Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: ittedeT2hueM8ZjDQTvyhxKZ3w7iONFFcgbGHeHgGRk=
Subject key identifier: A9:1B:9F:1E:FE:04:D6:66:CF:78:8D:9D:4C:51:FF:C6:6D:EA:84:90
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019674C28478F042A436A5CAE5054DD4650E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 121A
Signing time: Sun 27 Apr 2025 01:00:26 +0000
Manifest this update: Sun 27 Apr 2025 01:00:26 +0000
Manifest next update: Mon 28 Apr 2025 01:00:26 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: C9ORoA72Ao0sTyjcR6U/wpVs9SmABC1Gcj0OFrHZQqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:84:78:f0:42:a4:36:a5:ca:e5:05:4d:d4:65:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Apr 27 01:00:26 2025 GMT
Not After : Apr 28 01:00:26 2025 GMT
Subject: CN=a91b9f1efe04d666cf788d9d4c51ffc66dea8490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:70:1c:fe:d7:d4:09:c4:b2:99:a1:70:1c:
79:67:33:9a:e5:e1:c4:83:a9:6c:d6:d2:1f:39:67:
05:e4:66:3b:64:67:40:4f:38:8e:01:60:2f:53:82:
c7:aa:6f:96:76:48:91:b8:48:3f:c4:65:8f:d9:8e:
38:60:88:a7:75:99:04:02:09:f1:94:11:6d:9a:01:
4f:6f:97:6e:b4:0f:86:a4:0c:94:62:e9:1a:23:46:
2a:a6:b5:b5:95:55:a0:28:a7:70:6f:2d:82:24:09:
56:fa:68:3b:1b:b6:db:71:9a:6f:4f:b8:90:ea:87:
e2:70:1e:66:94:99:11:60:ea:67:ba:ce:33:2f:f7:
d8:e2:d9:d0:8a:a0:5e:ec:5a:58:f1:29:f7:a1:e3:
5d:79:d8:0a:0e:c1:09:d9:52:0b:5e:8a:21:26:8d:
7f:9d:94:06:3b:bb:0c:f9:07:de:69:ba:d1:cc:b0:
8b:2e:26:33:6b:6c:52:91:0c:92:89:db:e9:0d:07:
a9:7e:58:d5:db:e0:33:ee:e7:ae:b2:d9:87:05:fe:
ce:c1:b0:51:d5:cb:81:e8:61:18:25:9a:62:e3:b6:
e6:5c:2a:2e:7f:63:9b:49:8f:81:ef:72:c4:1b:5c:
65:cc:72:71:c7:bf:24:d7:b5:ad:ca:dc:f5:5d:99:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:9F:1E:FE:04:D6:66:CF:78:8D:9D:4C:51:FF:C6:6D:EA:84:90
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:14:22:1d:b4:76:1a:e9:33:e0:de:18:01:35:88:46:2f:
ad:be:53:88:d5:e9:72:aa:03:53:0c:ce:b3:a6:b6:69:d4:75:
f0:b2:da:0c:ea:3c:67:4b:b6:b0:a6:e3:a4:68:c8:5b:09:f0:
11:b8:c7:68:c1:7b:6e:ed:67:5c:73:48:15:2e:2e:d9:d4:ba:
ce:c9:32:97:51:10:62:32:a1:d2:6f:a6:5c:6b:22:24:c7:3b:
3a:73:54:72:10:de:49:d3:0a:c6:8e:3e:05:7e:e4:aa:88:81:
56:74:8b:d9:c8:ea:80:07:a6:fb:cc:28:51:c0:72:ba:fa:1f:
10:1a:de:8a:6a:ad:59:98:66:ef:0f:2b:aa:34:1d:89:33:e1:
b1:e5:c9:b5:2f:53:a5:a6:31:9e:3d:9b:f8:fc:d8:db:d7:1f:
08:76:ac:e5:fe:1a:2c:9d:cf:0b:b8:32:6a:67:77:12:26:8e:
1f:8a:37:b2:db:4e:31:55:13:c9:64:ba:0f:40:44:40:bf:20:
5b:3e:2d:67:84:98:48:57:8b:c8:6a:ed:6e:23:64:84:f5:5d:
27:e0:e8:73:f8:16:a4:00:66:e8:db:bb:1b:be:70:bc:a3:ce:
0c:d0:f1:11:80:bf:82:e0:f7:1e:ec:d9:2a:3d:08:4a:f9:7e:
02:06:db:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0woR48EKkNqXK5QVN1GUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj
OTc3ZDgwHhcNMjUwNDI3MDEwMDI2WhcNMjUwNDI4MDEwMDI2WjAzMTEwLwYDVQQD
EyhhOTFiOWYxZWZlMDRkNjY2Y2Y3ODhkOWQ0YzUxZmZjNjZkZWE4NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ctwHP7X1AnEspmhcBx5ZzOa5eHE
g6ls1tIfOWcF5GY7ZGdATziOAWAvU4LHqm+WdkiRuEg/xGWP2Y44YIindZkEAgnx
lBFtmgFPb5dutA+GpAyUYukaI0YqprW1lVWgKKdwby2CJAlW+mg7G7bbcZpvT7iQ
6oficB5mlJkRYOpnus4zL/fY4tnQiqBe7FpY8Sn3oeNdedgKDsEJ2VILXoohJo1/
nZQGO7sM+QfeabrRzLCLLiYza2xSkQySidvpDQepfljV2+Az7ueustmHBf7OwbBR
1cuB6GEYJZpi47bmXCouf2ObSY+B73LEG1xlzHJxx78k17Wtytz1XZk8kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkbnx7+BNZmz3iNnUxR/8Zt6oSQMB8GA1UdIwQY
MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt
YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi
LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFkUIh20
dhrpM+DeGAE1iEYvrb5TiNXpcqoDUwzOs6a2adR18LLaDOo8Z0u2sKbjpGjIWwnw
EbjHaMF7bu1nXHNIFS4u2dS6zskyl1EQYjKh0m+mXGsiJMc7OnNUchDeSdMKxo4+
BX7kqoiBVnSL2cjqgAem+8woUcByuvofEBreimqtWZhm7w8rqjQdiTPhseXJtS9T
paYxnj2b+PzY29cfCHas5f4aLJ3PC7gyamd3EiaOH4o3sttOMVUTyWS6D0BEQL8g
Wz4tZ4SYSFeLyGrtbiNkhPVdJ+Doc/gWpABm6Nu7G75wvKPODNDxEYC/guD3HuzZ
Kj0ISvl+Agbb0A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:24 2025 by rpki-client