Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: R0Wl8YyMi4p90kbCbEmS8VefYJL7Kn6QxikszstbCOM=
Subject key identifier: FF:BD:03:FA:C3:0D:B8:F6:B9:1E:10:16:CE:51:EE:D0:7F:02:EE:9F
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 0196869238AC80EB5B4136F4956162DF97E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 0FDB
Signing time: Wed 30 Apr 2025 12:00:51 +0000
Manifest this update: Wed 30 Apr 2025 12:00:51 +0000
Manifest next update: Thu 01 May 2025 12:00:51 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: OXPNzFfloaDNTk/2daqMHf8vwN/vHzIy4CVTergGfxA=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:92:38:ac:80:eb:5b:41:36:f4:95:61:62:df:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Apr 30 12:00:51 2025 GMT
Not After : May 1 12:00:51 2025 GMT
Subject: CN=ffbd03fac30db8f6b91e1016ce51eed07f02ee9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:17:3e:ea:29:2f:9a:54:48:e7:0b:ac:5a:
23:70:19:f9:0e:a7:25:c7:89:78:eb:9e:9b:f7:68:
ff:bd:99:d6:85:4c:64:aa:4d:0e:94:df:62:c9:f2:
0c:85:cb:11:72:0d:2c:9d:a8:74:ad:5b:14:ec:52:
fd:f4:07:28:c3:7f:2d:53:30:67:97:7d:22:89:b2:
f3:3d:ca:6e:00:b5:78:8a:d0:3c:86:12:91:43:15:
f2:6d:7b:60:ef:3d:14:6d:ef:cc:5d:2a:d0:5b:2a:
ac:eb:e6:e1:87:83:4c:41:19:59:ab:2e:99:06:ff:
4a:b0:b9:75:3a:0a:5f:4f:23:80:49:ce:4f:2d:a2:
58:82:41:c3:37:38:9f:26:8f:c3:db:92:47:b5:0d:
df:c8:31:c0:b6:f0:9e:06:04:4b:ac:01:e6:2d:c3:
e3:72:d1:47:c4:fb:72:b3:b7:4b:8b:25:c5:be:0d:
49:ba:94:0b:f0:b2:45:b6:c3:67:3e:33:b6:ff:12:
41:e8:73:71:2e:bd:e7:89:e2:68:25:ee:d4:42:06:
96:32:74:d8:bd:46:4f:5a:df:fe:0c:12:77:78:14:
10:e4:80:31:e5:0d:e4:63:d2:9e:44:17:4e:7a:d9:
ff:9e:0b:da:ab:1c:2d:14:f1:43:1d:db:04:38:59:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:03:FA:C3:0D:B8:F6:B9:1E:10:16:CE:51:EE:D0:7F:02:EE:9F
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e4:6a:35:d7:53:36:21:90:fa:79:fb:df:55:f3:91:a1:b7:
63:61:59:88:f3:b2:e8:2b:c7:f5:9a:66:5b:40:02:9a:99:dc:
d5:d7:d7:75:46:01:91:31:84:78:e5:45:d8:75:7d:d7:69:5e:
af:cb:89:ed:7c:f6:13:41:15:29:a3:0a:be:fb:10:f7:9c:5c:
e4:c0:18:9f:b3:29:89:08:7d:c5:b6:4c:7b:84:91:25:01:fe:
a2:06:8f:75:35:b0:5e:cf:a8:28:3e:56:56:70:43:2f:6f:ff:
d0:90:3c:5d:15:93:28:b3:40:36:2e:3c:ff:44:6d:98:f5:1e:
9d:8d:43:99:0f:11:58:7d:ee:e4:db:67:f6:97:54:d6:20:34:
03:4f:08:33:da:34:e5:c0:34:08:2a:86:5a:fb:b0:6c:2f:95:
91:ae:86:78:06:bc:95:d2:c1:9c:61:aa:49:44:cd:e4:7b:15:
68:0f:f9:12:ff:8b:28:08:cd:91:32:45:19:58:04:81:aa:84:
d8:bc:48:c0:37:f0:f1:d8:b5:63:fe:3e:ec:c0:2d:2a:aa:05:
a0:90:65:19:37:93:6f:1c:e5:88:85:be:fa:bf:5e:9d:1a:11:
53:b9:f5:d2:e3:a6:51:de:dd:6f:d7:49:eb:36:5a:75:40:fc:
35:0e:51:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGkjisgOtbQTb0lWFi35foMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3
MjA3NjIwHhcNMjUwNDMwMTIwMDUxWhcNMjUwNTAxMTIwMDUxWjAzMTEwLwYDVQQD
EyhmZmJkMDNmYWMzMGRiOGY2YjkxZTEwMTZjZTUxZWVkMDdmMDJlZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUkXPuopL5pUSOcLrFojcBn5Dqcl
x4l4656b92j/vZnWhUxkqk0OlN9iyfIMhcsRcg0snah0rVsU7FL99Acow38tUzBn
l30iibLzPcpuALV4itA8hhKRQxXybXtg7z0Ube/MXSrQWyqs6+bhh4NMQRlZqy6Z
Bv9KsLl1OgpfTyOASc5PLaJYgkHDNzifJo/D25JHtQ3fyDHAtvCeBgRLrAHmLcPj
ctFHxPtys7dLiyXFvg1JupQL8LJFtsNnPjO2/xJB6HNxLr3nieJoJe7UQgaWMnTY
vUZPWt/+DBJ3eBQQ5IAx5Q3kY9KeRBdOetn/ngvaqxwtFPFDHdsEOFkT8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+9A/rDDbj2uR4QFs5R7tB/Au6fMB8GA1UdIwQY
MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt
N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk
LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeRqNddT
NiGQ+nn731XzkaG3Y2FZiPOy6CvH9ZpmW0ACmpnc1dfXdUYBkTGEeOVF2HV912le
r8uJ7Xz2E0EVKaMKvvsQ95xc5MAYn7MpiQh9xbZMe4SRJQH+ogaPdTWwXs+oKD5W
VnBDL2//0JA8XRWTKLNANi48/0RtmPUenY1DmQ8RWH3u5Ntn9pdU1iA0A08IM9o0
5cA0CCqGWvuwbC+Vka6GeAa8ldLBnGGqSUTN5HsVaA/5Ev+LKAjNkTJFGVgEgaqE
2LxIwDfw8di1Y/4+7MAtKqoFoJBlGTeTbxzliIW++r9enRoRU7n10uOmUd7db9dJ
6zZadUD8NQ5RgQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:39 2025 by rpki-client