Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: tZX72nxObUVCt1CnMnywJ5G1XA9f/0IBv95mr7y2uGo=
Subject key identifier: 05:D5:20:61:6B:0F:63:60:78:39:BE:B9:B4:EA:FF:D9:71:88:C3:5F
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 019675D56281B0DE0A8ED1325A9981B93E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0BA1
Signing time: Sun 27 Apr 2025 06:00:40 +0000
Manifest this update: Sun 27 Apr 2025 06:00:40 +0000
Manifest next update: Mon 28 Apr 2025 06:00:40 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: DfQiQiEFvxyEhEfOq0e0MKMip4s3PSI+tj8WnbpC+QQ=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:62:81:b0:de:0a:8e:d1:32:5a:99:81:b9:3e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Apr 27 06:00:40 2025 GMT
Not After : Apr 28 06:00:40 2025 GMT
Subject: CN=05d520616b0f63607839beb9b4eaffd97188c35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b2:58:51:3f:5c:7c:41:b3:23:e7:aa:91:a4:
ce:13:89:ae:60:ad:a3:35:7f:bb:9c:22:ac:9b:b2:
4b:73:0d:54:db:55:a4:dc:17:76:bc:cd:8b:c8:2e:
8e:c9:1a:f2:5e:09:9e:45:d0:78:48:66:3c:a5:33:
78:15:d2:ca:a4:2d:93:a3:db:9d:97:b7:11:3d:fb:
95:16:4a:88:23:30:ab:c5:53:dd:ac:f6:0f:62:93:
af:93:09:2e:f4:d1:04:eb:77:04:8b:51:92:6e:28:
94:7f:1a:6d:fb:db:a3:f9:98:ae:31:5d:6a:3d:64:
d3:ad:06:0c:e2:dd:79:80:68:8d:e1:7e:47:d6:34:
16:66:57:b1:87:c2:27:01:5e:b0:c5:8a:5e:d2:32:
17:f3:47:e1:fc:5e:41:99:70:30:7b:8d:e1:f4:74:
8e:d6:fb:a9:83:20:84:b4:b7:b8:96:39:31:6a:31:
da:95:98:fe:60:94:c4:84:23:1c:e3:f2:c7:8c:04:
f7:91:43:8b:6e:3c:9b:a8:e4:ed:cb:7f:dc:76:72:
52:38:98:e6:ed:69:60:27:1e:69:b7:0c:75:f3:21:
fd:8e:9f:3a:ce:a0:b6:59:b7:65:de:62:67:35:f2:
f2:bb:2a:9b:cb:e7:ec:6d:d0:a2:64:65:85:e5:37:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:20:61:6B:0F:63:60:78:39:BE:B9:B4:EA:FF:D9:71:88:C3:5F
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:29:2a:cd:26:78:0a:44:db:46:6b:9c:26:7c:77:1e:c6:33:
ec:a2:d6:1e:9d:e9:3f:08:8c:fc:e7:fb:d9:e2:d7:6d:bc:db:
22:bf:fb:3e:d5:1c:0c:83:11:1e:71:26:d1:ba:c2:22:9e:54:
35:8b:38:ba:33:29:dc:0f:65:1d:34:4e:fe:d7:bb:1a:97:9a:
27:3c:c2:b9:21:be:f5:c5:58:1c:88:b2:be:b5:f8:46:cd:b7:
b6:2d:4e:d5:ac:96:3c:c6:ca:c2:18:a1:fd:4d:d1:6c:ea:b0:
34:d8:9e:46:95:61:d8:d9:a5:12:ee:35:8d:37:6f:bb:2c:e8:
2b:bc:c3:24:3d:47:55:c3:22:54:1e:66:c3:61:35:e0:3b:b3:
75:62:c5:c9:8e:8f:bb:a9:ca:0e:67:79:ea:c8:4d:8a:bc:55:
7c:13:49:76:f2:ac:87:60:af:13:c1:e0:48:3d:07:f0:19:e4:
e5:f2:cd:d4:1b:3c:df:e3:1b:36:fd:e8:67:13:de:e2:c3:ac:
ea:77:40:30:60:7b:2c:c3:1b:e1:85:57:fc:69:a6:66:06:61:
fe:bc:15:52:6e:4c:ad:97:bd:b5:fc:aa:37:02:b2:e2:14:6b:
45:2f:e1:85:b3:f9:fe:bc:21:40:1b:79:ff:05:5a:a7:7b:06:
43:55:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:29:42 2025 by rpki-client