Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: S2MUFy7WGKoceGuKVhmGVTYEmam2BnW+c3kl4CuGylE=
Subject key identifier: 54:AA:83:06:6D:87:7C:F9:91:F0:BE:45:7C:79:4D:16:13:36:A4:78
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 01968359DF3BDC2DC9A45D37B417775D603D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 21:00:27 +0000
Manifest this update: Tue 29 Apr 2025 21:00:27 +0000
Manifest next update: Wed 30 Apr 2025 21:00:27 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: IMNlJfg/NmdrFoVqpdE+2yhmHUJ1IDfNhGIJFgucy40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:df:3b:dc:2d:c9:a4:5d:37:b4:17:77:5d:60:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Apr 29 21:00:27 2025 GMT
Not After : Apr 30 21:00:27 2025 GMT
Subject: CN=54aa83066d877cf991f0be457c794d161336a478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:75:63:26:af:c1:5e:ac:c8:23:dc:2d:fd:
3f:2b:9d:3d:52:15:c8:9f:65:e4:d4:72:b5:c0:69:
fb:cf:10:8a:83:71:1a:d5:8f:a4:49:ce:58:0f:e1:
68:ef:c9:46:9d:79:6f:f3:d3:d0:80:26:25:c1:c7:
a9:62:32:cc:cf:ae:02:99:0e:7c:55:e8:56:16:ae:
07:cd:47:b4:43:3a:ec:c8:8e:09:cf:ef:8a:32:fe:
49:bc:a2:9c:79:04:e7:1c:92:a4:29:3b:fc:9d:22:
31:02:5f:3f:2c:66:ed:c1:ce:e0:9c:7b:f9:56:ea:
90:d3:dc:ae:be:79:54:19:d3:f9:6d:a2:7d:a8:ad:
59:3e:d4:6b:0b:89:55:ca:ba:82:df:49:83:87:23:
bc:11:1a:ed:29:41:c8:ff:49:35:3d:1b:05:9a:f8:
e4:d6:e1:64:4f:ef:de:59:a1:e2:c9:a9:09:72:3d:
2e:30:99:e3:2d:96:d8:f0:72:2b:e0:5b:83:36:af:
79:72:77:ee:2e:6e:a4:b3:48:6a:34:64:ba:07:66:
7d:b1:4f:35:59:72:ea:0f:4b:a9:7f:ca:91:4e:0b:
a0:bd:7c:05:19:8e:39:91:65:56:bb:2d:4f:bd:dd:
6f:0d:a6:f4:18:e1:ae:5b:81:77:4a:30:f2:d0:70:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AA:83:06:6D:87:7C:F9:91:F0:BE:45:7C:79:4D:16:13:36:A4:78
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:c3:5a:ff:d7:87:25:16:e6:94:26:7f:a8:01:4a:f8:ae:
f5:d1:fb:ed:7c:20:b1:cc:98:48:0a:27:b4:f3:48:2d:67:68:
9f:8b:06:84:b4:ec:ba:f9:90:f7:23:30:6a:ed:9e:3b:e5:2a:
e1:ef:86:cd:12:88:c2:6c:e3:de:4f:18:89:62:2a:37:2d:61:
f3:90:f7:eb:b7:4a:91:e0:d1:17:0c:b0:fd:03:2a:7c:f2:18:
4d:fc:a7:ad:9f:74:49:c5:1c:8b:e9:32:ea:0c:ed:9a:97:52:
13:b9:1a:21:dd:a3:81:bc:e7:91:58:e0:24:c9:49:d0:8b:19:
7f:7a:61:44:45:dd:3c:4a:2a:22:a6:31:cc:d3:d6:21:95:ff:
f2:5d:60:d6:58:d4:4c:94:9c:29:f2:6e:4d:5e:cf:37:4a:c6:
37:a6:c0:65:90:1a:99:93:f8:9a:1f:3b:56:47:3c:e3:67:eb:
85:ae:db:27:88:bc:7f:af:17:1d:d3:cf:4b:bc:a2:c5:28:d4:
c0:09:06:f2:5a:20:af:d7:71:8c:aa:44:98:cb:7e:f9:2f:79:
c1:10:6a:a0:3e:e9:06:ab:4a:31:94:b2:8f:a4:ee:82:01:f2:
df:c1:e6:9b:7e:e5:08:dd:f8:22:b5:55:94:4f:52:4e:60:47:
08:61:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:09:10 2025 by rpki-client