Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: H1F/0BPRPGVF/JKadhu0c5lqe/LmSQ0KfQAba4/1ykQ=
Subject key identifier: 31:7C:4D:6D:F1:7E:43:CD:9E:F5:4A:07:81:75:D1:0C:EA:EE:55:17
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019674548E323B04B059943838E546ABE3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 03E7
Signing time: Sat 26 Apr 2025 23:00:20 +0000
Manifest this update: Sat 26 Apr 2025 23:00:20 +0000
Manifest next update: Sun 27 Apr 2025 23:00:20 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 62o9xfSVDpCJwKrFeFY6KqNN11Mg6GCf4Z8lWtHcbEk=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:8e:32:3b:04:b0:59:94:38:38:e5:46:ab:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Apr 26 23:00:20 2025 GMT
Not After : Apr 27 23:00:20 2025 GMT
Subject: CN=317c4d6df17e43cd9ef54a078175d10ceaee5517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:84:0f:fc:20:97:cb:45:b7:40:95:d5:d9:58:
41:35:76:9e:f5:ed:b4:0b:c3:10:37:7d:1a:ac:06:
d3:91:bb:b7:fb:91:e7:f6:00:23:ee:4f:9b:43:dd:
c5:d5:84:7b:bf:b3:63:47:f3:1a:61:b7:2e:f5:1a:
e8:11:66:4c:6e:82:af:72:36:57:54:1c:42:f3:e2:
47:2d:02:4d:77:ae:25:4a:8e:a7:35:e8:3b:9c:f5:
df:b5:28:be:6e:bb:46:cf:34:dc:16:c2:a9:b6:1f:
1c:0e:93:a1:31:32:01:0f:03:2b:95:9d:0c:c5:5b:
d9:35:b3:23:53:8b:e6:03:0b:fc:54:a9:2a:d1:3f:
3c:c3:ed:94:ca:f9:b2:8f:dd:b0:e4:ce:04:0d:b8:
a7:dc:06:a8:6f:b0:9b:56:89:90:d3:5c:db:68:a9:
cc:99:df:0e:d6:0c:34:fb:01:ce:ae:b2:f3:d0:ae:
6b:69:d4:31:69:2b:aa:71:71:b6:eb:5c:4d:64:ee:
84:15:36:47:63:4c:29:0f:9c:d6:64:fd:3e:a6:0c:
99:ec:c0:f2:83:1a:0e:a9:29:9a:f9:ac:82:c6:f9:
0d:4d:af:2f:0d:46:f6:0a:95:79:16:c5:b5:02:eb:
d2:b2:be:de:a1:43:b1:8b:50:a1:1f:a8:93:cd:78:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:4D:6D:F1:7E:43:CD:9E:F5:4A:07:81:75:D1:0C:EA:EE:55:17
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:67:a4:6b:36:a2:e5:f9:0c:06:55:2e:d6:54:b2:30:85:ea:
71:cc:d2:d2:ec:48:7f:1c:36:29:3f:a8:a8:54:d0:e4:e3:74:
32:21:36:f7:ea:6e:70:1c:e2:b8:73:47:3e:31:8f:fe:2f:fa:
8b:0c:08:bf:ff:73:bf:f0:bc:a2:61:e1:69:d9:7e:b1:37:ba:
ad:57:48:b0:e5:ef:87:c8:93:3a:e9:dc:a8:7e:f3:f6:78:68:
3c:50:89:7a:b9:5c:31:11:31:f3:c9:fe:63:90:11:44:f9:ed:
78:93:2a:c8:03:cd:92:25:e8:59:1b:18:8c:44:1a:21:2f:10:
52:b9:25:ca:bf:31:ee:77:89:46:a9:7d:57:4d:ee:9a:86:39:
09:b2:5f:7f:01:65:3d:58:ec:04:5d:d3:bc:ba:d2:26:e3:fe:
86:d5:82:d3:22:0c:8b:c8:67:c8:32:0f:81:30:ca:02:d9:2d:
1a:bd:db:62:75:78:b9:74:0f:d2:0d:65:71:6f:c3:bb:de:af:
7c:10:50:ca:09:c4:c1:01:53:a1:64:e7:f5:25:85:f9:3f:05:
14:3f:bb:8a:9c:79:5d:62:39:4d:ab:77:20:e4:c1:7c:4f:49:
be:d1:3b:60:cf:33:6b:e1:0e:29:9b:bb:9f:9c:a6:c9:b3:eb:
04:81:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:35 2025 by rpki-client