Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: NAVBmOKRnII2v3vTYMB0HYP16OlEx7LkcEi0YpC5rBc=
Subject key identifier: 77:11:27:73:CD:56:44:A3:BF:0E:82:5F:66:43:AE:AA:FD:D8:24:91
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 0196741DD75965BEEDE2D3E9329AE2B9E819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 22:00:34 +0000
Manifest this update: Sat 26 Apr 2025 22:00:34 +0000
Manifest next update: Sun 27 Apr 2025 22:00:34 +0000
Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: Dzrfb4WZUJjkyrSBRV+o4n8MdHvZb/GQJ/Mhht0H7aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:d7:59:65:be:ed:e2:d3:e9:32:9a:e2:b9:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Apr 26 22:00:34 2025 GMT
Not After : Apr 27 22:00:34 2025 GMT
Subject: CN=77112773cd5644a3bf0e825f6643aeaafdd82491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:59:53:34:c4:82:19:b9:87:e7:a2:05:d5:
5d:78:ae:cf:8d:ab:69:93:46:cf:08:e3:03:55:61:
5e:00:ee:24:03:72:2a:7f:a8:9b:98:f5:dd:67:ae:
6d:13:5b:c2:30:8b:61:98:ff:d6:c5:89:7c:d7:54:
e4:23:a2:47:1f:0f:9c:9b:70:76:ce:ee:aa:ee:8c:
1c:cf:b7:b8:cd:10:5a:8b:46:87:3d:c3:d6:87:ff:
8c:d7:59:31:57:14:56:63:5f:74:65:98:c2:ee:4b:
d9:aa:78:4b:c3:12:e7:f1:15:a6:a4:08:8d:7f:22:
3b:7f:7b:7a:4b:6c:98:9d:5c:ae:c8:8c:a9:0e:fb:
a6:62:47:6f:40:73:6a:6a:7f:e0:a9:6a:dc:3d:15:
27:1d:fb:84:11:5c:7b:a5:6d:1d:d3:58:9f:95:5f:
35:b4:72:a1:16:66:62:8e:98:8f:dd:21:12:04:b3:
03:47:ef:db:bc:e4:d0:64:ca:83:6f:b9:85:5f:89:
e7:85:c5:22:71:3e:8e:74:8e:7b:8a:35:38:9b:73:
5e:b8:d7:42:0b:78:fc:55:2a:84:a1:b2:7c:d4:f7:
34:1d:c5:87:f4:00:c5:4f:b8:54:35:3e:4c:08:b9:
5c:0e:90:ea:a2:b2:5b:49:69:9a:9a:f8:a4:f9:e5:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:27:73:CD:56:44:A3:BF:0E:82:5F:66:43:AE:AA:FD:D8:24:91
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:41:d8:57:74:0b:a5:d2:e0:e2:46:a7:0f:ca:ac:20:65:59:
a5:a7:5d:ea:55:a7:c4:e8:49:28:d5:7f:72:09:3f:f5:41:5a:
e1:fd:38:9b:9f:c7:1a:43:2c:8f:a4:2d:01:13:98:6f:8c:d4:
ce:32:10:30:2c:d8:fc:c6:bb:c6:c1:43:1c:0f:2b:68:44:29:
e2:68:2e:37:75:c6:5e:43:58:9e:ea:10:ee:3a:02:01:3d:a9:
29:75:18:27:09:fc:c7:65:c6:5f:ce:13:f3:da:07:83:48:07:
36:a2:15:07:56:c1:3b:2b:58:35:c9:a5:c2:80:d4:50:f0:a3:
90:29:11:78:86:a0:0d:57:93:2d:fa:59:58:cf:59:cc:ef:81:
2f:63:26:46:a4:3a:39:cc:51:f0:dc:ae:2f:a5:d4:61:5d:b0:
63:3f:d9:54:8c:04:fc:69:3f:7e:4b:42:ba:f8:81:d6:46:0f:
6c:30:e9:02:8d:95:21:b1:85:0a:50:e5:48:c5:d3:68:a6:c3:
12:4c:b5:4f:9f:30:94:53:f0:05:92:8a:a6:88:f6:97:2f:53:
d7:e0:fe:8a:43:9a:9d:54:19:0f:82:a8:48:3b:fe:d9:8c:df:
4e:e7:f2:d2:b2:41:1d:45:50:7f:65:8d:7e:45:c1:b0:22:5e:
1c:7e:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:28 2025 by rpki-client