Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: /SvsbGjnTlZB2o7Avjm8BfQbQekuR5DPvA+QgsVpdww=
Subject key identifier: 13:BF:BD:02:1E:89:F3:7B:DE:DC:60:BD:04:CB:A9:6C:24:D0:BD:32
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01968C940A60ED5BD1E3CBEDC4B693C1500F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 16:00:34 +0000
Manifest this update: Thu 01 May 2025 16:00:34 +0000
Manifest next update: Fri 02 May 2025 16:00:34 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: d7DeIYeTpdCFPjdqrMboJv8anLLGoTEk/Jkamflz4Ik=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:94:0a:60:ed:5b:d1:e3:cb:ed:c4:b6:93:c1:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: May 1 16:00:34 2025 GMT
Not After : May 2 16:00:34 2025 GMT
Subject: CN=13bfbd021e89f37bdedc60bd04cba96c24d0bd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:39:a1:00:cd:93:39:82:8d:f2:2d:03:db:
d3:8f:4a:85:56:60:48:49:07:fb:08:9a:24:dd:51:
36:54:87:78:b9:c3:1e:d6:5b:dd:e8:06:7f:98:89:
72:06:ff:01:e7:5d:3a:6f:46:8e:30:a6:f0:54:d2:
1c:92:d9:87:ea:f7:d3:3b:0e:e3:ba:bf:2b:c5:d3:
5a:51:fc:a4:3d:d9:68:02:5e:7a:41:08:96:9e:2f:
a1:bd:3b:5d:77:32:68:a1:cb:49:de:1f:72:ea:0c:
aa:71:47:05:56:7c:2a:d6:d8:29:7b:f6:24:87:57:
dc:2f:de:cb:02:83:08:d2:e3:15:1b:8b:93:68:6f:
6e:a5:5e:37:b7:c9:0f:09:36:63:df:3a:35:84:84:
d0:ef:96:16:7f:bf:33:51:ec:1d:11:0d:ba:8c:2a:
34:9f:e7:22:16:f4:3a:ad:32:e5:e3:b0:0f:3a:a1:
04:0b:87:08:21:16:d7:43:bb:7d:55:97:c9:75:2e:
15:92:2b:aa:fa:45:bd:31:fe:1a:3e:9a:51:06:cf:
42:96:32:ab:2f:68:f1:50:14:64:96:3f:e9:49:7d:
98:e3:38:ce:32:65:45:a3:ad:67:42:dc:08:3b:b1:
4a:73:68:cf:41:f2:f1:ff:13:09:74:40:cb:4d:03:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:BD:02:1E:89:F3:7B:DE:DC:60:BD:04:CB:A9:6C:24:D0:BD:32
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:55:1b:11:3d:10:fd:9c:18:28:ff:df:36:4d:2f:6c:98:79:
53:e3:c9:fa:08:5d:7e:01:72:9d:05:83:d7:e6:b6:82:83:78:
f4:77:7d:6a:e2:b9:15:fe:df:07:b6:e6:35:cc:d7:52:92:15:
0c:17:06:e7:2e:8f:43:72:17:a0:74:f4:41:24:c1:fb:da:97:
b6:47:23:73:e6:82:58:dd:6a:33:53:57:0e:e3:02:ea:8d:dd:
82:e4:b6:cb:b3:2c:63:fc:f6:e2:56:63:68:f8:af:ba:31:04:
66:3d:a1:d1:bd:a5:68:a4:78:c4:b3:b9:69:7a:2a:9a:f5:69:
73:61:6d:99:25:d7:36:25:e1:07:5c:ec:bb:67:d5:e0:78:39:
be:86:ba:15:74:28:f7:ae:c5:42:fb:48:88:ef:e3:33:e0:5f:
10:df:a2:bd:45:22:8e:90:26:d6:26:9c:ed:66:e8:19:6a:f3:
d5:ff:f7:15:9e:22:88:97:ea:31:5b:78:b3:18:d3:a9:64:bf:
af:a9:6c:1c:1d:ad:93:ec:93:76:3c:91:11:67:7b:cb:36:d3:
55:ba:71:e9:57:76:7b:ca:45:f2:32:0f:64:ab:d0:7a:11:e4:
fe:84:69:66:d6:1e:3f:67:4e:e3:dc:07:af:f2:8b:b7:95:fe:
3c:63:91:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMlApg7VvR48vtxLaTwVAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0
ZDQ0MzIwHhcNMjUwNTAxMTYwMDM0WhcNMjUwNTAyMTYwMDM0WjAzMTEwLwYDVQQD
EygxM2JmYmQwMjFlODlmMzdiZGVkYzYwYmQwNGNiYTk2YzI0ZDBiZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVo5oQDNkzmCjfItA9vTj0qFVmBI
SQf7CJok3VE2VId4ucMe1lvd6AZ/mIlyBv8B5106b0aOMKbwVNIcktmH6vfTOw7j
ur8rxdNaUfykPdloAl56QQiWni+hvTtddzJooctJ3h9y6gyqcUcFVnwq1tgpe/Yk
h1fcL97LAoMI0uMVG4uTaG9upV43t8kPCTZj3zo1hITQ75YWf78zUewdEQ26jCo0
n+ciFvQ6rTLl47APOqEEC4cIIRbXQ7t9VZfJdS4Vkiuq+kW9Mf4aPppRBs9CljKr
L2jxUBRklj/pSX2Y4zjOMmVFo61nQtwIO7FKc2jPQfLx/xMJdEDLTQPV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO/vQIeifN73txgvQTLqWwk0L0yMB8GA1UdIwQY
MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt
NmRiM2NhZWY3M2Q5LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5
LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVUbET0Q
/ZwYKP/fNk0vbJh5U+PJ+ghdfgFynQWD1+a2goN49Hd9auK5Ff7fB7bmNczXUpIV
DBcG5y6PQ3IXoHT0QSTB+9qXtkcjc+aCWN1qM1NXDuMC6o3dguS2y7MsY/z24lZj
aPivujEEZj2h0b2laKR4xLO5aXoqmvVpc2FtmSXXNiXhB1zsu2fV4Hg5voa6FXQo
967FQvtIiO/jM+BfEN+ivUUijpAm1iac7WboGWrz1f/3FZ4iiJfqMVt4sxjTqWS/
r6lsHB2tk+yTdjyREWd7yzbTVbpx6Vd2e8pF8jIPZKvQehHk/oRpZtYeP2dO49wH
r/KLt5X+PGORQA==
-----END CERTIFICATE-----
Generated at Thu May 1 20:11:13 2025 by rpki-client