Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: UO/G+EUpiJhZK5lpLg2e0mNjw0zb9ekkgwqXIjKxKAs=
Subject key identifier: 12:94:02:35:DB:F2:26:71:8B:7F:4D:07:BD:57:BD:8D:E0:EF:5F:00
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019676433CF14CCA88BD1F547E8093DFFD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:40 +0000
Manifest this update: Sun 27 Apr 2025 08:00:40 +0000
Manifest next update: Mon 28 Apr 2025 08:00:40 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: Vc6alDee+l664cBnVyf4DRDLdj3i2xCyQsEZbaFSpCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:3c:f1:4c:ca:88:bd:1f:54:7e:80:93:df:fd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Apr 27 08:00:40 2025 GMT
Not After : Apr 28 08:00:40 2025 GMT
Subject: CN=12940235dbf226718b7f4d07bd57bd8de0ef5f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:8c:67:ec:16:08:60:eb:21:1e:2c:e6:90:
66:5f:4e:b5:75:23:a2:e1:a7:b5:c2:95:d6:75:81:
b0:33:c2:44:04:f7:98:0a:13:f8:18:da:98:03:fa:
74:98:ad:4d:17:5d:4e:9c:d6:e7:ca:6e:9e:51:da:
16:1a:b2:a9:dd:c2:7b:a7:98:f8:16:51:4f:c8:ec:
37:0e:d6:ea:5c:85:d3:a5:0a:7a:47:3c:f6:08:3c:
75:f2:77:2a:e0:8d:dc:bb:c2:5a:11:ac:1f:a1:fc:
07:a2:d6:e8:67:47:08:34:05:fe:73:1d:44:65:c5:
f6:25:c6:bf:f6:67:bf:fc:be:de:13:c2:be:fd:62:
48:5c:18:24:da:38:80:da:6f:28:7d:75:47:75:68:
d2:56:3a:bf:71:c3:93:0b:35:c1:a4:a9:fa:2d:d5:
00:f8:b8:50:15:a4:3b:0e:ee:28:14:37:15:4b:d8:
06:03:49:e9:22:26:bf:7a:6d:90:8c:66:7b:19:b9:
91:bf:de:9d:d6:9e:96:18:ac:93:d3:f0:08:94:46:
3d:23:e1:fd:2f:ba:b7:65:d7:16:74:1d:70:32:c5:
b6:68:45:58:83:0e:b9:37:d0:73:6d:b7:91:49:3c:
9c:ff:69:2b:ce:e4:7c:89:ec:64:36:da:b3:be:2c:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:02:35:DB:F2:26:71:8B:7F:4D:07:BD:57:BD:8D:E0:EF:5F:00
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d4:3a:1c:14:05:46:ce:f5:dd:ac:b7:9e:3f:86:b4:f3:52:
35:c0:bd:b6:38:2d:9a:86:b9:8b:26:6d:a1:39:8c:39:47:72:
f2:49:d9:3d:fc:d3:9f:3e:c7:3e:31:40:f6:68:55:0c:f7:f9:
90:e7:ff:36:ca:c3:87:1e:e4:39:4b:a6:cf:37:a9:2c:84:1a:
1b:b5:28:b2:51:8d:9f:76:a3:a9:14:93:c7:09:8e:fd:08:c0:
d9:8f:36:74:c5:d8:dd:6e:c8:fb:b2:f5:4a:58:ba:6d:41:75:
d7:5c:93:cb:2b:65:a4:38:09:d7:bc:89:cb:02:89:e6:ec:73:
28:86:2e:5e:df:42:2d:44:9c:b6:3f:e2:f7:65:42:ec:a0:47:
c2:4d:ee:d0:f9:35:31:c1:7e:91:65:07:64:2b:c3:aa:58:e0:
56:3c:b9:22:41:c4:fa:a0:29:e9:cb:1a:55:9f:d2:29:71:df:
bb:f5:a2:cd:b2:7e:ca:f5:ad:50:03:01:3f:40:ae:9d:e4:8b:
b3:f9:15:b4:0c:97:45:cd:01:8e:06:49:ce:09:0e:e5:f3:23:
d4:d8:83:32:c9:cb:c5:f3:d7:47:88:76:ee:6c:fc:76:34:1f:
22:5a:1d:b0:59:85:00:ac:9a:a0:2e:bc:80:6f:68:a6:2c:92:
6b:60:f2:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QzzxTMqIvR9UfoCT3/06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy
ZWQ3N2MwHhcNMjUwNDI3MDgwMDQwWhcNMjUwNDI4MDgwMDQwWjAzMTEwLwYDVQQD
EygxMjk0MDIzNWRiZjIyNjcxOGI3ZjRkMDdiZDU3YmQ4ZGUwZWY1ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqMZ+wWCGDrIR4s5pBmX061dSOi
4ae1wpXWdYGwM8JEBPeYChP4GNqYA/p0mK1NF11OnNbnym6eUdoWGrKp3cJ7p5j4
FlFPyOw3DtbqXIXTpQp6Rzz2CDx18ncq4I3cu8JaEawfofwHotboZ0cINAX+cx1E
ZcX2Jca/9me//L7eE8K+/WJIXBgk2jiA2m8ofXVHdWjSVjq/ccOTCzXBpKn6LdUA
+LhQFaQ7Du4oFDcVS9gGA0npIia/em2QjGZ7GbmRv96d1p6WGKyT0/AIlEY9I+H9
L7q3ZdcWdB1wMsW2aEVYgw65N9BzbbeRSTyc/2krzuR8iexkNtqzvizp6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKUAjXb8iZxi39NB71XvY3g718AMB8GA1UdIwQY
MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt
YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw
LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9Q6HBQF
Rs713ay3nj+GtPNSNcC9tjgtmoa5iyZtoTmMOUdy8knZPfzTnz7HPjFA9mhVDPf5
kOf/NsrDhx7kOUumzzepLIQaG7UoslGNn3ajqRSTxwmO/QjA2Y82dMXY3W7I+7L1
Sli6bUF111yTyytlpDgJ17yJywKJ5uxzKIYuXt9CLUSctj/i92VC7KBHwk3u0Pk1
McF+kWUHZCvDqljgVjy5IkHE+qAp6csaVZ/SKXHfu/WizbJ+yvWtUAMBP0CuneSL
s/kVtAyXRc0BjgZJzgkO5fMj1NiDMsnLxfPXR4h27mz8djQfIlodsFmFAKyaoC68
gG9opiySa2Dy2g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:04 2025 by rpki-client