
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: mZYoMsZuRYa5XSkDAapRlqa1mJDmaPiM6VyLTMcRS5s=
Subject key identifier: E3:56:4B:31:C7:62:D2:17:68:3A:D7:B8:1D:71:9B:D2:A4:50:87:65
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 01969183BA0241D861886ACB5EB1F6706970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 072C
Signing time: Fri 02 May 2025 15:00:51 +0000
Manifest this update: Fri 02 May 2025 15:00:51 +0000
Manifest next update: Sat 03 May 2025 15:00:51 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: wekeEswO1d/fMSzM9z4pYZ9Nv/eW3RkJbnq4hydrTJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:ba:02:41:d8:61:88:6a:cb:5e:b1:f6:70:69:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: May 2 15:00:51 2025 GMT
Not After : May 3 15:00:51 2025 GMT
Subject: CN=e3564b31c762d217683ad7b81d719bd2a4508765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:68:70:98:04:db:48:24:43:2e:15:fc:de:
53:5d:b3:50:01:fa:0e:ff:f0:51:01:23:27:43:54:
33:e3:e7:d0:12:53:2a:b5:5c:d6:91:f3:71:e0:55:
91:63:b3:aa:e2:6e:6c:d7:a0:03:44:c4:cd:38:4c:
d1:e3:d4:cf:09:a1:21:6b:fa:f9:ec:93:6b:5b:f6:
01:ff:06:05:14:15:6b:6f:89:86:02:a3:50:83:09:
01:8c:0d:30:e9:64:f2:ff:74:04:60:7f:16:7d:c4:
fe:1c:31:72:b6:10:2d:80:1e:b8:75:e9:7c:12:d4:
af:46:c5:bf:b4:4e:e5:b7:e3:30:64:95:2a:ba:47:
a6:7e:73:40:f3:bc:08:a2:3e:65:05:2b:d2:5e:8a:
87:55:7d:b7:47:2a:5f:55:bf:92:64:ef:4a:69:0a:
ec:3a:c5:26:51:d1:82:72:17:4f:58:a4:20:23:7f:
e8:8c:2a:f2:57:14:77:78:9f:5e:4b:8c:18:b6:f9:
e6:c7:d6:b5:7e:75:65:28:a9:9b:ff:05:9a:17:c2:
f1:47:16:fc:ad:fb:d9:b8:d8:f8:9a:1c:91:c0:ae:
1e:21:d6:44:b5:7c:14:21:92:e2:d0:8a:02:ff:5f:
bf:e9:98:b4:48:e6:16:2f:b5:1b:e7:98:aa:ff:c0:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:4B:31:C7:62:D2:17:68:3A:D7:B8:1D:71:9B:D2:A4:50:87:65
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:29:78:27:8e:2f:e6:31:d5:69:66:c6:6c:f6:d3:a4:80:
d8:5f:a3:b5:54:fc:a1:29:d4:69:05:93:a4:9d:21:15:3a:f0:
c1:01:99:a1:c7:18:72:74:e2:c1:42:42:df:23:43:57:86:55:
5d:33:4e:cc:2e:6d:b4:eb:72:4c:2d:97:80:c1:a0:b4:f5:55:
66:84:7c:a0:c3:9c:a7:f8:23:bb:8a:77:21:7c:36:49:7f:ee:
f6:be:31:d9:9f:43:b0:ed:9d:76:0f:ad:66:b1:d2:78:38:8d:
6a:1c:13:87:c8:8e:d5:f4:ad:e0:c4:0a:02:04:ba:07:40:ab:
21:64:21:2a:3b:8f:e4:48:2e:82:8e:b5:fc:99:75:d5:a5:d6:
f5:2e:95:38:11:4a:6e:7b:4a:58:4b:81:7d:9b:7c:bd:02:73:
80:a3:ac:2c:d6:0d:1a:c9:2b:05:64:8a:50:01:1c:c7:35:01:
a4:87:58:b8:c8:b4:c6:8c:9c:5d:a9:96:75:ff:ca:0c:39:4c:
04:f0:a4:8f:06:bc:16:cd:c7:dd:01:d9:aa:90:2b:1f:ad:d1:
60:2f:9c:c1:5f:eb:f0:0d:bf:2a:66:3d:4d:9d:54:96:d8:8b:
63:76:d7:7c:f9:de:69:28:53:ca:86:0c:65:51:6e:82:5e:6a:
18:0c:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:08 2025 by rpki-client