Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: Z47zNfX8krFs0pTKQJ8N7282MT2ZsMjp9BD2EbV2gaQ=
Subject key identifier: F2:A0:D5:0B:84:D9:0A:29:3A:BC:C3:E1:35:43:4A:1E:3F:4E:C0:27
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 01967943E563E2B6E4B790CFD5ADF6E85D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0E61
Signing time: Sun 27 Apr 2025 22:00:14 +0000
Manifest this update: Sun 27 Apr 2025 22:00:14 +0000
Manifest next update: Mon 28 Apr 2025 22:00:14 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: cpPPgOGVI1kgt/U9Xp3+1OLWyXhsGBuc4y7h2Pqg00c=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:e5:63:e2:b6:e4:b7:90:cf:d5:ad:f6:e8:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Apr 27 22:00:14 2025 GMT
Not After : Apr 28 22:00:14 2025 GMT
Subject: CN=f2a0d50b84d90a293abcc3e135434a1e3f4ec027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:b0:8e:7e:76:94:c0:2d:51:2a:c1:ba:88:
f4:95:e3:c8:73:b6:55:a4:5f:53:a1:32:02:fb:ce:
b0:06:5d:5d:d4:2f:f3:e0:c8:d9:cb:2f:3a:d9:a0:
31:9c:05:c8:f4:33:0a:d0:b6:56:f7:30:ea:2d:17:
dd:d9:25:8f:c4:77:21:e4:c3:6f:e4:96:1a:5a:6a:
5b:e2:b8:6b:ba:b2:e0:0d:3b:4a:5f:ff:5c:d7:3b:
4a:d6:53:d9:66:18:5e:bf:7c:f5:21:df:9a:c2:aa:
e8:65:7a:e6:d5:09:38:f5:d7:5f:77:f2:ea:0e:d5:
28:51:2c:75:30:85:fa:1e:f7:0f:25:26:58:89:fc:
a2:7f:79:2f:20:12:91:4d:37:d3:d5:35:59:a4:32:
64:c7:f5:4f:3b:ac:29:98:01:86:6d:61:5d:79:56:
4f:4b:9a:c1:3a:42:b1:80:03:da:c9:56:95:28:ab:
51:24:04:d5:3c:2b:c6:20:1e:f2:50:b0:c2:0f:6d:
bb:8a:36:6d:66:00:04:3c:6b:6c:79:ab:79:21:55:
42:78:01:ba:4d:28:1c:64:0c:c0:e8:2e:aa:61:de:
bf:bf:a6:31:55:c4:9d:19:a7:e4:1b:2b:c0:b1:e1:
71:b8:66:1e:72:0c:d2:58:17:0e:b6:3b:b1:f9:1a:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:D5:0B:84:D9:0A:29:3A:BC:C3:E1:35:43:4A:1E:3F:4E:C0:27
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:22:b6:21:79:12:4f:47:28:c4:2d:fb:1e:04:6c:d8:97:e0:
19:15:67:f4:7f:4c:c7:59:57:1e:d8:86:3e:c2:98:ef:52:6b:
f4:7c:f7:df:dd:8e:db:d1:a4:2c:53:7e:e8:99:8a:b3:b9:0d:
2e:01:59:81:3b:b9:30:e6:6f:9f:3e:15:cb:7d:b8:69:aa:a1:
14:d4:2f:b3:f9:3e:e9:57:00:6c:2f:27:e3:25:28:f0:2c:f0:
f9:22:66:ae:a7:6a:c3:02:ee:67:00:8f:e1:c5:87:bc:a7:1a:
3d:de:77:76:21:d7:9e:f9:cc:0b:4a:5b:9a:4e:61:9f:e1:bb:
7f:5f:cd:f4:2b:40:7f:2a:08:44:d6:43:3a:c0:60:48:4f:a3:
cd:02:78:12:da:83:dc:5f:9c:de:4b:c9:54:6b:87:aa:bf:06:
08:07:36:38:a6:07:ee:02:ff:5f:60:53:c6:2a:10:e7:81:f5:
62:6f:2a:b6:89:4b:7a:04:3c:28:ae:63:e5:ab:83:aa:cf:ab:
a7:0c:1c:fc:31:7b:b8:1a:0a:12:34:58:a2:27:bc:78:88:0d:
02:b8:e0:d0:3f:d9:af:33:b1:9f:b7:ee:b5:b6:6b:7c:c3:ef:
d6:da:24:7d:2e:68:71:ac:51:6b:4d:1b:80:3a:c1:19:5d:0c:
e6:2d:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:54 2025 by rpki-client