Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: jcGjWe40ToSWP8SaoP4auODP6IbFKCZxylk8gGa3Y8g=
Subject key identifier: 26:5B:06:2E:0C:48:24:DD:57:DC:78:87:DA:08:BF:33:E9:8C:DA:51
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 01967ED863A68987CFB5B405386E7795872D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 066B
Signing time: Tue 29 Apr 2025 00:00:32 +0000
Manifest this update: Tue 29 Apr 2025 00:00:32 +0000
Manifest next update: Wed 30 Apr 2025 00:00:32 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: btjMT+kK6hhBi3a7ja6o6KBqJOITFi2h28vvAkuCzzE=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:63:a6:89:87:cf:b5:b4:05:38:6e:77:95:87:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Apr 29 00:00:32 2025 GMT
Not After : Apr 30 00:00:32 2025 GMT
Subject: CN=265b062e0c4824dd57dc7887da08bf33e98cda51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:09:99:4f:c6:d4:58:0d:57:35:2a:c2:b9:
12:97:b1:8a:c9:1f:9d:97:fd:56:8d:6d:9c:19:20:
eb:1f:a2:dd:51:a6:8d:d1:bc:8c:4a:61:09:bf:85:
a4:03:19:aa:1a:2c:21:f5:5c:d3:a9:82:7b:39:7b:
c0:d7:80:ba:10:b1:d7:30:41:a4:53:07:f4:af:d0:
f4:e3:36:24:56:b8:2d:bc:de:cf:01:71:6d:6c:0d:
21:92:aa:53:8d:70:2e:f0:5b:56:f2:7f:da:37:91:
8c:bc:ae:62:0b:b3:d6:a5:b1:05:52:42:ca:b9:35:
8e:11:cc:af:f9:68:94:3e:16:44:f2:8f:87:9b:70:
9f:8c:a7:2e:48:d3:b5:ab:85:df:01:24:40:07:17:
cf:33:e9:72:06:6d:f3:f2:8b:d0:c3:0b:4c:74:ca:
5a:08:0f:88:3e:5a:99:5a:ae:df:aa:be:f2:f9:0a:
fb:d9:b6:5f:5b:79:40:bb:65:f5:25:22:51:9c:b6:
17:49:93:dc:34:58:55:e7:ac:80:06:df:6a:0a:7c:
56:e8:06:a0:98:4b:00:c7:1e:76:e7:dc:d9:f0:a4:
1b:f8:34:fd:6e:9a:da:eb:37:ce:bf:cd:f6:bf:cb:
9d:82:36:0b:1d:d4:cd:ee:d9:2b:5f:1b:9e:12:be:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:06:2E:0C:48:24:DD:57:DC:78:87:DA:08:BF:33:E9:8C:DA:51
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:da:64:49:35:95:2d:04:19:22:eb:9e:2d:c7:b8:b7:40:a3:
a3:8e:f8:39:7f:dc:ac:34:54:4b:a5:69:90:fa:b7:8b:7b:6b:
d8:45:46:c1:74:6b:4f:b2:3d:6c:c8:c2:1b:6c:db:f5:fc:fa:
bc:48:73:73:75:43:ed:05:57:b1:dc:90:f2:4c:a8:8c:2d:1d:
37:dd:12:72:14:0a:28:eb:06:b3:0f:6a:dc:35:c7:20:fe:1f:
0d:98:e7:3f:b6:4f:97:f7:95:ea:25:6e:b1:d7:c9:22:45:0d:
71:a8:16:eb:40:2f:68:7a:82:21:d1:fc:b1:d8:0e:81:c5:22:
87:e9:a0:54:fa:f8:72:cb:d1:da:04:0d:4a:63:33:8c:26:2c:
c0:95:30:d3:d6:65:69:15:28:e3:81:7e:3a:40:e4:29:be:40:
08:39:95:13:22:87:b1:81:d7:99:4f:90:86:7a:ee:82:f7:5e:
6d:a0:50:f7:e2:fa:96:f8:9f:92:06:a2:e0:78:35:0f:05:26:
f7:c7:c7:66:f1:4f:e0:f1:b1:79:6e:8e:28:ac:1b:f1:de:53:
58:c6:4c:59:a8:ce:8b:08:af:19:54:aa:96:1a:79:fb:f5:b0:
a2:56:e4:09:5f:85:db:de:43:0b:05:fe:1e:6e:86:6a:21:8f:
70:ec:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:19 2025 by rpki-client