Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: jwc1hIcFWZMYE9aumlnvp5N3IMFsV0GYVq0hMHT6gik=
Subject key identifier: A0:6F:3D:90:02:5B:E4:4B:35:C8:2A:98:72:30:4B:AB:AF:E9:6D:8C
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0196759E35F02C18A8840C6DB22D2C6747DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0F74
Signing time: Sun 27 Apr 2025 05:00:24 +0000
Manifest this update: Sun 27 Apr 2025 05:00:24 +0000
Manifest next update: Mon 28 Apr 2025 05:00:24 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: gVPbzO2OWv2PUtJRo+Oh/q49lg/6XpxnW8QzS+uXmFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:35:f0:2c:18:a8:84:0c:6d:b2:2d:2c:67:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Apr 27 05:00:24 2025 GMT
Not After : Apr 28 05:00:24 2025 GMT
Subject: CN=a06f3d90025be44b35c82a9872304babafe96d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:50:8a:e7:4e:e6:ef:f0:7b:b8:ec:93:e3:
99:da:83:3f:6a:cc:80:d7:7a:e0:90:4f:5d:58:9e:
a4:f4:d7:30:6d:57:23:2c:e7:da:ff:07:84:52:af:
aa:2b:04:64:fd:6d:9e:4a:eb:5b:9b:86:58:ce:ad:
d6:27:1d:0d:08:56:cb:43:67:f3:85:9d:4a:8b:ba:
d2:a6:71:d4:b9:6b:d3:ee:35:29:54:2c:be:ae:be:
15:d1:e7:f9:61:b1:a8:22:e2:7b:65:eb:27:99:7e:
c2:bb:23:1f:06:32:67:a8:75:1f:cf:da:5b:09:0c:
6a:99:c1:d3:6a:ee:05:e3:df:95:18:2c:d7:50:3b:
31:34:8b:ac:34:59:f4:74:bd:68:c5:8e:e1:82:0c:
41:24:63:a3:04:28:47:83:fc:3d:72:ac:26:36:47:
b9:c5:84:54:09:7e:d9:7e:77:2b:6f:6c:0e:8c:de:
0a:45:7c:46:79:5f:b1:94:20:06:51:fe:5e:19:09:
96:0b:eb:b5:44:33:35:62:be:d9:3a:92:d9:a6:5b:
24:7b:6c:08:3b:f5:06:a8:6e:76:66:78:64:15:74:
ee:88:da:03:53:f7:c6:3c:76:50:e4:72:9c:1f:82:
25:aa:1a:31:4f:8d:29:53:26:37:ff:c7:d5:1a:17:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:3D:90:02:5B:E4:4B:35:C8:2A:98:72:30:4B:AB:AF:E9:6D:8C
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9b:40:24:f0:45:76:20:54:56:1e:ee:c0:af:90:e5:e3:a4:
34:14:35:2f:c6:a3:ba:68:2a:e2:8e:e9:38:9e:e8:07:e5:0e:
cf:0b:fe:78:a1:09:5a:84:5e:e5:ad:98:c6:4a:17:dc:1d:87:
21:46:f8:b7:d8:c9:19:77:1a:d0:8c:d2:08:59:ed:6a:7e:ab:
60:ab:08:9a:db:92:44:fa:6e:4f:34:19:f0:c1:44:de:88:91:
83:78:3f:6b:26:ae:dc:49:e8:32:f2:3a:dd:64:70:65:ac:8e:
6b:36:61:b0:32:6a:78:b4:69:1d:40:97:ed:f1:a3:04:f5:97:
cb:16:9b:35:44:cd:c6:a9:44:77:29:94:04:7c:04:62:9a:15:
0d:f8:67:a7:b0:85:57:98:95:e3:ee:15:4d:e4:ee:8d:29:b4:
c1:d8:72:7d:49:4c:4a:e6:64:ec:d2:13:a0:8c:2a:43:3f:18:
84:24:0a:4b:04:90:35:16:28:8d:0b:6a:92:58:26:7c:94:75:
18:cd:ed:61:f1:c0:05:2e:37:30:61:1d:84:19:89:dc:68:48:
d7:b4:91:65:1d:2c:82:69:04:4a:c0:22:37:65:92:4a:43:03:
f7:44:c1:77:f3:c8:9d:41:d8:c7:ab:e2:66:5f:4f:6b:be:a3:
de:a9:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:34 2025 by rpki-client