Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier: +APz6TWzRz94t513pRceePqB+rIjNXLX6bdC15UJNsM=
Subject key identifier: 80:02:8F:F3:AA:FD:74:E5:FC:CB:29:69:36:BA:9D:CA:02:20:2E:9E
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 0196730B699F650560FE44C7EEBEA094C3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number: 0CD7
Signing time: Sat 26 Apr 2025 17:00:49 +0000
Manifest this update: Sat 26 Apr 2025 17:00:49 +0000
Manifest next update: Sun 27 Apr 2025 17:00:49 +0000
Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=)
2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=)
3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: HocHRNLuUsi2koSuvRfXiKs545to6cFhI9Ca8vVE7yU=)
4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:69:9f:65:05:60:fe:44:c7:ee:be:a0:94:c3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Apr 26 17:00:49 2025 GMT
Not After : Apr 27 17:00:49 2025 GMT
Subject: CN=80028ff3aafd74e5fccb296936ba9dca02202e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:58:d9:be:95:af:ce:47:26:5a:09:49:c5:
4c:2a:aa:dc:a4:df:aa:96:25:ec:a0:33:bb:dd:3c:
5b:3c:32:07:84:82:d2:56:0c:32:b0:bb:92:a5:2c:
13:e2:e4:03:fc:9b:c8:01:36:e3:70:7c:07:84:ac:
ee:60:a9:05:f0:fa:63:7e:af:26:4d:0a:33:d5:94:
0e:bb:4b:b2:89:40:3a:3b:47:e6:ae:a7:ae:7a:f5:
69:56:4b:5b:59:3d:80:26:b6:6c:92:a4:02:d1:be:
14:03:b5:ff:04:4d:f8:0b:a0:39:ad:25:9f:c3:d0:
89:66:75:5a:13:dc:d6:39:c6:1c:b8:0d:1a:f9:33:
45:27:32:d4:20:63:9d:eb:0f:dc:87:8f:5c:82:53:
f5:0b:da:39:a9:e5:88:27:05:16:5b:50:f8:fc:37:
57:ea:a4:ac:f6:34:a5:85:e0:82:a4:57:c2:78:32:
b6:b5:c9:12:7e:83:a2:8d:8d:82:f0:b2:fd:53:2d:
81:c4:d4:86:d7:d1:a9:65:73:37:6d:c3:61:00:45:
c5:80:b5:94:50:73:9e:9d:28:2c:97:76:d5:a0:d0:
22:d3:cc:f2:cb:89:10:bf:9b:68:de:53:5f:43:3b:
07:44:8c:0d:23:cf:e3:8d:c7:97:fe:8c:61:02:ae:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:8F:F3:AA:FD:74:E5:FC:CB:29:69:36:BA:9D:CA:02:20:2E:9E
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a9:bc:8c:1e:07:2e:5d:d9:58:e6:fd:02:51:48:78:c1:ab:
3c:e4:67:5a:94:67:87:04:5e:a5:b2:4f:e8:99:d7:49:ef:2d:
13:50:0e:6f:e1:10:0d:14:be:47:3e:2a:1d:4f:72:2b:04:f8:
96:97:1f:cb:42:51:fb:c2:6a:b1:c2:cb:3f:7c:3c:cf:7e:c0:
35:7f:82:f7:a8:9e:78:f4:9d:aa:15:a0:dd:4c:b9:7a:2d:cd:
c7:a2:28:b3:90:44:bd:f6:df:bf:0e:eb:3a:af:93:80:b3:f9:
72:93:2c:bd:a8:e0:a0:c6:76:9b:9a:a2:65:90:e8:1c:53:b9:
65:72:7b:b3:4e:fd:54:f1:ea:c3:b0:5e:94:48:3f:c5:5b:c0:
ab:6a:3f:c0:58:cf:ce:ad:bc:be:f1:12:bd:d6:27:83:e9:99:
4e:83:a5:e9:ea:56:eb:b4:97:e6:74:e7:83:59:89:10:91:77:
87:53:da:6b:a8:5a:88:dc:96:f2:f9:d5:18:83:77:ab:2b:70:
ff:33:42:c6:47:ab:aa:67:8f:0f:0b:d2:67:82:4b:1c:68:b6:
1a:97:f1:f0:f4:1d:ee:34:a3:72:a8:90:37:bc:1f:82:6f:bd:
7b:70:f2:a1:0b:7a:cc:25:9c:3c:d3:2d:2b:4a:02:57:33:91:
e3:45:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:32 2025 by rpki-client