Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: OHQ+3Iqi/swWM6NxWeFByfCwyrLWtgqzEzjM9juc6GQ=
Subject key identifier: B3:86:97:5D:1E:A3:10:31:1B:8C:19:20:89:FA:14:31:DC:0A:87:DD
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 0196BD808878DE711846D7177EB1F197F36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 026F
Signing time: Sun 11 May 2025 04:00:39 +0000
Manifest this update: Sun 11 May 2025 04:00:39 +0000
Manifest next update: Mon 12 May 2025 04:00:39 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: aiOSrujyUep/YcJv+RZWPFrTvGZHXHlt4ROiqW6ALac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:88:78:de:71:18:46:d7:17:7e:b1:f1:97:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: May 11 04:00:39 2025 GMT
Not After : May 12 04:00:39 2025 GMT
Subject: CN=b386975d1ea310311b8c192089fa1431dc0a87dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:83:ee:6a:0c:e6:37:a9:c5:17:6c:c5:ea:
c1:e2:a2:c0:8e:1d:9e:e9:47:b0:b3:4b:a3:c6:e6:
d2:5c:ac:63:c8:e0:7a:c9:af:18:79:81:c3:87:91:
7b:41:09:f8:e6:96:7b:b4:f0:e0:4e:d8:76:b6:d6:
ed:62:84:fd:75:32:8e:80:da:15:86:35:0f:88:a6:
b0:4b:27:c4:f6:54:e4:c6:4f:b0:a9:09:e2:45:27:
a4:00:f3:c5:0f:cb:56:20:7a:94:d9:73:7f:65:94:
e3:dc:10:10:1d:5b:17:4b:95:94:3b:ae:17:1b:36:
6b:7c:87:d8:49:83:01:3f:8f:d7:67:88:cd:1f:0d:
db:94:f4:a2:88:96:99:4e:e7:b0:93:2c:cb:63:77:
de:1a:cb:b7:34:c6:22:fd:b6:1b:d9:25:79:dd:73:
ef:f7:89:2b:c4:c2:4f:f0:10:aa:84:42:ec:7b:c5:
61:3b:0a:8b:19:f9:76:47:72:13:33:97:5e:82:20:
07:98:f8:4f:81:23:1f:0b:12:a0:7a:3b:16:e0:6e:
86:7d:d4:e5:92:73:97:ab:97:d3:b8:ac:76:f0:1b:
51:b5:f7:c4:07:4d:c6:52:d9:41:ec:81:c2:8d:f7:
a9:f2:fc:60:47:36:8f:73:a8:77:ef:9f:a6:cf:2b:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:97:5D:1E:A3:10:31:1B:8C:19:20:89:FA:14:31:DC:0A:87:DD
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8b:ab:b7:4c:7a:16:0b:c9:f3:59:37:6d:5d:b3:61:65:8a:
fd:aa:c5:b5:95:5f:a0:03:e1:98:f2:0a:cc:2e:6a:77:6b:fc:
84:a5:1b:d8:00:e4:30:f6:45:91:de:77:54:c1:36:e0:06:08:
e8:7c:26:ea:ef:2b:ef:68:f0:db:fd:70:16:2f:00:53:6e:b9:
eb:b9:16:37:68:38:36:23:be:b2:3f:64:42:b8:5a:85:a4:b9:
18:26:97:54:95:4f:a2:65:09:4f:13:60:6a:99:e5:0c:09:f4:
ba:2d:67:68:0c:93:cf:a0:c0:77:7c:e3:54:3b:72:b0:5a:cb:
96:58:09:71:38:ea:e8:f8:df:72:f2:79:c2:8c:01:72:d8:27:
9f:92:03:4e:a0:29:bf:c7:b8:72:75:26:f4:c6:f6:0d:3e:b9:
f1:59:c1:e1:e3:6b:a7:ca:29:c6:3d:31:38:5d:8f:4f:ee:2b:
9a:aa:fb:dc:c5:12:9c:c9:8f:77:2e:f2:e3:e8:d1:52:b7:0d:
e1:94:9b:83:ec:51:f7:fc:37:d9:bf:65:24:c7:cb:92:fe:72:
53:ec:39:c6:52:71:23:13:86:7d:0c:2b:ff:fa:91:84:0e:d3:
bd:c5:82:26:16:ab:dd:ca:8e:2e:0c:49:00:f5:a6:0e:e4:c9:
5b:ae:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:41:41 2025 by rpki-client