Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
File: yoaOeySqNaTdEKyVmfBkqpadAx0.mft (raw, json)
Hash identifier: RNAqITTi+rX8nwGqLOE4Q6TgnGN6qFVGf6vBzeTlwTw=
Subject key identifier: 9E:35:99:0A:07:6C:3A:82:6A:26:CD:49:8C:59:21:85:91:85:1A:47
Authority key identifier: CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
Certificate issuer: /CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Certificate serial: 01967AFBE2ACC648C908133D08F063BFC915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
Manifest number: 0183
Signing time: Mon 28 Apr 2025 06:00:49 +0000
Manifest this update: Mon 28 Apr 2025 06:00:49 +0000
Manifest next update: Tue 29 Apr 2025 06:00:49 +0000
Files and hashes: 1: yoaOeySqNaTdEKyVmfBkqpadAx0.crl (hash: CMZ3BdY3EdPumY8YiD3DJpVGVt6CtAFaN4hNZFcK9WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:e2:ac:c6:48:c9:08:13:3d:08:f0:63:bf:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Validity
Not Before: Apr 28 06:00:49 2025 GMT
Not After : Apr 29 06:00:49 2025 GMT
Subject: CN=9e35990a076c3a826a26cd498c59218591851a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:f2:e7:17:9b:86:0f:ed:60:27:02:cf:78:
38:58:cf:6a:c6:1f:55:ae:aa:eb:16:11:69:2a:be:
63:7c:d8:67:bb:7c:dc:80:13:d4:5d:1e:51:af:b6:
79:e3:fb:fb:8a:74:df:af:82:6e:83:0d:bf:0a:fa:
4f:5d:73:ff:35:0f:dd:0c:4b:e5:1f:65:2c:77:02:
d8:fc:41:e8:ba:99:21:6e:0e:10:04:cb:45:b1:bd:
7a:4b:15:e6:22:5c:64:ca:b2:07:04:96:d0:7d:07:
84:6f:ad:7a:32:cf:65:e6:58:08:dc:b2:04:f9:e4:
10:ec:cd:9c:be:83:6f:08:98:f6:6f:c4:67:e4:88:
0c:94:98:53:4d:64:c1:55:e3:f1:fd:19:2f:0a:e6:
0e:43:2b:1f:25:63:4e:a3:93:4a:6c:4c:71:15:7b:
62:20:e6:73:23:0a:67:d8:e0:d0:7e:d8:86:fb:cd:
f1:74:9b:dc:1c:59:05:c9:70:fb:8a:99:dd:9a:6d:
6d:b2:c2:dd:7d:61:a2:24:7d:2d:73:f7:05:11:49:
6f:84:89:26:80:08:91:ba:d0:d0:08:be:22:2a:86:
fa:ef:44:86:b6:f9:a8:b8:ab:9c:b9:52:09:5b:5f:
d4:85:64:78:23:98:3f:43:b2:59:6d:b9:cd:fe:94:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:99:0A:07:6C:3A:82:6A:26:CD:49:8C:59:21:85:91:85:1A:47
X509v3 Authority Key Identifier:
keyid:CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b5:7b:d5:73:93:f6:18:14:bc:c7:fd:7b:e9:73:64:be:c7:
43:b5:89:25:80:5f:f1:70:87:ca:ab:bd:6d:33:e0:0d:d4:3e:
1a:03:98:14:31:3b:ab:c4:b3:9c:0e:9d:f4:6a:62:7a:a5:a0:
22:78:17:28:fc:a0:1a:9b:8c:fd:9f:e8:73:a8:d6:c8:02:48:
a4:08:d9:d5:aa:8d:5e:43:bc:aa:0d:9e:a6:0e:ff:30:ba:39:
f9:06:4e:ed:d0:94:66:18:d4:e8:66:1b:54:d6:4c:fd:9e:a2:
f1:6d:de:9c:73:d1:d4:93:c6:fe:11:4b:2a:78:49:27:e5:de:
dc:75:e6:ea:f9:41:bb:f3:be:45:75:e0:e0:21:7b:c0:e4:d4:
43:9d:e4:54:bc:52:8e:cf:09:bf:38:59:5e:6f:28:79:ca:9d:
29:f5:a4:15:8f:40:ca:ba:b0:15:8f:83:72:8c:9f:9b:6b:82:
a1:0d:5a:a6:b7:aa:ba:ed:77:73:34:26:40:6b:0e:a7:61:97:
07:2c:cd:b0:98:cf:cc:6e:25:db:46:52:18:fc:c2:7a:ce:cf:
75:c2:d3:09:09:6e:de:4d:89:04:6a:c2:9d:73:32:50:67:94:
bf:25:8d:3d:89:f8:8e:55:4b:a6:28:b7:45:10:dd:23:f6:b5:
4d:99:91:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6++KsxkjJCBM9CPBjv8kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODY4ZTdiMjRhYTM1YTRkZDEwYWM5NTk5ZjA2NGFhOTY5
ZDAzMWQwHhcNMjUwNDI4MDYwMDQ5WhcNMjUwNDI5MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZTM1OTkwYTA3NmMzYTgyNmEyNmNkNDk4YzU5MjE4NTkxODUxYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZny5xebhg/tYCcCz3g4WM9qxh9V
rqrrFhFpKr5jfNhnu3zcgBPUXR5Rr7Z54/v7inTfr4Jugw2/CvpPXXP/NQ/dDEvl
H2UsdwLY/EHoupkhbg4QBMtFsb16SxXmIlxkyrIHBJbQfQeEb616Ms9l5lgI3LIE
+eQQ7M2cvoNvCJj2b8Rn5IgMlJhTTWTBVePx/RkvCuYOQysfJWNOo5NKbExxFXti
IOZzIwpn2ODQftiG+83xdJvcHFkFyXD7ipndmm1tssLdfWGiJH0tc/cFEUlvhIkm
gAiRutDQCL4iKob670SGtvmouKucuVIJW1/UhWR4I5g/Q7JZbbnN/pS7HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ41mQoHbDqCaibNSYxZIYWRhRpHMB8GA1UdIwQY
MBaAFMqGjnskqjWk3RCslZnwZKqWnQMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9hT2V5U3FOYVRkRUt5Vm1mQmtxcGFkQXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMzI3ZWItZDcxYS00Mjc5LWFmMjIt
YjhkMDZmNDZhZWMzLzEveW9hT2V5U3FOYVRkRUt5Vm1mQmtxcGFkQXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mMzI3ZWItZDcxYS00Mjc5LWFmMjItYjhkMDZmNDZhZWMz
LzEveW9hT2V5U3FOYVRkRUt5Vm1mQmtxcGFkQXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLV71XOT
9hgUvMf9e+lzZL7HQ7WJJYBf8XCHyqu9bTPgDdQ+GgOYFDE7q8SznA6d9GpieqWg
IngXKPygGpuM/Z/oc6jWyAJIpAjZ1aqNXkO8qg2epg7/MLo5+QZO7dCUZhjU6GYb
VNZM/Z6i8W3enHPR1JPG/hFLKnhJJ+Xe3HXm6vlBu/O+RXXg4CF7wOTUQ53kVLxS
js8JvzhZXm8oecqdKfWkFY9AyrqwFY+Dcoyfm2uCoQ1aprequu13czQmQGsOp2GX
ByzNsJjPzG4l20ZSGPzCes7PdcLTCQlu3k2JBGrCnXMyUGeUvyWNPYn4jlVLpii3
RRDdI/a1TZmRpw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:30:06 2025 by rpki-client