Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: YxJYMbeZmYxlbNo03miDoIaWCyb7ETyo4lb13PP3Oi4=
Subject key identifier: 90:AC:68:C9:AE:FA:D1:FA:81:38:E8:06:16:B5:E6:80:FC:11:F8:35
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 0196884929853DFF73155852B6413B691CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 04E4
Signing time: Wed 30 Apr 2025 20:00:18 +0000
Manifest this update: Wed 30 Apr 2025 20:00:18 +0000
Manifest next update: Thu 01 May 2025 20:00:18 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: nCaFj0GqNQ6npVcEr1nrvXyP6T4jS6SvBHabf5RJ7Qk=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:29:85:3d:ff:73:15:58:52:b6:41:3b:69:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Apr 30 20:00:18 2025 GMT
Not After : May 1 20:00:18 2025 GMT
Subject: CN=90ac68c9aefad1fa8138e80616b5e680fc11f835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:df:91:c0:2f:82:5e:27:c8:57:5d:d2:5c:
e5:7b:f2:18:96:63:aa:57:5d:4b:0d:07:b9:1c:82:
7d:1f:12:36:94:41:25:83:67:4b:36:9a:28:0a:da:
95:cf:79:12:0a:7d:66:5d:39:b9:b7:cc:dd:89:d1:
72:f0:5c:09:40:ad:bf:dc:c2:a7:11:6a:8c:e4:ff:
cd:25:ff:d0:e2:ed:50:ee:47:8c:53:dd:73:a5:93:
c0:6b:de:46:72:dc:03:1e:3a:ae:b3:c2:b0:cd:63:
3c:8d:4f:ec:9c:40:1c:f8:ee:d3:0e:12:48:bb:48:
13:72:9d:88:6a:fe:0e:d1:5b:c2:d0:f3:07:d7:1a:
7d:84:d2:46:58:f9:f1:8e:0d:85:3f:12:40:ae:62:
5c:e8:f5:3b:bb:c0:c1:fd:01:34:d1:0e:60:09:26:
d4:d8:d3:af:fa:b4:d4:73:f0:63:a2:61:d5:34:14:
ca:8b:c7:12:58:f7:ea:59:58:41:9c:44:7f:aa:fc:
8c:2d:6e:91:0f:d2:a1:f3:99:01:a6:cd:cf:0b:5a:
de:c6:f7:af:49:af:90:e6:d3:5e:50:3d:0e:f1:e0:
77:ad:25:c1:9f:e2:1e:b0:c0:ed:b5:e4:ad:ab:4a:
a8:ac:5b:1c:e6:64:a6:42:d4:a0:c4:83:17:4a:85:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:68:C9:AE:FA:D1:FA:81:38:E8:06:16:B5:E6:80:FC:11:F8:35
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:f9:78:2f:e9:4f:79:2e:cf:76:40:50:e1:aa:bd:7a:e2:
4b:50:f9:32:01:82:c0:56:48:38:5c:18:38:05:d1:22:fd:c3:
20:52:d5:73:c6:18:10:96:ee:9b:1b:a6:d9:27:92:07:e0:2c:
f2:e3:a0:1d:ab:ce:57:8c:bd:e0:4f:c5:7e:91:cb:0c:80:b5:
ce:11:72:72:52:52:42:95:c6:54:3c:4c:fe:1e:80:c6:61:cd:
bf:77:92:2f:35:7b:92:f2:0b:cf:23:5c:35:51:56:71:fb:06:
7c:46:03:71:2f:ab:d0:53:f2:bb:f4:3b:4d:2c:8e:01:09:99:
b9:50:92:06:b5:64:fb:66:ee:74:33:17:f5:64:9c:06:e0:6b:
35:df:8c:82:f7:64:4b:f6:ab:32:d4:01:65:55:52:a5:77:34:
08:2d:e6:b2:4a:89:89:78:78:ac:43:1c:a3:27:10:b4:df:d2:
c0:57:4f:81:4f:00:bb:ec:89:df:f3:66:c9:99:03:06:18:f2:
42:fe:36:36:06:ff:5c:83:78:90:9c:8a:7a:bc:24:fe:ab:1e:
75:13:c6:58:9b:f5:2e:c2:b5:5c:c5:f7:56:6e:5c:27:69:fb:
49:7b:be:42:8d:5c:cf:33:dd:99:5d:71:41:d9:71:57:95:c2:
00:25:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:18:09 2025 by rpki-client