Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: Zsm4MKn176AiXxbHqywXXa5BL24B0gfW6Y3Cdu1eBeo=
Subject key identifier: 76:0A:87:7D:1B:11:D2:0F:1D:83:57:88:13:F9:2C:48:34:44:08:85
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 0196759EB9571EC05939422620A1B9878D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 10F9
Signing time: Sun 27 Apr 2025 05:00:58 +0000
Manifest this update: Sun 27 Apr 2025 05:00:58 +0000
Manifest next update: Mon 28 Apr 2025 05:00:58 +0000
Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: FK+r6jWsEvImYFLPpHUPx6vnW27L928bXIu+8B7mEgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b9:57:1e:c0:59:39:42:26:20:a1:b9:87:8d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Apr 27 05:00:58 2025 GMT
Not After : Apr 28 05:00:58 2025 GMT
Subject: CN=760a877d1b11d20f1d83578813f92c4834440885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:95:ca:94:9b:c4:cc:0a:aa:20:b8:ad:aa:
d9:8f:5b:aa:86:9f:8f:7b:03:60:79:22:ce:99:e6:
20:87:fe:ab:d0:6a:7a:26:54:09:7d:4c:71:e9:40:
db:ff:c8:a0:31:31:41:79:0e:d3:09:46:ac:63:45:
3d:bc:6b:1b:d4:f4:bf:a4:be:ed:74:e5:93:bf:68:
62:f7:aa:88:8d:e0:d9:e0:64:f7:cd:d9:e5:d9:67:
2c:1b:7f:e9:cc:30:d2:dd:cb:d7:8b:2f:40:27:03:
5a:4b:ed:66:ea:1c:c1:3e:14:53:db:5a:91:14:42:
63:f6:aa:ae:36:ee:66:83:10:0d:84:fc:6f:ae:f1:
d6:44:54:41:3f:43:ce:2e:23:1b:bc:66:24:b6:13:
90:40:78:1c:f1:cf:f8:27:fd:f4:50:1f:24:dd:20:
4f:04:7f:6d:e3:10:c5:e9:6a:17:1f:63:e2:71:9d:
a9:5a:8e:1c:7f:2b:0d:24:32:64:e9:e7:a7:78:17:
e4:20:47:c5:e5:0c:a5:be:bb:c1:39:95:f0:c0:cd:
27:71:1e:ec:e6:fe:c3:67:ec:3f:3d:ca:d2:1b:ba:
89:94:a8:4c:63:5d:c2:14:e5:00:c2:b7:38:e2:2c:
65:6c:08:89:57:a8:e2:9a:af:bb:87:a6:08:76:4e:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:87:7D:1B:11:D2:0F:1D:83:57:88:13:F9:2C:48:34:44:08:85
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ef:a0:cc:81:ab:67:16:e8:a9:11:ad:fd:61:e3:8e:c8:fd:
f6:00:72:02:ac:86:da:cb:b1:a1:bc:43:71:77:19:7f:ca:3c:
a1:ec:18:54:de:f8:3f:1d:61:35:bc:16:33:33:a6:cf:00:74:
7b:21:47:9a:fb:67:50:62:69:3d:67:98:b5:25:6e:5c:7c:c5:
ec:f0:8e:95:9b:f9:2d:04:41:34:ff:fa:cb:9a:d8:70:aa:eb:
9f:79:31:9d:28:c5:98:f8:75:58:34:50:a8:bf:dc:ff:9d:8e:
23:8a:55:65:67:ec:f4:87:af:4c:31:ba:3b:a0:40:5b:45:77:
73:14:5f:a9:6a:52:c8:c4:8d:0f:ec:5f:bf:8a:17:16:fe:9c:
63:f9:56:d4:80:c8:35:a1:bb:1d:e3:2b:c6:5b:bd:09:2e:c3:
ad:01:4b:5c:f4:8c:f0:59:83:08:44:ab:4c:f1:7e:fb:f0:d2:
3a:b3:9e:70:a3:83:87:98:e0:82:51:fc:91:16:9a:a3:e5:34:
a9:95:b7:7b:78:7b:81:4c:f2:7f:a3:4b:66:a8:b6:db:68:27:
5e:fa:d4:d8:53:1d:67:89:f8:ad:f3:47:52:8b:81:ac:0d:fe:
af:b8:45:7d:d2:37:07:9b:0f:6e:e4:36:50:51:b1:61:a7:d0:
21:db:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:22 2025 by rpki-client