Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: DdxF2xdJ80jvG+7WoMuCNvGcCmaZBIzup7Detp3712c=
Subject key identifier: B5:7C:FE:04:D8:82:C1:99:41:D4:2B:D9:F4:C2:7E:FD:4C:E8:2A:A8
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019675D519993F781BFA919EE3F7292623F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0844
Signing time: Sun 27 Apr 2025 06:00:21 +0000
Manifest this update: Sun 27 Apr 2025 06:00:21 +0000
Manifest next update: Mon 28 Apr 2025 06:00:21 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: aLD5+FlsIqq1g8OSQzvE5DXUzPmw0yIHnxMNPW/GR2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:19:99:3f:78:1b:fa:91:9e:e3:f7:29:26:23:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Apr 27 06:00:21 2025 GMT
Not After : Apr 28 06:00:21 2025 GMT
Subject: CN=b57cfe04d882c19941d42bd9f4c27efd4ce82aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:fb:49:39:ec:e6:af:8b:52:09:43:05:5d:
2c:71:62:9a:8a:14:50:b8:35:ad:f9:05:0f:20:43:
93:73:c2:1b:15:a9:10:b2:ee:45:ed:6b:c9:de:2d:
70:89:2d:02:25:50:f3:48:f6:aa:e9:d2:88:e7:63:
bd:c2:8a:1f:65:10:ca:dc:34:8f:df:4b:8a:b9:98:
43:01:6c:0f:b0:4b:18:97:80:4e:5a:e0:f5:ff:e4:
7d:9f:26:5e:cf:95:10:ae:e6:06:42:11:35:3d:fb:
f6:1f:59:79:19:a9:fb:a1:14:2a:1d:de:81:8b:e9:
96:8c:7e:a7:8c:f4:37:8f:11:e6:cb:9d:3a:16:ab:
66:ee:e6:d2:06:24:ad:32:4b:3f:a6:19:06:46:d0:
19:05:cf:08:cf:62:8a:86:fd:cd:db:1f:78:38:a7:
8d:33:47:71:09:3b:8c:23:ea:88:f7:9c:62:ca:9b:
50:b4:e2:84:50:fb:16:b6:01:d6:03:87:23:d6:fd:
8e:c3:82:2c:f1:d3:62:80:e6:65:69:dd:01:5a:41:
8e:9e:81:40:0e:e0:87:b6:ab:83:b6:38:e1:a5:70:
fd:50:a3:f3:e1:cb:43:e5:ea:c8:1e:79:7b:d5:36:
36:8d:4d:1d:a4:12:23:43:cd:00:ed:a1:b1:d8:8d:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:FE:04:D8:82:C1:99:41:D4:2B:D9:F4:C2:7E:FD:4C:E8:2A:A8
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7d:a2:20:16:1b:08:f0:7a:d3:8e:8c:42:ac:f0:59:31:92:
1e:38:5e:f0:60:90:1c:9e:d6:ea:15:f7:84:89:fa:03:d6:ad:
c0:cc:f9:55:3f:4e:f4:c1:41:50:01:62:bb:d0:4b:47:49:df:
e1:17:50:0d:31:be:ab:ed:3b:23:f7:7b:8a:47:60:97:40:ab:
04:04:9d:7f:c5:db:74:ea:02:00:63:a3:66:cf:11:2b:d8:83:
87:8c:53:b0:dd:f5:da:39:a4:0c:3a:5d:3c:4f:23:b0:5e:8a:
ee:a1:a1:97:65:8f:13:92:14:ff:df:f7:14:a2:09:e3:68:63:
11:4a:e0:80:64:d6:a6:32:83:4b:67:06:c3:17:18:90:5c:85:
37:3a:14:05:b8:8a:3f:08:5c:71:8e:e3:c7:67:3e:42:0a:78:
d7:ee:78:65:fc:fd:50:ea:37:7f:35:98:26:9d:49:e0:b3:05:
50:3c:56:9a:1d:9c:76:a1:1b:f5:60:06:c1:56:73:87:8b:02:
e5:de:18:77:32:f4:35:ec:e8:5f:17:db:cf:be:e1:10:b7:62:
ea:66:14:0d:da:05:86:41:5b:7e:81:2b:7a:15:7b:35:b7:88:
c8:a2:21:da:01:a7:92:98:05:5e:fd:6b:9b:8f:08:35:67:49:
21:3e:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:08:11 2025 by rpki-client