Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: 6BkMFv65noO54QrYUegtqAZIz4yqyQKjjYlDm981lfI=
Subject key identifier: 47:0A:E3:30:C7:0D:F4:3A:65:7C:42:D9:8B:4D:B6:B5:CF:F0:0C:4C
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 0196944E095C3DEE92D1C4A53294CD2F2B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 08DB
Signing time: Sat 03 May 2025 04:01:04 +0000
Manifest this update: Sat 03 May 2025 04:01:04 +0000
Manifest next update: Sun 04 May 2025 04:01:04 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: Cy+IpRHzoqbw+pSPreWIqVWrOGwMjkk1Wtj/kdeW4GQ=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:4e:09:5c:3d:ee:92:d1:c4:a5:32:94:cd:2f:2b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: May 3 04:01:04 2025 GMT
Not After : May 4 04:01:04 2025 GMT
Subject: CN=470ae330c70df43a657c42d98b4db6b5cff00c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:6f:32:52:74:ef:97:d1:84:e3:d4:9f:0f:
78:2c:e3:0a:5f:56:fb:0b:32:a2:f2:4f:d8:91:cb:
7e:d8:88:45:e5:c6:77:5a:85:ca:a8:9b:26:ac:d3:
c8:05:27:cb:f7:2b:b8:05:28:6c:9f:c3:fe:26:57:
d1:d4:b7:7e:26:40:2e:c3:ae:ac:3e:83:ae:1e:00:
86:1b:d3:9e:cb:fb:cb:2e:50:0d:20:db:fa:e2:aa:
fb:3a:c8:9a:44:e2:a8:f6:90:dc:ea:3a:5a:23:ae:
9f:a9:42:d5:f6:ce:7a:e7:37:84:75:e0:77:6d:ac:
d9:7e:2f:4f:75:c7:ab:20:ea:8a:b1:f3:3d:bf:d8:
85:74:d3:37:54:17:1c:81:56:15:e1:9e:0c:c8:f2:
6a:a0:c0:aa:03:f9:53:e6:7d:12:ec:4d:71:17:b6:
ae:af:28:ab:a4:e6:a1:7f:5a:ba:6c:d6:7f:99:36:
c9:3b:41:5a:38:c9:81:87:38:84:b9:7d:e3:e3:01:
61:7a:87:90:3d:50:1a:ec:ac:74:d0:cb:50:a0:90:
75:8e:37:75:e9:e1:53:1c:e7:48:cf:39:1d:9f:29:
3a:aa:27:15:09:3b:18:2e:14:76:fa:df:9a:0c:60:
dd:67:b9:d9:22:a7:6a:bc:15:a1:c9:17:c0:21:ce:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:E3:30:C7:0D:F4:3A:65:7C:42:D9:8B:4D:B6:B5:CF:F0:0C:4C
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:de:54:9f:0b:d1:a4:90:40:87:46:bc:dd:ad:49:e6:5b:
a3:e9:a1:d3:6d:53:a2:5f:7d:6b:5b:6b:7f:78:e0:80:6c:31:
84:4b:17:d1:49:2d:e5:04:74:3c:f9:cb:0a:df:1a:11:f6:cf:
85:7e:f9:9d:4b:50:93:67:37:f0:54:9e:01:65:10:6b:1f:1f:
e3:23:d6:b6:65:52:c8:3b:1d:b9:82:a9:16:bb:16:fe:18:5f:
b3:eb:37:1f:86:9c:20:2a:db:51:4b:a3:e8:a8:99:c9:e0:8e:
d4:f1:36:06:38:8d:f5:80:70:93:73:4b:47:f0:01:71:5f:b7:
76:a7:f8:50:4b:cb:64:81:0e:aa:86:69:c9:0d:43:a0:0a:f3:
b3:23:b6:11:7f:cd:ff:43:06:39:39:69:57:65:f0:23:02:e8:
1d:b9:0a:b4:c3:a5:c3:7f:ea:68:33:46:42:df:a7:ce:55:9e:
60:3f:8e:9d:12:10:a0:4d:12:96:1f:44:f8:22:d6:91:8b:02:
07:1d:52:ad:f9:e5:0a:41:b5:e0:f9:b4:9b:d8:fe:76:ca:20:
e9:8e:67:d0:99:54:f4:94:e4:26:fa:a4:45:61:09:48:93:f8:
de:68:e8:6e:df:a7:e8:4c:aa:e4:59:60:fc:34:94:05:5e:c6:
a5:9a:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:42:34 2025 by rpki-client