Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: iy/miqHOyY/kv6Kk3QkNabfniyyoc4XTgMAJuaGDflU=
Subject key identifier: C5:EA:AC:90:E9:CA:42:9D:5F:F0:7C:46:68:4E:15:01:94:5F:5E:E4
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 01968359EFF8991DE93A483194EDEF1B5369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 0F31
Signing time: Tue 29 Apr 2025 21:00:31 +0000
Manifest this update: Tue 29 Apr 2025 21:00:31 +0000
Manifest next update: Wed 30 Apr 2025 21:00:31 +0000
Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: YcOgjHdAaGeHH8DLYH5EPUbrltULZ82KkqD2KFEOt7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:ef:f8:99:1d:e9:3a:48:31:94:ed:ef:1b:53:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Apr 29 21:00:31 2025 GMT
Not After : Apr 30 21:00:31 2025 GMT
Subject: CN=c5eaac90e9ca429d5ff07c46684e1501945f5ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:8b:b7:a4:92:30:b0:2c:b7:1a:a3:f7:bd:
16:bc:67:1e:63:01:2c:ce:a7:1f:58:ff:58:85:97:
9f:07:2d:03:a2:5c:c7:39:ff:11:1b:56:27:2c:2e:
60:ae:a4:20:e6:c5:d7:31:34:3b:85:bd:37:60:c3:
11:d1:6e:62:d2:8a:a0:0e:1e:a0:c9:2a:5c:22:b4:
7d:a8:dc:94:bf:86:5f:10:3c:42:20:81:bf:d3:17:
2b:97:81:e7:64:a1:45:69:e5:1c:6a:7d:1d:91:56:
ea:ed:be:b8:ee:0b:81:aa:fa:8f:87:44:ea:c5:d9:
19:2f:e2:45:0d:e5:37:cf:1b:63:12:76:d9:48:c8:
03:d3:07:4f:5c:b6:c5:91:69:03:ee:62:f5:cc:21:
7c:ac:d4:ec:7d:76:6b:ab:55:c3:f3:f7:95:ea:e1:
a5:26:18:57:9e:84:9f:c4:7e:a8:db:6a:15:7e:d7:
1a:97:15:22:b4:f4:16:2d:d8:2d:c2:56:b6:1a:65:
e8:11:ed:62:89:99:3d:86:dd:ef:3e:da:3e:05:f8:
cd:f7:5a:00:85:84:5e:4f:2e:b5:a7:d0:eb:29:a7:
80:e4:ab:b2:54:d1:48:18:60:7c:34:8a:18:da:8d:
60:44:ac:03:1d:35:a5:14:9a:2a:07:89:67:3e:9a:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:AC:90:E9:CA:42:9D:5F:F0:7C:46:68:4E:15:01:94:5F:5E:E4
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9c:0f:cd:c8:3a:ee:81:fc:b4:f8:cb:92:2c:f9:a1:53:12:
26:53:7a:44:e9:9b:c1:f1:35:04:b0:da:5f:79:65:cc:85:16:
cd:05:a4:11:10:b6:4c:d2:2d:fd:ff:68:4b:eb:a9:25:08:93:
2a:60:5e:52:df:46:8c:8b:69:21:6e:a3:aa:e8:6d:ae:a3:7e:
8f:50:00:58:d7:d0:14:a4:69:90:f1:83:b4:58:f5:b5:93:7c:
93:5e:75:57:37:e4:15:5e:4a:4b:d0:8a:5b:e8:f0:8d:f8:04:
2c:9d:12:6a:d5:32:0a:0d:a3:2c:86:26:5c:b7:92:47:82:f9:
9b:b5:11:d3:e9:62:4e:c0:b6:a1:d0:f0:a0:52:cd:a3:17:82:
15:3f:41:85:8a:91:38:6c:92:79:3b:a1:13:fc:1f:4a:cc:b3:
3c:f8:d0:76:d4:b2:c9:eb:10:f8:32:83:11:bf:5a:2d:4c:4b:
69:4f:80:c9:18:8c:77:b2:b2:9b:34:fd:cf:f7:99:9d:42:d3:
bf:b3:d1:1b:d9:83:ee:51:15:b8:72:d7:b5:ed:3d:7d:0e:c4:
a3:b5:84:6c:77:8d:9c:3c:3a:f1:a0:cb:11:48:03:b4:99:e9:
77:8f:76:a5:b1:36:65:14:6f:e3:df:18:ff:2e:3d:c4:d3:eb:
5c:36:81:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDWe/4mR3pOkgxlO3vG1NpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2I2ODk1ZmU0OTkzMzk3YjY2MjMyYmIwYTJkM2UzYzYy
NWNjMWIwHhcNMjUwNDI5MjEwMDMxWhcNMjUwNDMwMjEwMDMxWjAzMTEwLwYDVQQD
EyhjNWVhYWM5MGU5Y2E0MjlkNWZmMDdjNDY2ODRlMTUwMTk0NWY1ZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iyLt6SSMLAstxqj970WvGceYwEs
zqcfWP9YhZefBy0DolzHOf8RG1YnLC5grqQg5sXXMTQ7hb03YMMR0W5i0oqgDh6g
ySpcIrR9qNyUv4ZfEDxCIIG/0xcrl4HnZKFFaeUcan0dkVbq7b647guBqvqPh0Tq
xdkZL+JFDeU3zxtjEnbZSMgD0wdPXLbFkWkD7mL1zCF8rNTsfXZrq1XD8/eV6uGl
JhhXnoSfxH6o22oVftcalxUitPQWLdgtwla2GmXoEe1iiZk9ht3vPto+BfjN91oA
hYReTy61p9DrKaeA5KuyVNFIGGB8NIoY2o1gRKwDHTWlFJoqB4lnPpqcFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXqrJDpykKdX/B8RmhOFQGUX17kMB8GA1UdIwQY
MBaAFGM7aJX+SZM5e2YjK7Ci0+PGJcwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yZmM0MGEtNTVlMy00YWJhLTkxYjUt
NzBiODg3MWI4ZTIwLzEvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yZmM0MGEtNTVlMy00YWJhLTkxYjUtNzBiODg3MWI4ZTIw
LzEvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5wPzcg6
7oH8tPjLkiz5oVMSJlN6ROmbwfE1BLDaX3llzIUWzQWkERC2TNIt/f9oS+upJQiT
KmBeUt9GjItpIW6jquhtrqN+j1AAWNfQFKRpkPGDtFj1tZN8k151VzfkFV5KS9CK
W+jwjfgELJ0SatUyCg2jLIYmXLeSR4L5m7UR0+liTsC2odDwoFLNoxeCFT9BhYqR
OGySeTuhE/wfSsyzPPjQdtSyyesQ+DKDEb9aLUxLaU+AyRiMd7KymzT9z/eZnULT
v7PRG9mD7lEVuHLXte09fQ7Eo7WEbHeNnDw68aDLEUgDtJnpd492pbE2ZRRv498Y
/y49xNPrXDaBQQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:48:28 2025 by rpki-client