Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: AiHmbR1pV5eP6LvACLBoCVXQ21caUjhha7WEgF9434Y=
Subject key identifier: 96:BA:8A:21:BF:3D:44:12:02:B0:AB:61:2B:EA:D5:97:32:14:D4:5A
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 01968BB8E4EFE8DAD982837904EB2DFFB081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 0105
Signing time: Thu 01 May 2025 12:01:12 +0000
Manifest this update: Thu 01 May 2025 12:01:12 +0000
Manifest next update: Fri 02 May 2025 12:01:12 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: YynE9jP0w0M+HX1gez94eM/wD+u40llLxaC/b6QgVVw=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:e4:ef:e8:da:d9:82:83:79:04:eb:2d:ff:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: May 1 12:01:12 2025 GMT
Not After : May 2 12:01:12 2025 GMT
Subject: CN=96ba8a21bf3d441202b0ab612bead5973214d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:fd:79:25:be:b8:ba:29:86:42:a9:54:60:
c8:f4:60:31:48:3b:3f:79:d4:a8:09:24:68:c6:48:
c8:75:14:72:c6:51:2c:29:e8:f9:33:09:7d:14:00:
47:71:01:c4:e1:2e:dc:63:c2:4a:4a:f7:ea:b8:ea:
37:f4:0d:0d:0f:71:f3:1f:07:04:9f:77:d3:14:c1:
a9:18:5a:17:56:2b:7a:81:6b:e4:94:5b:bd:ed:4a:
1c:76:5c:e9:b1:75:63:79:3e:08:91:1b:f9:e3:85:
6c:2b:b3:69:61:da:7f:54:af:b8:c5:58:bb:b4:cf:
d1:49:1d:f4:d4:28:d9:0f:98:48:b6:c7:2c:23:83:
e1:e8:fc:bc:ed:e4:e5:73:af:31:f7:17:a4:15:b4:
83:44:03:8b:c3:5d:b0:13:71:85:37:bc:0a:24:56:
dd:93:48:b8:a4:40:74:ef:e1:ff:ff:79:a6:81:ba:
c7:43:6f:20:33:46:00:96:d5:66:6b:e6:06:d9:a0:
7c:65:c3:f7:77:bd:07:d9:e5:95:61:73:6e:f3:6b:
45:5a:0e:8e:15:4b:71:3b:9e:29:6a:68:f5:60:5d:
5d:71:13:7a:00:aa:a3:47:25:01:9b:f4:f7:b4:0c:
65:ff:10:87:1c:89:12:9f:39:54:f5:43:d5:ab:7b:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:8A:21:BF:3D:44:12:02:B0:AB:61:2B:EA:D5:97:32:14:D4:5A
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:73:89:a0:ae:c9:1b:0f:43:33:2b:3c:5b:b7:29:39:b9:27:
72:d3:0c:85:83:91:35:a2:d1:6a:ea:72:88:6a:cb:bf:6b:bf:
48:f4:32:29:04:4b:a1:9c:a0:e0:08:d5:77:42:01:fa:3f:be:
41:08:ae:9c:cd:46:81:75:30:46:a2:27:f4:67:39:11:d6:bc:
a4:30:7c:14:0d:a6:78:14:db:df:dd:c5:f5:ea:20:a2:f2:bb:
8f:72:1f:ba:4d:3b:71:a1:5f:cd:1b:e1:2d:31:70:96:8f:f2:
58:b9:9b:f5:d3:2d:0e:b7:f6:ca:2c:81:24:06:ba:94:0a:56:
0c:0e:cb:fd:5a:06:9a:4b:a5:c0:b9:ef:a9:31:4a:5e:ef:5d:
11:50:ec:4a:ad:e9:1d:6a:e5:b5:85:40:da:1e:7e:4c:fe:55:
d2:3a:79:8e:17:81:45:75:31:d9:3f:c9:09:8b:a4:72:2d:91:
62:3b:ea:8a:52:bf:de:27:52:bc:2f:fe:f7:e8:7b:ac:28:a0:
e2:25:28:fb:7c:9a:11:34:6b:e9:d6:d5:02:cf:28:cb:8f:d4:
5a:e6:5f:9e:0b:c7:88:60:60:15:83:f6:74:61:00:a4:1c:48:
8f:9e:80:8c:81:6c:40:0c:58:e4:b8:b8:88:0a:c5:05:d9:ea:
20:05:6b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLuOTv6NrZgoN5BOst/7CBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjc1MmQ4NzBjNjY5NmYwMTJiMmY0NjVkNTQ5ZjQwMDBm
ZTE4NTgwHhcNMjUwNTAxMTIwMTEyWhcNMjUwNTAyMTIwMTEyWjAzMTEwLwYDVQQD
Eyg5NmJhOGEyMWJmM2Q0NDEyMDJiMGFiNjEyYmVhZDU5NzMyMTRkNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x/9eSW+uLophkKpVGDI9GAxSDs/
edSoCSRoxkjIdRRyxlEsKej5Mwl9FABHcQHE4S7cY8JKSvfquOo39A0ND3HzHwcE
n3fTFMGpGFoXVit6gWvklFu97UocdlzpsXVjeT4IkRv544VsK7NpYdp/VK+4xVi7
tM/RSR301CjZD5hItscsI4Ph6Py87eTlc68x9xekFbSDRAOLw12wE3GFN7wKJFbd
k0i4pEB07+H//3mmgbrHQ28gM0YAltVma+YG2aB8ZcP3d70H2eWVYXNu82tFWg6O
FUtxO54pamj1YF1dcRN6AKqjRyUBm/T3tAxl/xCHHIkSnzlU9UPVq3v6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa6iiG/PUQSArCrYSvq1ZcyFNRaMB8GA1UdIwQY
MBaAFGJnUthwxmlvASsvRl1Un0AA/hhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2Mjct
YmEyNjQ4ZjE1MWQzLzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2MjctYmEyNjQ4ZjE1MWQz
LzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0HOJoK7J
Gw9DMys8W7cpObknctMMhYORNaLRaupyiGrLv2u/SPQyKQRLoZyg4AjVd0IB+j++
QQiunM1GgXUwRqIn9Gc5Eda8pDB8FA2meBTb393F9eogovK7j3Ifuk07caFfzRvh
LTFwlo/yWLmb9dMtDrf2yiyBJAa6lApWDA7L/VoGmkulwLnvqTFKXu9dEVDsSq3p
HWrltYVA2h5+TP5V0jp5jheBRXUx2T/JCYukci2RYjvqilK/3idSvC/+9+h7rCig
4iUo+3yaETRr6dbVAs8oy4/UWuZfngvHiGBgFYP2dGEApBxIj56AjIFsQAxY5Li4
iArFBdnqIAVrTg==
-----END CERTIFICATE-----
Generated at Thu May 1 13:48:53 2025 by rpki-client