
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: YTti772gOAZGmJ7mmttp3PE+qNHvOs3fnt3eW0lxZhw=
Subject key identifier: 20:C7:45:03:76:7F:6F:E8:9D:A4:A3:B1:E3:95:AB:53:B0:A7:08:79
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 0196760CBF439FBECB4A90419EB7D53661B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 0416
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: Rk0w6tCyGpeVFLsn/PauiFLNSNZJ4ZYqLyhxhqVB1go=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:bf:43:9f:be:cb:4a:90:41:9e:b7:d5:36:61:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=20c74503767f6fe89da4a3b1e395ab53b0a70879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:1f:05:75:a3:51:fd:df:4c:55:0c:23:c0:
05:0a:85:95:1a:5c:30:34:8e:8e:25:ca:2c:7b:37:
df:ce:d4:e9:9e:38:9c:3e:1e:2a:e3:5e:da:54:53:
37:c2:f5:bd:b2:34:8f:79:1e:ac:03:5a:0d:45:5e:
ff:a8:69:35:76:26:b7:a8:d6:f2:6b:3d:7d:86:3b:
fc:f6:63:8e:45:df:18:4e:59:2d:d3:80:9a:83:18:
b6:cb:c2:6f:4d:ea:85:df:aa:08:d7:dd:86:4a:fd:
c1:52:46:b2:21:cc:4e:dd:d4:1d:ef:8a:37:14:11:
2f:6f:19:08:b4:55:44:11:26:17:a0:b1:1a:e6:34:
52:2e:90:f4:20:4e:aa:4b:7a:21:c6:28:a2:b9:58:
ca:c5:da:d4:83:8e:7c:c5:36:19:11:6f:2c:48:cc:
21:42:c3:09:35:6a:0f:68:e2:2e:87:c5:9e:81:cc:
70:a4:01:22:2b:65:fc:fb:28:e7:f1:0c:a5:5e:bb:
c5:5b:bd:1e:b7:6a:11:ad:2a:d0:63:53:9c:f6:97:
61:07:4a:e4:69:e4:33:8e:fa:8d:bd:c9:89:d1:e1:
74:83:17:e9:6c:3b:0a:2d:b6:a1:58:0d:ac:42:70:
7d:1b:67:d9:72:0d:6f:c3:fd:0c:ed:f5:d8:8a:b0:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:45:03:76:7F:6F:E8:9D:A4:A3:B1:E3:95:AB:53:B0:A7:08:79
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f7:ad:58:f2:da:d1:ea:bd:4e:f1:41:27:09:92:a8:f3:21:
ab:26:d6:55:51:2c:36:37:52:87:97:87:44:16:c3:f5:08:12:
24:03:a6:75:7d:42:90:e7:43:c7:08:5c:6f:e3:1f:e6:0d:e0:
6b:0e:26:80:27:a1:3e:29:f0:a3:d4:2d:d9:8e:7f:31:b8:5c:
83:ca:87:f9:1e:b9:56:26:3b:2a:17:49:88:57:f0:c7:8a:e7:
9e:f4:66:c6:b3:70:7b:2f:e1:65:84:65:6a:d9:a5:33:3a:be:
b7:7b:8a:4b:bb:c3:93:cf:4e:f6:d9:b7:e3:b3:33:4b:aa:e0:
cc:1e:f4:cb:e9:c9:00:25:07:de:29:5d:a3:a9:c1:6a:3c:40:
1b:44:b1:5a:6e:c5:ef:a3:82:83:9d:b2:ee:d7:c9:17:f1:77:
86:0f:72:3b:0e:d7:5b:34:08:da:2e:bd:2e:2f:93:39:67:44:
e5:48:05:7e:bb:fa:3f:32:63:ca:0d:d8:24:35:cd:66:30:1d:
52:76:3d:e1:ae:fc:18:84:0a:10:03:55:ba:3c:47:58:1c:ed:
7e:7e:4a:2e:cd:bf:91:67:b6:ed:e7:c2:bf:81:64:0d:76:84:
5e:70:9a:a7:22:fc:19:7d:cb:20:83:46:07:f1:4d:4b:31:88:
b4:e3:f4:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DL9Dn77LSpBBnrfVNmG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3
MjRlODIwHhcNMjUwNDI3MDcwMTA4WhcNMjUwNDI4MDcwMTA4WjAzMTEwLwYDVQQD
EygyMGM3NDUwMzc2N2Y2ZmU4OWRhNGEzYjFlMzk1YWI1M2IwYTcwODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdIfBXWjUf3fTFUMI8AFCoWVGlww
NI6OJcosezffztTpnjicPh4q417aVFM3wvW9sjSPeR6sA1oNRV7/qGk1dia3qNby
az19hjv89mOORd8YTlkt04Cagxi2y8JvTeqF36oI192GSv3BUkayIcxO3dQd74o3
FBEvbxkItFVEESYXoLEa5jRSLpD0IE6qS3ohxiiiuVjKxdrUg458xTYZEW8sSMwh
QsMJNWoPaOIuh8WegcxwpAEiK2X8+yjn8QylXrvFW70et2oRrSrQY1Oc9pdhB0rk
aeQzjvqNvcmJ0eF0gxfpbDsKLbahWA2sQnB9G2fZcg1vw/0M7fXYirBKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDHRQN2f2/onaSjseOVq1Owpwh5MB8GA1UdIwQY
MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt
Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi
LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPetWPLa
0eq9TvFBJwmSqPMhqybWVVEsNjdSh5eHRBbD9QgSJAOmdX1CkOdDxwhcb+Mf5g3g
aw4mgCehPinwo9Qt2Y5/Mbhcg8qH+R65ViY7KhdJiFfwx4rnnvRmxrNwey/hZYRl
atmlMzq+t3uKS7vDk89O9tm347MzS6rgzB70y+nJACUH3ildo6nBajxAG0SxWm7F
76OCg52y7tfJF/F3hg9yOw7XWzQI2i69Li+TOWdE5UgFfrv6PzJjyg3YJDXNZjAd
UnY94a78GIQKEANVujxHWBztfn5KLs2/kWe27efCv4FkDXaEXnCapyL8GX3LIING
B/FNSzGItOP0jw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:16:32 2025 by rpki-client