Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: Gf/bEMGQZNrlCIxmt73dGy2+x0EKqnoAElKBM2CvtpI=
Subject key identifier: FF:17:AE:34:1A:F4:86:D9:F2:DC:3C:75:4B:0D:28:1B:C4:02:94:A6
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 0196767A9CD7EC4473F1C7A6CA7D7B8CF025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 066D
Signing time: Sun 27 Apr 2025 09:01:09 +0000
Manifest this update: Sun 27 Apr 2025 09:01:09 +0000
Manifest next update: Mon 28 Apr 2025 09:01:09 +0000
Files and hashes: 1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: SVOJzR1UtHI2uMdgmbhrHy8tWN3ouhStjk+/UzJjC5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:9c:d7:ec:44:73:f1:c7:a6:ca:7d:7b:8c:f0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Apr 27 09:01:09 2025 GMT
Not After : Apr 28 09:01:09 2025 GMT
Subject: CN=ff17ae341af486d9f2dc3c754b0d281bc40294a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:36:7c:b5:50:55:fa:e0:58:1a:88:00:78:
5d:a2:28:3c:f2:33:0e:db:82:19:29:8e:7b:13:81:
fc:1d:a7:37:3d:ad:83:8d:fc:75:01:4a:22:6e:93:
07:1b:d2:c9:83:30:30:64:bc:63:51:79:80:74:66:
5d:43:18:f3:db:8a:64:d0:d2:75:7c:d1:ad:65:e6:
40:0c:c9:fc:ae:14:86:7e:f7:aa:8e:2e:96:04:38:
b8:ac:c2:19:bc:3d:5a:9e:5f:e7:dd:69:e5:8a:70:
b2:cd:9f:04:51:ab:1d:de:b0:b0:74:f4:44:04:8e:
cd:d6:48:1f:e9:4d:a2:d1:c7:08:d2:3c:55:51:df:
c7:01:2d:26:11:7e:b4:01:3a:80:86:21:66:d6:04:
ea:82:6b:24:0a:f6:16:87:14:fd:a1:0d:0d:3d:67:
6b:b8:9b:4b:bd:1d:0f:37:dd:02:c7:b8:83:76:a9:
c0:54:49:d1:a1:71:82:4d:77:97:22:a4:cd:e7:e4:
7b:7b:77:e7:e3:9c:63:56:51:b3:c0:2e:1c:70:69:
f3:fe:34:a9:95:13:8b:56:a3:a6:e9:dc:d2:66:62:
2a:2e:8e:b3:d8:ef:d4:97:bc:58:e5:77:2b:e5:96:
67:97:25:ce:57:f6:52:a5:eb:96:a6:2d:6c:b5:80:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:AE:34:1A:F4:86:D9:F2:DC:3C:75:4B:0D:28:1B:C4:02:94:A6
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:65:3d:32:f8:65:b9:91:ae:4d:08:92:e7:8c:44:cb:f3:41:
0d:cf:c2:e3:f6:cd:1b:3f:a0:48:33:f4:37:08:19:bc:d6:06:
c6:c0:8b:e3:0e:4a:5b:8d:3b:cc:bc:68:46:51:60:b9:0b:bb:
f4:92:2a:d7:3c:c8:0e:5b:61:20:36:d4:3d:8c:e8:38:de:31:
b9:c6:ee:8c:5a:64:1f:81:c5:dd:8c:4e:fe:97:86:65:41:93:
5a:be:40:49:f0:26:74:65:01:83:4e:06:6b:c4:bc:d4:50:7b:
36:bf:39:a6:4f:74:85:08:22:a0:77:95:c5:cc:e8:76:b4:ce:
bb:f5:77:9b:4f:96:43:43:27:5f:2f:70:9e:87:be:6f:26:1e:
43:1b:0a:7a:fe:40:d8:0d:a6:75:cd:0b:c1:a7:07:9a:f8:30:
da:08:13:4c:8c:9e:3b:e8:d8:ae:8f:79:b5:a6:a4:07:2c:4c:
09:38:41:cb:ee:18:96:ed:70:29:b1:75:3d:25:c9:3b:15:e9:
72:e2:c3:ba:e4:d3:32:b7:0f:28:12:44:8b:ef:60:c7:8f:5d:
eb:d9:3c:7a:25:a1:bb:c6:6d:6e:ea:df:03:72:91:e9:38:33:
a1:44:d0:45:a9:83:0a:70:ff:b5:73:a8:a7:1d:30:df:ea:3b:
dd:4a:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:00 2025 by rpki-client