Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: Wn6q4tyBPnOMm0DJXshZwObJKzahtRBqSYg9cP3ih2A=
Subject key identifier: 1E:CF:2C:3C:39:EE:3E:75:D0:32:BE:CA:AA:42:3A:AA:99:6D:E5:80
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0196790D02A4831635D17CE06DDAB9205E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0BF7
Signing time: Sun 27 Apr 2025 21:00:17 +0000
Manifest this update: Sun 27 Apr 2025 21:00:17 +0000
Manifest next update: Mon 28 Apr 2025 21:00:17 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: 2YlE6fanNG4JkVri8pewmMfsZUpBEGLr5+pMBqGIm2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:02:a4:83:16:35:d1:7c:e0:6d:da:b9:20:5e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Apr 27 21:00:17 2025 GMT
Not After : Apr 28 21:00:17 2025 GMT
Subject: CN=1ecf2c3c39ee3e75d032becaaa423aaa996de580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e6:7b:ea:29:99:13:44:b8:82:41:af:f6:76:
29:a4:35:b2:c9:64:13:98:f8:1b:89:7e:35:27:ef:
45:73:92:47:04:2d:1d:17:fd:ca:77:e3:e7:6f:b1:
f2:b1:ec:34:c7:a1:f9:74:38:1f:84:ec:20:af:83:
4d:22:62:26:92:74:5a:c7:a4:20:7f:91:55:ed:da:
01:9e:78:94:20:3e:a8:ee:e3:34:df:d0:fd:26:25:
21:a7:0c:5b:0b:ce:16:9a:b2:f3:f0:ae:92:42:5e:
16:ee:5e:22:dd:a8:42:98:74:e1:a2:96:05:e5:55:
c6:65:13:d6:a5:56:51:24:30:74:63:d9:9c:bd:8c:
1d:05:2c:30:fc:2d:cb:e5:44:fb:18:c6:bd:6a:fc:
96:40:d8:18:3f:74:b3:3c:9b:5a:c4:c6:d4:fb:4d:
df:0e:f2:b8:28:76:4f:58:96:47:9f:73:8c:dc:c6:
d5:36:4d:ce:10:53:44:1e:7a:4f:97:db:80:7d:a1:
71:17:5b:7c:66:11:41:78:ad:30:87:ec:e8:0b:1d:
a5:19:9a:65:6d:f4:9f:33:1e:d9:3f:9c:a0:d7:78:
de:91:df:8a:b7:d3:5f:4b:52:02:9b:28:d8:d5:ad:
ad:4a:d4:d0:9d:19:90:ad:2c:07:a8:41:40:c6:76:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CF:2C:3C:39:EE:3E:75:D0:32:BE:CA:AA:42:3A:AA:99:6D:E5:80
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:d7:2e:86:a1:dc:61:3b:22:2d:97:c1:0d:fa:05:6b:5f:16:
37:5d:7e:4e:7b:e9:23:ff:71:33:59:9f:db:7e:59:a5:45:26:
f1:82:74:cc:6a:35:af:0c:37:64:4b:1b:f5:f2:fa:4a:60:ec:
ca:71:4b:3c:10:87:2e:5f:bb:87:52:95:9d:32:51:ea:75:67:
31:d9:12:f9:03:89:8e:95:76:39:3d:72:ad:2f:8b:86:63:ad:
f7:6a:62:8e:bd:a0:c1:3f:41:5f:fc:bf:38:0a:63:a7:58:73:
5b:f6:e3:b2:1d:c6:fb:d0:f9:c5:68:94:3f:5f:45:9d:85:2a:
e4:8c:db:6b:40:b4:9c:7a:8c:de:91:55:b3:c9:f4:60:ee:46:
38:90:0c:99:18:43:e1:98:3f:f5:2b:ad:e1:61:58:ec:6a:d8:
5c:4e:41:5a:07:58:ca:cc:5d:1d:0d:a3:6e:a9:16:4d:16:7c:
9b:3a:e2:ae:68:58:47:72:f7:3f:3f:3d:93:c8:3e:a6:e7:2c:
dd:02:5b:1f:2b:d1:5b:c6:0d:bf:92:12:a2:a0:22:34:d0:0f:
2b:d6:d9:ba:a4:e2:84:65:06:21:ee:4b:f8:57:82:3c:f6:c5:
6b:fa:fb:d5:59:01:16:da:14:16:54:31:97:61:32:ee:a5:0d:
f1:bb:42:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5DQKkgxY10Xzgbdq5IF6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjUwNDI3MjEwMDE3WhcNMjUwNDI4MjEwMDE3WjAzMTEwLwYDVQQD
EygxZWNmMmMzYzM5ZWUzZTc1ZDAzMmJlY2FhYTQyM2FhYTk5NmRlNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OZ76imZE0S4gkGv9nYppDWyyWQT
mPgbiX41J+9Fc5JHBC0dF/3Kd+Pnb7Hysew0x6H5dDgfhOwgr4NNImImknRax6Qg
f5FV7doBnniUID6o7uM039D9JiUhpwxbC84WmrLz8K6SQl4W7l4i3ahCmHThopYF
5VXGZRPWpVZRJDB0Y9mcvYwdBSww/C3L5UT7GMa9avyWQNgYP3SzPJtaxMbU+03f
DvK4KHZPWJZHn3OM3MbVNk3OEFNEHnpPl9uAfaFxF1t8ZhFBeK0wh+zoCx2lGZpl
bfSfMx7ZP5yg13jekd+Kt9NfS1ICmyjY1a2tStTQnRmQrSwHqEFAxnai6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7PLDw57j510DK+yqpCOqqZbeWAMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzdcuhqHc
YTsiLZfBDfoFa18WN11+TnvpI/9xM1mf235ZpUUm8YJ0zGo1rww3ZEsb9fL6SmDs
ynFLPBCHLl+7h1KVnTJR6nVnMdkS+QOJjpV2OT1yrS+LhmOt92pijr2gwT9BX/y/
OApjp1hzW/bjsh3G+9D5xWiUP19FnYUq5Izba0C0nHqM3pFVs8n0YO5GOJAMmRhD
4Zg/9Sut4WFY7GrYXE5BWgdYysxdHQ2jbqkWTRZ8mzrirmhYR3L3Pz89k8g+pucs
3QJbHyvRW8YNv5ISoqAiNNAPK9bZuqTihGUGIe5L+FeCPPbFa/r71VkBFtoUFlQx
l2Ey7qUN8btCag==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:33 2025 by rpki-client