Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: AYUmCsvkImPu7ZaNtJCkYQYiwrz/X9UFxhaptfAZ4Uc=
Subject key identifier: 2D:46:62:18:0C:5D:CC:B2:95:C3:72:BD:07:1E:A2:BB:8C:37:0C:6F
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01968BB89650BEC20667C986A9C8D82AF292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0F62
Signing time: Thu 01 May 2025 12:00:52 +0000
Manifest this update: Thu 01 May 2025 12:00:52 +0000
Manifest next update: Fri 02 May 2025 12:00:52 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: d46ZtNfexM159yLlAnOQvh3pqjdZPF31mAoJGykSZTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:96:50:be:c2:06:67:c9:86:a9:c8:d8:2a:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: May 1 12:00:52 2025 GMT
Not After : May 2 12:00:52 2025 GMT
Subject: CN=2d4662180c5dccb295c372bd071ea2bb8c370c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:37:67:b8:aa:58:13:5b:21:b8:16:c6:fd:
3f:bc:37:1e:11:5e:90:49:ea:88:a3:fc:42:27:03:
3e:d2:37:8e:e3:04:e1:7f:ad:f5:35:1e:79:50:4b:
10:9f:8b:dc:f9:d0:40:46:bd:a9:be:df:d6:1a:ae:
fe:fb:0e:70:03:ed:5c:e6:8f:08:38:ba:71:34:35:
74:7a:74:83:67:60:d8:40:ac:b9:d5:7f:ca:1d:9a:
9e:b1:f3:27:c0:53:66:6a:43:73:a4:03:92:4f:c9:
ca:38:f5:94:76:db:57:67:7c:23:e8:75:47:cb:e3:
75:c6:1c:ec:7c:14:1c:51:13:a4:26:59:bb:8d:53:
90:24:e7:6f:d9:6c:53:58:54:71:b1:09:d8:b6:20:
d8:d8:7a:96:98:ac:6e:76:1c:9d:5a:21:da:28:35:
ca:86:43:d2:b9:78:b3:df:f3:1d:2f:6e:69:7e:fb:
9d:86:bb:47:cc:70:c7:cf:cb:ba:46:91:79:2b:72:
60:70:99:12:60:ae:54:5c:b3:84:f7:95:fe:f6:e0:
4f:75:9f:87:b3:63:b4:c2:e8:fc:cb:ca:a2:c6:fc:
0a:40:4a:f1:63:7d:d7:7a:98:5e:3a:08:cf:d0:83:
a1:71:b3:fc:94:26:23:bd:34:1a:79:aa:df:47:a0:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:62:18:0C:5D:CC:B2:95:C3:72:BD:07:1E:A2:BB:8C:37:0C:6F
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c4:8a:d5:55:88:69:9a:3c:a9:fb:1d:56:88:5e:e2:f0:b3:
1e:86:4e:ff:7a:43:1a:5f:0a:ba:1b:6c:44:09:9e:ca:95:de:
8b:0d:05:e8:f6:bf:76:4c:4d:42:ed:f3:4f:8b:36:af:62:9d:
66:f1:5a:1b:01:d5:0c:5d:59:53:da:e5:20:93:66:d7:7d:ba:
da:ba:2d:51:bd:c4:40:57:5f:71:cc:50:e4:93:e9:07:80:09:
8e:4c:fc:16:dd:59:71:36:e6:66:78:9d:7e:db:41:76:35:22:
9b:4f:b9:6d:3a:b7:70:d3:56:e8:f4:7a:e1:cc:b6:90:bf:4c:
c6:d5:c1:56:31:7f:8f:da:cf:2a:c0:0e:ff:e1:55:8d:4a:5a:
41:e6:17:d0:3c:46:a6:3f:02:f5:74:fe:c0:f8:79:ce:4c:49:
da:a8:7a:7c:2b:28:5d:e4:01:ab:7e:79:44:45:a7:04:68:f5:
3b:5b:39:78:31:2c:c1:f8:57:5c:db:bc:68:e8:bf:55:3b:24:
88:04:6c:be:ba:db:9f:6d:24:b5:69:ad:e2:ad:cb:d1:31:80:
7f:01:ad:ee:fe:03:c1:37:5c:ef:8c:97:fe:0f:73:60:01:90:
13:f5:cb:e3:d7:0d:2d:e3:5b:a4:c8:84:5b:76:f0:1d:f7:b8:
2d:11:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:29:15 2025 by rpki-client