Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File: YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier: WhmWTIHZosY5feFvcwlLWcfBI770pAKcZcj3I8MJ48o=
Subject key identifier: 7E:44:31:ED:DC:09:D0:06:E0:CC:E2:92:D9:38:ED:56:93:62:C3:26
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer: /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial: 019699AAA16291285A6C1E79D6EF0B161E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 05:00:18 +0000
Manifest this update: Sun 04 May 2025 05:00:18 +0000
Manifest next update: Mon 05 May 2025 05:00:18 +0000
Files and hashes: 1: CYWLmYxcCQgki-Xk5YRvuSHALzs.roa (hash: 61Fic0FYH+kK7MaPnl8UV3ohGlvf2gRHDh8nlfVoQGY=)
2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: xDOg7ZvO6OPkQS5c8iROcYcoTvkSYmjlrYRAIPVanWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:aa:a1:62:91:28:5a:6c:1e:79:d6:ef:0b:16:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
Validity
Not Before: May 4 05:00:18 2025 GMT
Not After : May 5 05:00:18 2025 GMT
Subject: CN=7e4431eddc09d006e0cce292d938ed569362c326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:76:15:bb:40:35:6e:d6:f0:4e:b0:bf:4d:
c2:57:b0:b3:89:14:38:dc:a9:2d:1e:85:c3:58:27:
61:fe:d2:d5:13:a6:bd:0d:a9:20:49:bb:b6:dd:59:
3a:23:d7:c6:48:10:b7:ec:21:7b:9f:a5:a7:30:09:
9c:eb:d2:6e:5b:a3:24:40:1b:70:2a:29:1b:78:82:
48:52:06:ac:d4:f5:fe:5f:f1:37:92:26:f1:b6:a2:
49:86:4d:e7:17:a9:92:09:7c:91:2e:56:75:56:05:
f7:b8:b9:24:1e:6b:6e:61:c6:b4:c1:e6:93:e7:f9:
ba:6a:fc:a0:2c:29:79:43:d2:f5:0e:01:f6:da:a9:
f7:c9:e6:e1:06:0b:d7:4b:7a:94:b5:cd:2f:3d:e5:
db:b9:92:10:4d:30:f1:3c:8f:cd:f7:aa:15:95:51:
a3:80:84:12:bc:f6:34:f6:73:db:09:e6:09:31:8a:
f7:be:6f:41:51:19:aa:63:4e:bc:8f:e2:c6:8e:cc:
42:99:ae:cf:e7:9f:6f:b5:0a:4e:b6:ec:c4:9f:ce:
c7:63:ff:96:78:30:ab:d1:46:1c:1a:88:5f:4e:00:
87:75:38:5a:7b:14:de:1f:31:1e:27:50:fc:3c:56:
9f:0b:86:1c:1f:c2:77:ae:83:e5:81:5e:51:ea:5a:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:44:31:ED:DC:09:D0:06:E0:CC:E2:92:D9:38:ED:56:93:62:C3:26
X509v3 Authority Key Identifier:
keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:15:19:f9:2d:26:dc:24:f4:7f:aa:98:99:9b:04:fa:b2:77:
13:a7:5b:d9:4b:eb:92:65:61:61:51:a2:a3:5e:7c:af:ff:20:
8b:04:58:58:23:e2:75:19:41:88:d8:6e:f3:80:53:e2:17:06:
d6:32:15:09:26:29:ed:38:41:8f:02:b6:74:30:ce:57:ef:5a:
7d:df:08:23:f7:63:a0:c7:5e:c0:e5:68:83:42:21:d6:37:30:
37:98:d7:49:89:fc:0d:67:cc:b3:5c:c5:52:19:1f:b4:f3:42:
77:fc:0b:4a:5b:48:0f:bc:c7:fa:88:05:93:29:e8:89:f5:af:
a9:b6:1d:1f:87:c5:a9:11:60:bc:46:59:07:46:bc:b9:bc:8f:
b6:fe:a7:cf:9f:ac:42:e0:27:cc:8a:9b:c1:78:4d:25:e0:f4:
c4:76:8e:2a:6c:fe:59:47:48:22:98:eb:62:aa:a6:66:85:04:
23:2e:80:40:03:ea:17:e9:4d:65:a2:d9:39:e4:45:db:0c:e6:
80:67:3e:20:19:74:78:87:af:f2:03:c3:cf:5d:a9:78:0c:de:
e3:32:92:04:39:2e:7f:1d:d1:ad:f1:7e:42:a8:34:b6:a5:67:
c5:ac:91:b7:08:8c:71:c1:17:de:77:b6:8e:ab:a1:41:a7:4b:
22:dd:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:08:07 2025 by rpki-client