Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: LX3wQm/dNrtMWDPRiUll1KP6twt1c3CYMQ+laKq7dpI=
Subject key identifier: 5C:03:FF:38:76:79:21:0D:C1:07:1E:CF:43:0B:16:E5:1C:C4:76:28
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 019673E707F8852AC639CACBE6DD87BACFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 21:00:42 +0000
Manifest this update: Sat 26 Apr 2025 21:00:42 +0000
Manifest next update: Sun 27 Apr 2025 21:00:42 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: k8y/1FzRDNEzhJr74SsaXgWxa0t7178N1STMiU0o17c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:07:f8:85:2a:c6:39:ca:cb:e6:dd:87:ba:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Apr 26 21:00:42 2025 GMT
Not After : Apr 27 21:00:42 2025 GMT
Subject: CN=5c03ff387679210dc1071ecf430b16e51cc47628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:f8:1a:f2:6d:bd:15:87:f5:65:eb:75:72:
0e:3a:90:a6:1a:06:9f:65:5a:83:13:a8:e5:63:48:
25:b5:5e:0a:32:cb:54:c7:7e:e3:fb:a5:d1:ad:d0:
85:60:58:bc:25:85:7a:7b:83:0a:a5:7f:58:ce:41:
4c:57:dd:fc:57:1f:ab:c5:4d:44:20:a5:f0:b5:cf:
9d:2d:2f:8b:40:4f:cf:06:f7:49:d6:22:d1:30:81:
e4:a5:ca:6f:80:ac:5a:55:e3:96:cc:0a:8f:77:cd:
4b:9c:4a:28:64:aa:0c:f4:ed:e6:13:62:93:fc:da:
ac:8d:71:2d:2e:8e:43:30:77:30:31:e6:b1:05:57:
3b:4b:00:fc:a6:56:d4:b1:f2:d5:67:2e:dd:c6:88:
fa:ff:1f:1a:a3:32:ea:44:19:03:c2:20:b3:7c:0f:
4f:44:d3:90:b2:ee:d8:b9:df:e1:b5:c5:4f:7f:87:
89:7e:4b:fa:5b:92:ad:e9:cb:76:f5:29:eb:4e:3e:
98:3c:9d:d4:bf:84:df:4b:a8:f2:19:5a:a6:f7:15:
70:ea:37:0e:f2:b3:9e:02:93:5c:2d:c8:ea:ca:fc:
8a:2d:a7:6a:30:c8:c9:39:93:fa:62:ac:44:96:9d:
3f:40:49:ef:88:6c:e2:78:92:eb:27:f7:59:e5:c3:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:FF:38:76:79:21:0D:C1:07:1E:CF:43:0B:16:E5:1C:C4:76:28
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:42:56:c8:b6:a6:08:81:83:9b:86:57:bf:84:93:e9:1d:29:
3b:84:d1:d9:c6:57:df:87:a7:05:31:cb:a8:e4:50:e9:97:aa:
4d:91:8a:9b:f5:51:75:31:07:49:2a:1d:fe:2a:74:9f:4a:03:
e5:45:b0:68:a6:d2:7c:7a:98:8d:8d:3a:ca:42:19:05:fe:a0:
0f:f1:e5:83:92:d5:7b:ad:a1:01:de:c9:a2:c8:79:09:1a:fd:
95:01:38:c2:89:92:fb:3f:6b:74:8f:4f:49:5b:55:37:3e:8a:
63:7c:4c:bd:82:5e:58:83:d9:a8:74:1d:3a:fd:cf:b2:fd:08:
f9:01:85:5b:ea:e0:2d:1b:ce:0b:09:ee:a7:17:9d:fb:b4:85:
66:e7:d8:38:de:d0:0e:e3:6d:a7:44:d7:3e:24:49:d0:d4:ba:
ff:20:a2:29:61:79:19:42:1c:2a:cc:1b:b7:57:3c:1f:89:a1:
6b:be:d2:12:e1:d5:b2:a6:4a:f8:03:20:91:9b:ad:26:a7:01:
70:c1:9e:91:7d:e6:19:56:4e:a8:20:e9:a6:66:aa:e0:bd:57:
70:28:8f:ed:22:c7:68:0a:4f:e1:08:92:19:9b:33:00:59:92:
5e:46:87:95:f3:e7:c7:37:e8:f9:66:7a:6a:44:37:ca:fa:2e:
3c:6a:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:32:15 2025 by rpki-client