Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: 5nUIoaD2R8WTRd7gAmuxkvd0bYqlJvKGf6Js4ezjQAo=
Subject key identifier: A4:E0:3A:D8:60:B6:AA:18:D7:73:B9:A0:D1:48:F8:D3:DC:BF:F4:81
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 01968B813B9A43A85B028E171C599D6EB07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0590
Signing time: Thu 01 May 2025 11:00:24 +0000
Manifest this update: Thu 01 May 2025 11:00:24 +0000
Manifest next update: Fri 02 May 2025 11:00:24 +0000
Files and hashes: 1: UfQPCCjVZ9who8V_2ydTobai7pY.roa (hash: IBJI/ZiBDqZiCgT1tzzy136SyaAPb6KafOn0fl7ud1w=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: 54fBU4zpkFz5rHgakXnBiTwdiT/EiBZTqaQ5DzBV1yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:3b:9a:43:a8:5b:02:8e:17:1c:59:9d:6e:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: May 1 11:00:24 2025 GMT
Not After : May 2 11:00:24 2025 GMT
Subject: CN=a4e03ad860b6aa18d773b9a0d148f8d3dcbff481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:d4:ff:dc:15:0c:0b:b6:60:34:db:15:cf:
77:5e:5e:29:fa:ce:70:19:3d:f0:3d:c0:61:27:58:
fc:08:ff:ef:bd:81:be:b5:f2:74:6c:99:fb:b9:a0:
cd:ab:05:c0:24:8e:3b:f9:6d:44:2f:27:5b:bc:ba:
2c:8e:4d:0e:63:ce:94:1b:a0:cc:cd:28:70:23:cc:
42:63:51:9e:5a:1e:9e:35:42:74:b9:ad:77:84:33:
53:6d:b6:22:d1:c5:f1:5b:ed:ae:57:04:cd:50:99:
2a:ce:d8:72:36:12:8a:8d:43:95:66:d6:50:fe:6a:
03:b5:c7:86:f6:69:95:ec:e9:81:e6:5e:86:42:f5:
66:11:96:ee:11:30:8b:4f:dd:26:28:4c:67:a1:a9:
0a:86:c1:8a:7e:2b:a1:82:96:5c:1d:b3:d4:ec:b0:
ec:17:6a:4e:38:71:ef:3a:b7:21:dc:a9:ce:0f:df:
17:b7:5b:b6:0e:94:80:a9:ef:7d:22:d7:8c:09:65:
5c:f7:e3:ae:b7:6b:f8:2c:f1:82:eb:f5:cd:f7:66:
50:19:2e:96:a9:aa:72:f1:e0:e8:92:d8:b3:0d:bc:
e9:f8:3f:cc:fe:1a:6a:82:59:67:a2:ff:b1:d3:f9:
43:2d:e7:2f:35:21:2a:55:da:55:a5:1f:d7:a1:14:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:3A:D8:60:B6:AA:18:D7:73:B9:A0:D1:48:F8:D3:DC:BF:F4:81
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:d1:6e:af:4b:75:e6:f5:7e:7d:7f:cf:7b:74:9c:6d:a0:
93:df:f6:1b:07:8f:f7:aa:7b:cb:db:4a:f2:45:f3:94:5d:1a:
16:36:4a:3a:49:8b:8b:e4:5c:58:0b:c0:d5:d1:fa:e5:75:4f:
77:2a:0c:c5:d0:af:35:7a:2f:53:41:05:f5:e4:3f:c7:75:f1:
fa:ed:86:7e:4a:78:8d:b5:c3:7d:91:8b:2e:99:fc:27:18:47:
ed:77:4b:02:5e:13:2c:e3:db:7c:a6:4b:a5:bb:7b:15:da:fc:
b3:2d:5a:cf:6d:a6:7f:9e:76:f6:e3:8e:d2:0c:1f:e4:d1:7f:
0b:73:84:e0:0f:ee:ad:38:a7:92:69:db:1e:5a:c2:d9:a2:fc:
02:c8:9f:05:af:be:78:67:00:ea:66:62:3a:dd:0a:83:de:42:
7c:ae:32:05:65:f8:86:5c:55:f1:14:f6:22:0d:7c:c0:85:3f:
02:a7:c9:70:dd:ee:70:fa:f6:ab:3c:7e:f2:95:46:50:a5:b4:
c5:77:b0:f6:02:72:ab:2f:ae:40:79:b0:58:47:74:f7:f9:96:
2e:d2:fe:c5:db:4d:ec:9c:5f:71:f2:34:36:be:8b:3f:d9:24:
1a:a2:15:df:c9:fa:77:2e:9c:ce:c2:a2:c6:d0:41:14:23:38:
3b:8c:77:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLgTuaQ6hbAo4XHFmdbrB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4
ZTYxZTUwHhcNMjUwNTAxMTEwMDI0WhcNMjUwNTAyMTEwMDI0WjAzMTEwLwYDVQQD
EyhhNGUwM2FkODYwYjZhYTE4ZDc3M2I5YTBkMTQ4ZjhkM2RjYmZmNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z/U/9wVDAu2YDTbFc93Xl4p+s5w
GT3wPcBhJ1j8CP/vvYG+tfJ0bJn7uaDNqwXAJI47+W1ELydbvLosjk0OY86UG6DM
zShwI8xCY1GeWh6eNUJ0ua13hDNTbbYi0cXxW+2uVwTNUJkqzthyNhKKjUOVZtZQ
/moDtceG9mmV7OmB5l6GQvVmEZbuETCLT90mKExnoakKhsGKfiuhgpZcHbPU7LDs
F2pOOHHvOrch3KnOD98Xt1u2DpSAqe99IteMCWVc9+Out2v4LPGC6/XN92ZQGS6W
qapy8eDoktizDbzp+D/M/hpqgllnov+x0/lDLecvNSEqVdpVpR/XoRTzRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTgOthgtqoY13O5oNFI+NPcv/SBMB8GA1UdIwQY
MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt
ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz
LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzDRbq9L
deb1fn1/z3t0nG2gk9/2GweP96p7y9tK8kXzlF0aFjZKOkmLi+RcWAvA1dH65XVP
dyoMxdCvNXovU0EF9eQ/x3Xx+u2Gfkp4jbXDfZGLLpn8JxhH7XdLAl4TLOPbfKZL
pbt7Fdr8sy1az22mf5529uOO0gwf5NF/C3OE4A/urTinkmnbHlrC2aL8AsifBa++
eGcA6mZiOt0Kg95CfK4yBWX4hlxV8RT2Ig18wIU/AqfJcN3ucPr2qzx+8pVGUKW0
xXew9gJyqy+uQHmwWEd09/mWLtL+xdtN7JxfcfI0Nr6LP9kkGqIV38n6dy6czsKi
xtBBFCM4O4x3Sw==
-----END CERTIFICATE-----
Generated at Thu May 1 17:45:01 2025 by rpki-client