5f:c0:d6:b6:88:e7:ca:ac:43:48:30:7a:ff:cc:95:
b0:35:40:cb:fd:b8:39:57:82:47:68:a6:89:e0:cd:
8b:4f:be:c7:18:22:dc:5c:54:4c:6e:26:e8:60:74:
b7:58:ec:eb:1b:d2:4c:eb:71:43:01:9c:0c:20:50:
7e:cd:6f:a4:74:4e:1f:b7:a2:18:d2:66:19:94:3d:
46:ee:48:f7:ae:a1:1c:48:a3:9a:f7:c6:8f:26:ca:
bd:e4:c7:d7:96:01:8b:fc:07:b3:d6:24:ab:24:05:
0c:a1:2c:8e:1a:f0:d8:ae:e5:89:f6:70:94:b4:30:
83:fe:94:2e:c0:4d:6b:95:a4:af:05:4e:50:d9:09:
7f:8f:94:0e:02:c2:c9:69:3e:f4:8d:79:fe:15:1a:
c9:51:f8:e6:8d:81:19:fe:af:d3:4f:78:aa:8b:e2:
a1:33:8a:75:0e:5a:b1:20:a1:3c:27:9b:b5:94:06:
57:22:fc:09:7e:cc:b5:aa:e4:4f:d2:de:c9:3b:a9:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:9A:DA:F9:43:57:42:23:E4:82:FD:82:AB:B8:3C:86:37:B0:1B
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:05:7f:ae:1e:05:19:93:d5:39:04:6a:30:4b:92:93:a5:
ee:3e:d5:41:18:72:29:9b:ea:7c:2c:b4:7f:18:37:38:17:3e:
88:a4:05:cb:6b:3c:05:73:88:ee:85:88:68:84:aa:45:ae:6e:
78:7e:31:d8:9a:94:1c:64:8d:04:e9:68:02:db:d3:d1:d9:38:
f6:ac:32:34:61:6a:71:8d:63:79:aa:e7:40:b0:80:2c:84:5d:
f4:1d:c7:53:62:b5:ce:53:b9:3a:0f:bd:23:9f:a5:3f:15:bf:
3a:db:38:50:60:13:ea:b1:6a:37:36:74:e9:07:64:d7:71:dd:
ba:a9:28:03:44:04:c1:24:ad:75:31:ae:fc:35:11:bd:1f:e2:
14:8b:d8:c5:24:12:fb:3c:00:3f:fc:79:fc:9a:31:70:3d:98:
94:78:b6:29:5b:db:5e:e9:4b:87:56:2a:34:d3:56:ee:12:6b:
0e:8e:bf:e3:da:5e:92:80:ee:49:7c:ce:a7:fd:f9:4b:ea:ad:
4f:18:b9:bb:43:5c:9d:58:da:4f:be:d7:a1:4d:71:ab:67:44:
e2:21:6d:ca:72:c6:b3:00:a3:4f:a7:ed:b4:5d:25:6d:57:9d:
6f:2c:32:ba:c5:eb:f2:01:ac:e0:72:90:dc:3b:b5:e4:92:11:
c1:37:01:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxiskywX2IWUTZ5OQ46UT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk
MjE2NjYwHhcNMjUwNDI2MTAwMDQyWhcNMjUwNDI3MTAwMDQyWjAzMTEwLwYDVQQD
EygxNjI0OWFkYWY5NDM1NzQyMjNlNDgyZmQ4MmFiYjgzYzg2MzdiMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz3TgM1HlmG15tZZGhlJHPjHOSxL
xmGxmHZzIzPpqHd850zt+YmbfPSralNkSxozFZNVb4xHbbQ/q0tfwNa2iOfKrENI
MHr/zJWwNUDL/bg5V4JHaKaJ4M2LT77HGCLcXFRMbiboYHS3WOzrG9JM63FDAZwM
IFB+zW+kdE4ft6IY0mYZlD1G7kj3rqEcSKOa98aPJsq95MfXlgGL/Aez1iSrJAUM
oSyOGvDYruWJ9nCUtDCD/pQuwE1rlaSvBU5Q2Ql/j5QOAsLJaT70jXn+FRrJUfjm
jYEZ/q/TT3iqi+KhM4p1DlqxIKE8J5u1lAZXIvwJfsy1quRP0t7JO6nluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYkmtr5Q1dCI+SC/YKruDyGN7AbMB8GA1UdIwQY
MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt
YTgxNTQ0ZWE1YjY3LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3
LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv0Ff64e
BRmT1TkEajBLkpOl7j7VQRhyKZvqfCy0fxg3OBc+iKQFy2s8BXOI7oWIaISqRa5u
eH4x2JqUHGSNBOloAtvT0dk49qwyNGFqcY1jearnQLCALIRd9B3HU2K1zlO5Og+9
I5+lPxW/Ots4UGAT6rFqNzZ06Qdk13HduqkoA0QEwSStdTGu/DURvR/iFIvYxSQS
+zwAP/x5/JoxcD2YlHi2KVvbXulLh1YqNNNW7hJrDo6/49pekoDuSXzOp/35S+qt
Txi5u0NcnVjaT77XoU1xq2dE4iFtynLGswCjT6fttF0lbVedbywyusXr8gGs4HKQ
3Du15JIRwTcBMw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:29 2025 by rpki-client