Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: P46fPgs04ost0KTnLoIn/IES1ErNVx9HX9hAh9QHDXU=
Subject key identifier: 80:93:99:1B:F8:63:48:6A:5F:9B:17:B8:E0:A0:72:7A:1B:9C:9F:62
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 01967C45422764E8B7A170F06C0359A143D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1519
Signing time: Mon 28 Apr 2025 12:00:35 +0000
Manifest this update: Mon 28 Apr 2025 12:00:35 +0000
Manifest next update: Tue 29 Apr 2025 12:00:35 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: tFZYZg0j5L+tgJoBFNvOYgEoiD8m1aSO07lnWIzz43k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:42:27:64:e8:b7:a1:70:f0:6c:03:59:a1:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Apr 28 12:00:35 2025 GMT
Not After : Apr 29 12:00:35 2025 GMT
Subject: CN=8093991bf863486a5f9b17b8e0a0727a1b9c9f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:e5:58:2a:09:a0:4b:09:57:7f:fe:e2:cc:
f3:ae:19:93:98:2e:73:92:fb:64:3f:16:8f:a5:3c:
16:06:93:f2:f6:1b:ce:4b:2d:eb:93:f7:3e:72:91:
c6:d8:2a:c0:54:cc:62:e4:80:21:d0:a9:51:73:21:
7c:16:ee:ba:65:bd:70:13:76:39:25:95:39:47:54:
1d:fb:40:aa:8c:c0:91:8c:82:ee:81:2a:42:93:ba:
87:c4:cc:5a:09:dc:6d:e4:c4:8a:1f:ac:fd:c3:eb:
04:a3:07:7d:f4:ae:d2:eb:47:45:e5:5a:3f:10:58:
24:f7:2b:da:77:17:97:e0:f1:71:8f:d2:6f:7f:18:
8d:6d:91:1d:f3:7c:6f:4f:ad:6c:89:43:8c:15:68:
22:f2:62:c9:da:f3:10:80:4e:c3:46:c5:a9:a9:dc:
a3:31:ff:98:a4:e6:fb:7f:fb:2e:3f:a5:f5:34:43:
b3:6b:f2:d8:8c:33:cd:13:de:0a:73:de:44:c0:a1:
63:82:a2:07:f7:39:3c:1b:d4:90:bc:69:36:c3:39:
63:5a:5c:e2:bc:f7:f6:2f:f6:35:55:10:4e:ec:1b:
bf:2b:12:61:55:8a:24:c3:0c:09:83:71:2c:95:85:
cc:e8:bb:bd:c1:a8:bc:21:fc:70:b3:61:1f:42:67:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:93:99:1B:F8:63:48:6A:5F:9B:17:B8:E0:A0:72:7A:1B:9C:9F:62
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:e0:3c:68:a6:e6:01:9b:0e:26:56:e2:e2:83:55:54:08:
0e:8f:a5:a8:63:c1:1a:d1:88:1a:e9:57:b5:90:92:e3:ec:ff:
7d:c2:65:41:09:7e:05:af:a1:e0:e8:61:10:6c:d4:bb:f3:58:
0f:ac:a2:4c:a7:48:b6:31:77:80:07:0b:a6:36:c1:06:93:3a:
c7:58:9b:58:a8:53:40:ba:65:91:11:67:bf:62:5b:b7:01:2b:
2f:f0:a6:5d:09:24:9c:a3:65:8b:b8:9e:02:6f:d4:23:35:e2:
47:7a:bd:57:b6:4d:5f:81:01:41:29:26:5a:57:e4:aa:e1:d7:
b6:e1:56:41:39:a8:bc:e2:3b:f5:50:a4:4c:ab:38:18:59:05:
12:ba:4a:f6:48:fa:27:7c:91:49:87:2a:8f:f0:a5:a8:93:52:
7e:f7:de:ab:e9:6d:29:60:b2:a3:34:8b:3b:c4:0d:76:cc:58:
b5:09:0b:4c:70:dd:a7:2e:10:89:e8:32:eb:bb:c3:03:f5:1b:
80:2c:4b:92:ce:56:1b:cd:3d:46:0a:58:c5:b5:17:90:7f:a0:
4e:5e:b6:b1:10:89:e0:a8:96:02:96:ac:5b:b8:92:c8:13:95:
18:6f:5a:f0:7f:83:5a:9e:52:32:17:11:fd:05:f0:47:ac:be:
c9:5e:2f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RUInZOi3oXDwbANZoUPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy
OTdlMjUwHhcNMjUwNDI4MTIwMDM1WhcNMjUwNDI5MTIwMDM1WjAzMTEwLwYDVQQD
Eyg4MDkzOTkxYmY4NjM0ODZhNWY5YjE3YjhlMGEwNzI3YTFiOWM5ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqijlWCoJoEsJV3/+4szzrhmTmC5z
kvtkPxaPpTwWBpPy9hvOSy3rk/c+cpHG2CrAVMxi5IAh0KlRcyF8Fu66Zb1wE3Y5
JZU5R1Qd+0CqjMCRjILugSpCk7qHxMxaCdxt5MSKH6z9w+sEowd99K7S60dF5Vo/
EFgk9yvadxeX4PFxj9JvfxiNbZEd83xvT61siUOMFWgi8mLJ2vMQgE7DRsWpqdyj
Mf+YpOb7f/suP6X1NEOza/LYjDPNE94Kc95EwKFjgqIH9zk8G9SQvGk2wzljWlzi
vPf2L/Y1VRBO7Bu/KxJhVYokwwwJg3EslYXM6Lu9wai8Ifxws2EfQmfE6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICTmRv4Y0hqX5sXuOCgcnobnJ9iMB8GA1UdIwQY
MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt
YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm
LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK/gPGim
5gGbDiZW4uKDVVQIDo+lqGPBGtGIGulXtZCS4+z/fcJlQQl+Ba+h4OhhEGzUu/NY
D6yiTKdItjF3gAcLpjbBBpM6x1ibWKhTQLplkRFnv2JbtwErL/CmXQkknKNli7ie
Am/UIzXiR3q9V7ZNX4EBQSkmWlfkquHXtuFWQTmovOI79VCkTKs4GFkFErpK9kj6
J3yRSYcqj/ClqJNSfvfeq+ltKWCyozSLO8QNdsxYtQkLTHDdpy4Qiegy67vDA/Ub
gCxLks5WG809RgpYxbUXkH+gTl62sRCJ4KiWApasW7iSyBOVGG9a8H+DWp5SMhcR
/QXwR6y+yV4vwg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:38 2025 by rpki-client