Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier: Ha8UTr1KTW9cSFcILFqZOsmiITRjf4eAVtPGTmWklak=
Subject key identifier: 32:0E:BE:33:B2:40:E1:C8:CD:9C:84:7E:6B:C4:2F:46:0A:2C:63:C6
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial: 019684A343A9AD60B6ED1C114FCDF7CFD228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number: 073F
Signing time: Wed 30 Apr 2025 03:00:14 +0000
Manifest this update: Wed 30 Apr 2025 03:00:14 +0000
Manifest next update: Thu 01 May 2025 03:00:14 +0000
Files and hashes: 1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: OPYnUH0kXiuNR713gZmX6rbBR9HNam1IPHHa7f6I9eU=)
2: S3dIMaIh62_y7HmBxhlxOM_ScHc.roa (hash: wYfLcBDYpc1piz/XiUHEld94m4pY4RAv7rF1GCt4/I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:43:a9:ad:60:b6:ed:1c:11:4f:cd:f7:cf:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
Validity
Not Before: Apr 30 03:00:14 2025 GMT
Not After : May 1 03:00:14 2025 GMT
Subject: CN=320ebe33b240e1c8cd9c847e6bc42f460a2c63c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:dd:b9:b8:b3:02:39:87:e8:99:60:f9:14:
54:dc:89:b7:49:1d:80:01:47:22:fd:6c:2d:fc:b4:
53:ed:7c:af:f2:22:d3:be:91:2a:d6:3a:89:3f:c4:
b6:a1:b9:3b:b9:6b:d4:2f:5d:e1:5f:11:dc:f1:49:
2b:0a:aa:49:cd:5f:e2:2b:31:73:00:d4:91:83:4d:
d3:de:b3:09:93:62:be:b6:54:7a:02:80:5e:43:9b:
6d:52:fc:96:94:3c:53:e0:d4:5b:f1:4f:c5:21:0b:
bb:bc:6a:4a:a0:d9:07:85:f6:e9:42:91:8b:63:67:
f5:d2:68:b3:78:a6:8e:d9:66:69:bb:72:89:19:ca:
fe:7f:17:eb:3c:ed:ef:16:e7:93:14:a7:5e:ec:cf:
ec:53:4e:5c:3d:00:fc:50:77:c3:03:73:ee:d7:1f:
23:e1:a1:55:92:5d:62:4f:63:d4:11:a5:a6:b9:f1:
be:5a:80:63:63:03:f9:60:3e:64:60:62:c5:00:b8:
f6:33:da:63:ed:5a:41:8e:be:a4:34:ce:56:10:d2:
c9:23:84:fb:b4:a7:29:b3:48:79:65:3a:54:c5:fc:
ff:11:5c:11:1b:60:2d:36:5e:33:ed:d5:e3:19:5d:
d7:71:6e:44:b7:7b:92:6d:2a:97:d7:e2:70:9b:43:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:BE:33:B2:40:E1:C8:CD:9C:84:7E:6B:C4:2F:46:0A:2C:63:C6
X509v3 Authority Key Identifier:
keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:da:c5:7e:3c:b9:1b:7a:e0:e1:09:cd:f2:4d:1e:d4:1a:7b:
e5:db:88:64:b7:05:61:af:15:95:ca:3a:89:94:3e:a2:83:6d:
44:dc:05:11:e2:88:df:7f:d1:8a:1e:b2:09:85:53:fe:c3:70:
bd:3b:47:e9:bc:46:84:f2:c8:dd:ca:58:58:48:82:84:02:9b:
04:f1:f1:9b:b1:84:fe:4c:21:3c:53:52:79:8a:1b:5d:3d:83:
d5:21:a9:f2:a3:ff:a3:5e:cc:ed:79:f6:ae:91:a6:f0:10:6c:
47:38:35:88:12:6f:e8:95:e1:e2:e3:76:3f:2b:db:38:eb:e6:
c4:b7:0d:f4:37:46:8a:71:1e:d4:14:fe:4a:d8:08:04:99:f3:
cb:80:c9:09:ed:e7:0e:1f:36:a5:0f:4a:15:38:5f:1b:c6:92:
54:bb:18:34:82:b6:12:f7:75:6a:83:a4:fc:67:db:12:ff:aa:
83:bc:68:da:17:34:20:0b:a7:12:9d:2b:75:b5:4b:80:5c:c1:
cf:4b:c2:96:30:83:7d:85:01:39:cd:46:19:17:2a:47:a8:87:
fb:16:63:d9:cb:77:dd:8c:d6:34:1f:98:01:12:26:01:41:94:
f7:73:9f:91:49:1b:14:bf:b3:6a:67:b0:25:b8:c1:e0:0b:a4:
af:d4:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:43 2025 by rpki-client