Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: Fg0DkjsaZh9lEs4tmdlzhL4tRgPT1MYgYCQ18O9cmBw=
Subject key identifier: B4:93:50:4E:FA:A7:B4:0F:B7:8D:34:02:C1:D0:E1:19:19:CF:BD:50
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 01967831BAEAF95F20DB4D2FBD569545479D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0C49
Signing time: Sun 27 Apr 2025 17:00:47 +0000
Manifest this update: Sun 27 Apr 2025 17:00:47 +0000
Manifest next update: Mon 28 Apr 2025 17:00:47 +0000
Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: /CkBiG/IveRkXTNtHsdrnjFk/q4R7E9LSIAdfrL/ndk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:ba:ea:f9:5f:20:db:4d:2f:bd:56:95:45:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Apr 27 17:00:47 2025 GMT
Not After : Apr 28 17:00:47 2025 GMT
Subject: CN=b493504efaa7b40fb78d3402c1d0e11919cfbd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:6d:27:1b:ef:0b:ac:ad:fb:8d:db:85:c9:
60:73:6b:0f:4c:a9:8f:8d:1d:64:2f:0b:1d:3e:8e:
ea:51:3d:9f:18:f0:82:23:06:bb:c7:bd:c4:70:7f:
ac:1c:51:45:fc:3c:ca:02:7e:17:23:37:e0:1b:97:
4c:39:65:e4:b4:9e:39:12:17:73:b0:0d:c9:d6:9c:
ab:16:fc:d6:58:a3:85:fc:0c:81:17:c6:83:a4:8e:
c4:f5:87:0c:4d:3d:f0:20:4e:f4:91:81:ff:ae:01:
4d:0a:14:34:96:a1:43:b3:0f:7c:d5:06:6d:ff:4b:
7f:b4:d4:43:d8:de:4c:ab:68:c7:1f:84:bd:f7:2e:
e5:5e:4e:c0:ef:1b:90:1a:0b:be:d8:dd:44:a5:09:
04:0a:64:dc:33:19:86:10:fe:b1:b2:86:c7:4c:48:
6c:54:79:f2:ee:5a:2d:b4:80:65:82:54:ee:12:99:
0c:4d:0c:fb:46:28:3c:74:f5:7a:c3:65:db:4f:7f:
fc:f7:1d:94:f6:e7:2c:93:c8:60:49:d2:74:ad:c3:
f2:d0:29:fb:b4:06:55:0f:e7:9e:5b:2b:81:4c:e2:
82:ab:07:0c:93:a5:52:cf:da:cd:a1:51:b9:ef:6f:
00:5d:57:c9:5f:d3:5e:8b:0e:1a:93:c1:d1:92:f6:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:50:4E:FA:A7:B4:0F:B7:8D:34:02:C1:D0:E1:19:19:CF:BD:50
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:07:a9:ec:b4:34:4b:45:c0:a9:cd:ca:4c:d4:d7:98:0d:
38:84:ed:32:b4:9d:ac:85:69:25:c6:32:ee:40:a8:9f:e7:cd:
7c:8b:91:b4:99:f6:d0:e9:73:61:aa:73:8c:28:04:94:af:f4:
ed:a0:58:e2:bf:ff:52:e6:0d:22:e0:45:53:7a:49:fc:b8:3c:
40:49:67:df:5a:00:63:81:a1:58:73:b1:cd:49:16:5f:3e:ca:
e8:cb:f8:13:b3:46:ac:30:f5:8f:62:c7:df:dd:8d:2d:e4:d0:
60:05:6e:65:4e:11:20:46:45:a8:96:e3:76:ad:72:bf:e4:cf:
2f:23:7c:42:6b:c0:b8:e1:e5:16:42:70:0a:35:f1:db:f0:17:
30:0f:bc:82:f6:fa:b6:01:f0:c9:1c:b7:40:bc:8d:ff:2c:42:
5b:84:6b:93:49:d3:21:23:81:dd:a3:d9:6c:3c:36:cc:21:c6:
dd:2c:96:00:ab:ac:07:07:55:57:49:10:49:fa:f7:b2:65:2e:
0d:7e:36:1a:52:74:61:11:bb:34:30:be:41:b5:47:ab:18:20:
88:e9:96:06:12:d4:0b:43:0a:a7:bb:61:40:42:b1:36:9d:96:
8f:e0:37:18:a8:a1:e3:a5:5c:f4:cc:48:a2:21:2f:48:c8:fc:
e3:df:eb:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4Mbrq+V8g200vvVaVRUedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2
NTVlYjYwHhcNMjUwNDI3MTcwMDQ3WhcNMjUwNDI4MTcwMDQ3WjAzMTEwLwYDVQQD
EyhiNDkzNTA0ZWZhYTdiNDBmYjc4ZDM0MDJjMWQwZTExOTE5Y2ZiZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuFtJxvvC6yt+43bhclgc2sPTKmP
jR1kLwsdPo7qUT2fGPCCIwa7x73EcH+sHFFF/DzKAn4XIzfgG5dMOWXktJ45Ehdz
sA3J1pyrFvzWWKOF/AyBF8aDpI7E9YcMTT3wIE70kYH/rgFNChQ0lqFDsw981QZt
/0t/tNRD2N5Mq2jHH4S99y7lXk7A7xuQGgu+2N1EpQkECmTcMxmGEP6xsobHTEhs
VHny7lottIBlglTuEpkMTQz7Rig8dPV6w2XbT3/89x2U9ucsk8hgSdJ0rcPy0Cn7
tAZVD+eeWyuBTOKCqwcMk6VSz9rNoVG5728AXVfJX9Neiw4ak8HRkvaonQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSTUE76p7QPt400AsHQ4RkZz71QMB8GA1UdIwQY
MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt
YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx
LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7sHqey0
NEtFwKnNykzU15gNOITtMrSdrIVpJcYy7kCon+fNfIuRtJn20OlzYapzjCgElK/0
7aBY4r//UuYNIuBFU3pJ/Lg8QEln31oAY4GhWHOxzUkWXz7K6Mv4E7NGrDD1j2LH
392NLeTQYAVuZU4RIEZFqJbjdq1yv+TPLyN8QmvAuOHlFkJwCjXx2/AXMA+8gvb6
tgHwyRy3QLyN/yxCW4Rrk0nTISOB3aPZbDw2zCHG3SyWAKusBwdVV0kQSfr3smUu
DX42GlJ0YRG7NDC+QbVHqxggiOmWBhLUC0MKp7thQEKxNp2Wj+A3GKih46Vc9MxI
oiEvSMj849/rEw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:18 2025 by rpki-client