Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: ULSUEw9bGaqyWGlFMThdEKcBTTrmWzNf4B/ElfXFEPk=
Subject key identifier: C3:C8:38:51:F7:D1:46:F3:FE:7C:A7:22:88:74:78:07:89:AD:35:0B
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019673B0428B838919E7D302CE68D8358680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 20:00:53 +0000
Manifest this update: Sat 26 Apr 2025 20:00:53 +0000
Manifest next update: Sun 27 Apr 2025 20:00:53 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: TNViTT9XeBhcF4/j6OjcjYSKpiHOWhTJzPeTpN9uthM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:42:8b:83:89:19:e7:d3:02:ce:68:d8:35:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Apr 26 20:00:53 2025 GMT
Not After : Apr 27 20:00:53 2025 GMT
Subject: CN=c3c83851f7d146f3fe7ca7228874780789ad350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:db:81:b5:52:dd:c6:c6:3b:48:5d:71:9f:
7e:7a:fe:f2:4e:1e:37:48:02:87:89:80:26:e3:42:
9c:96:b1:c8:2d:28:75:72:71:a0:01:2a:99:8c:18:
93:8f:21:db:f0:0c:41:b7:6c:31:f2:71:4e:88:57:
2d:db:2a:42:bd:fb:bd:2a:8e:c3:26:8b:74:6a:a4:
f0:64:6e:3f:24:98:83:54:e4:c8:28:3a:66:a0:f7:
a0:99:d8:e2:02:83:62:82:84:03:b6:a1:39:da:19:
8a:2f:52:92:62:4d:42:d8:7d:5e:20:31:a4:b4:6a:
64:86:fb:e3:f5:a4:00:32:cc:8a:f7:b2:be:3b:f9:
14:9d:c6:29:25:13:77:78:ea:5a:96:f4:8c:4e:67:
1a:1e:d7:6c:48:26:1b:08:46:9f:fb:e2:20:71:36:
8d:e3:5a:54:37:af:9f:60:dc:fb:59:dc:27:b6:c5:
99:3c:ba:70:40:c1:e4:8a:70:80:d0:21:8f:c6:3e:
fb:f0:e4:fc:73:6f:cc:53:05:6f:13:14:a0:c4:5c:
b2:23:56:96:bc:cc:31:4b:26:d7:6f:3d:c4:ec:f9:
d1:c2:03:01:dd:ec:07:f9:e5:9f:10:d2:12:ad:c9:
33:c9:94:3c:fb:b7:d7:e6:93:11:dd:29:44:32:fa:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:38:51:F7:D1:46:F3:FE:7C:A7:22:88:74:78:07:89:AD:35:0B
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cf:26:a0:56:93:91:2e:ef:07:57:c7:3a:67:57:0d:94:6d:
13:5c:f1:f7:3c:a0:4c:ce:2c:1e:a1:64:b4:2e:d0:d2:ce:aa:
78:bd:b0:30:fe:cc:9f:35:5f:4f:24:3b:b2:cb:49:83:bb:97:
df:2c:a8:da:9b:6d:9b:1b:61:3b:fa:60:6c:e2:85:72:4d:08:
3f:66:03:f2:e5:f9:2e:64:2c:93:13:8a:34:68:9f:5a:a6:db:
b4:55:e7:91:45:a4:cb:0c:03:c6:cf:7f:80:63:b0:2a:d8:37:
7b:a8:6f:8f:47:e8:e6:2d:b9:a8:7c:f9:9d:10:47:98:e6:16:
7f:d2:ef:46:07:72:60:13:b5:85:75:85:b3:4b:8c:b9:00:3b:
82:b5:1f:cd:e1:0b:45:98:65:38:73:67:c9:d2:1d:fe:ac:c8:
96:a6:57:12:26:71:c0:c2:38:92:ed:ba:ed:11:b6:78:30:0e:
66:e1:c2:08:16:18:eb:f1:bc:e1:fc:bd:48:3d:8f:a0:67:6d:
ff:60:e1:7d:23:00:a4:36:54:9b:aa:47:ea:bd:1d:7e:79:e6:
e9:c0:df:64:f6:45:1c:64:e8:23:e2:7f:33:16:89:ac:ea:f3:
60:71:6a:3f:36:25:0a:a7:49:f1:f2:7f:a6:2c:e9:9d:96:29:
8b:b6:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:04:34 2025 by rpki-client