Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: zQEdyYLZpu13AOkTugOcADU1zyrOlwT2wvCFRes2cnE=
Subject key identifier: B3:93:FB:5C:4C:1F:0A:24:7B:5D:88:44:08:32:D2:37:AA:F3:C6:C1
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 01967CB2D4F4534B7D2076D8B92A7857A51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 0E32
Signing time: Mon 28 Apr 2025 14:00:16 +0000
Manifest this update: Mon 28 Apr 2025 14:00:16 +0000
Manifest next update: Tue 29 Apr 2025 14:00:16 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: lue5OOCXCV9w2fmvLP5NpyMdh/OZtDPJK6wTWMUPCT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:d4:f4:53:4b:7d:20:76:d8:b9:2a:78:57:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Apr 28 14:00:16 2025 GMT
Not After : Apr 29 14:00:16 2025 GMT
Subject: CN=b393fb5c4c1f0a247b5d88440832d237aaf3c6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:ff:2a:97:64:90:7d:0a:19:5f:48:d2:80:
30:e7:3a:2e:65:3c:e7:c9:cf:0b:d9:45:27:42:69:
d6:23:59:98:d1:a3:1f:fd:dd:7d:8c:27:28:f7:22:
35:f9:c0:bc:63:db:e9:90:01:34:ca:63:92:7e:f9:
11:70:86:e8:c7:ea:d0:20:e3:55:56:f7:14:f2:38:
17:7a:fb:37:9b:89:3f:8f:53:dc:d9:55:c0:4b:d2:
d9:0b:c6:94:f9:12:9a:24:fb:eb:81:03:a7:fe:b6:
8c:90:c6:a9:99:ea:87:c0:01:1d:dc:0a:fe:67:bf:
ee:b3:17:69:25:a8:5a:1e:83:f0:ff:15:ae:55:25:
00:74:37:68:7b:42:48:9c:aa:0c:d6:f2:02:c9:cd:
54:6a:9b:a3:58:98:a1:d0:60:b6:df:97:d2:00:0b:
70:0c:40:d6:3d:d3:9f:07:23:d4:f8:af:57:8d:c1:
00:db:05:df:86:96:52:f2:88:39:fb:41:9d:c1:76:
77:a8:e9:b7:0b:55:36:b5:c1:15:a0:19:71:98:a5:
97:76:c3:b4:32:fd:7c:3e:69:4c:c7:cf:9e:37:72:
85:32:58:d9:78:25:ea:38:c5:89:09:93:7e:2b:96:
13:00:f9:b9:10:d3:71:a0:89:8b:fc:cd:ee:30:2e:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:FB:5C:4C:1F:0A:24:7B:5D:88:44:08:32:D2:37:AA:F3:C6:C1
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:35:1b:84:02:30:9c:c3:40:12:91:99:f7:5b:1b:c9:f0:
93:ca:ac:c0:8d:d1:64:08:13:13:4d:4b:f0:2b:e7:99:10:e3:
b6:08:ed:79:d9:ad:70:5c:7a:a9:c5:8c:fc:d7:44:e0:b8:95:
cc:bb:9d:0b:67:df:68:86:af:8b:b9:f6:94:0c:65:14:b4:5e:
e0:52:82:96:74:f4:34:8e:11:68:b6:c5:5e:4b:b8:3d:f1:88:
f2:f2:48:8c:3f:09:47:28:b7:c2:14:33:97:01:86:2e:40:4b:
a4:77:a0:16:48:79:c5:b1:33:7e:39:db:a1:05:3d:33:0f:7f:
aa:29:32:ce:8c:3b:c4:b3:61:a6:27:5a:65:d2:68:41:44:5e:
1f:b4:ef:e6:4a:89:f2:06:23:2e:53:07:24:7f:32:03:f3:19:
a7:a4:75:e6:f1:86:53:c7:fd:4c:c4:d0:53:e0:e2:b1:8e:52:
d8:89:35:18:c5:32:2c:98:c2:a7:83:71:68:23:16:8f:d4:6b:
4b:51:99:c4:8b:fa:c5:02:0c:da:84:c7:a5:96:43:83:7c:47:
18:bf:eb:d1:42:6a:69:99:49:9a:b8:21:4a:00:92:4d:9b:bd:
40:89:7e:84:67:8d:c9:15:4c:e3:20:e2:7f:88:45:5e:cc:ba:
de:84:9e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8stT0U0t9IHbYuSp4V6UcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1
Y2MzMTIwHhcNMjUwNDI4MTQwMDE2WhcNMjUwNDI5MTQwMDE2WjAzMTEwLwYDVQQD
EyhiMzkzZmI1YzRjMWYwYTI0N2I1ZDg4NDQwODMyZDIzN2FhZjNjNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKr/KpdkkH0KGV9I0oAw5zouZTzn
yc8L2UUnQmnWI1mY0aMf/d19jCco9yI1+cC8Y9vpkAE0ymOSfvkRcIbox+rQIONV
VvcU8jgXevs3m4k/j1Pc2VXAS9LZC8aU+RKaJPvrgQOn/raMkMapmeqHwAEd3Ar+
Z7/usxdpJahaHoPw/xWuVSUAdDdoe0JInKoM1vICyc1UapujWJih0GC235fSAAtw
DEDWPdOfByPU+K9XjcEA2wXfhpZS8og5+0GdwXZ3qOm3C1U2tcEVoBlxmKWXdsO0
Mv18PmlMx8+eN3KFMljZeCXqOMWJCZN+K5YTAPm5ENNxoImL/M3uMC4T+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOT+1xMHwoke12IRAgy0jeq88bBMB8GA1UdIwQY
MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt
MjJjMjdiOTkzYWUyLzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy
LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBI1G4QC
MJzDQBKRmfdbG8nwk8qswI3RZAgTE01L8CvnmRDjtgjtedmtcFx6qcWM/NdE4LiV
zLudC2ffaIavi7n2lAxlFLRe4FKClnT0NI4RaLbFXku4PfGI8vJIjD8JRyi3whQz
lwGGLkBLpHegFkh5xbEzfjnboQU9Mw9/qikyzow7xLNhpidaZdJoQUReH7Tv5kqJ
8gYjLlMHJH8yA/MZp6R15vGGU8f9TMTQU+DisY5S2Ik1GMUyLJjCp4NxaCMWj9Rr
S1GZxIv6xQIM2oTHpZZDg3xHGL/r0UJqaZlJmrghSgCSTZu9QIl+hGeNyRVM4yDi
f4hFXsy63oSewA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:28:52 2025 by rpki-client