Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: 2I9LBeF8l5MWo6yiR5HsrkVT2jXDsQVJ4Si8mv2JiKQ=
Subject key identifier: 5B:4C:3B:A6:B4:37:88:CB:5A:D0:7F:60:D9:EC:FB:EB:C5:8B:2A:31
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019674FA3CE58FBBD611CDCC9AEC6E074A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 10D7
Signing time: Sun 27 Apr 2025 02:01:18 +0000
Manifest this update: Sun 27 Apr 2025 02:01:18 +0000
Manifest next update: Mon 28 Apr 2025 02:01:18 +0000
Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: QQZ48tuK1/mN42iWiKcj6CeG5CjdAxoXakBwosQHTJk=)
3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:3c:e5:8f:bb:d6:11:cd:cc:9a:ec:6e:07:4a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Apr 27 02:01:18 2025 GMT
Not After : Apr 28 02:01:18 2025 GMT
Subject: CN=5b4c3ba6b43788cb5ad07f60d9ecfbebc58b2a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:c0:cf:b8:09:5d:7d:d3:df:58:53:92:79:
ac:1a:0c:34:56:6c:7a:54:f2:dd:ff:e7:6b:95:10:
1e:bc:63:75:44:88:d1:48:26:fe:48:8b:19:20:47:
cb:6e:5b:06:a8:80:5b:24:2d:77:69:a9:ce:1c:5a:
c7:84:25:7e:29:b3:3b:41:b7:96:0e:75:e4:2e:ba:
9d:a2:24:cc:67:7d:6f:7d:c4:38:d5:47:11:8a:0f:
d7:00:77:4c:0c:4e:b9:0d:47:12:18:05:74:ae:fa:
b1:d4:12:69:82:36:8e:8a:86:f1:ad:5e:70:de:8c:
f2:cb:58:d0:00:9e:fa:90:37:c0:02:da:85:5d:10:
28:7f:a5:8b:4e:c7:db:e0:78:f7:b9:ef:10:55:2d:
dc:fd:be:b1:8c:4a:b7:bb:36:53:9e:ca:18:70:e6:
4f:0d:77:76:f4:b6:a5:d1:1a:d8:f4:f1:e9:00:9c:
f8:c8:fd:8b:6d:d1:b0:c4:e3:81:f1:b9:0d:97:70:
f9:c2:2d:ee:d2:f3:a2:04:86:87:78:f6:77:74:fd:
3f:14:bd:26:d6:a9:3e:f1:bd:34:07:96:4c:69:81:
fc:da:0f:36:62:99:06:6c:84:14:fe:5c:7f:bd:05:
55:9c:74:44:f4:06:2e:2c:28:b2:22:9c:56:15:64:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:3B:A6:B4:37:88:CB:5A:D0:7F:60:D9:EC:FB:EB:C5:8B:2A:31
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:cb:5a:8f:99:7c:16:c0:9f:36:46:75:76:e3:70:11:89:
ea:0a:0f:af:d8:cc:18:15:a5:7e:0a:95:89:2e:c7:be:f9:75:
91:fd:bc:26:0a:7e:7a:e9:7e:97:14:5b:1f:a0:c4:44:25:b9:
9c:e5:0b:ec:7b:0a:68:bc:f7:16:88:ec:ec:d7:ce:91:6e:71:
81:9d:f2:17:2f:21:3b:0c:2a:b0:25:b9:4a:a6:d4:54:5b:07:
bd:a1:69:bc:2a:43:8d:66:c2:dc:84:51:c5:81:5e:c1:c2:2e:
df:1e:d9:26:18:bb:48:17:e8:c5:d5:30:49:71:54:38:50:28:
78:61:b7:e2:0a:ae:0d:c2:ef:b2:eb:f5:78:b9:c4:5f:fc:d4:
bf:0c:cb:78:1e:5f:d6:bf:0d:f8:8d:fb:17:03:cf:00:95:30:
06:ef:07:ac:57:2e:02:b4:52:61:0b:a2:09:00:2f:8b:a2:87:
54:49:3c:d3:cc:db:69:aa:97:fd:57:89:68:b0:43:5d:7f:aa:
cf:6e:c5:fc:cc:cf:3a:b6:50:3a:1b:99:29:29:0c:d1:52:36:
84:bf:96:4a:5b:b8:26:6e:9d:aa:e3:c6:0b:28:f2:bc:9f:22:
b0:dc:9d:e0:67:ac:f2:0c:ba:55:cd:56:ba:7b:ec:81:e7:a5:
24:9e:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:07 2025 by rpki-client