Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: T7o+TLDweBOj/6eT1J3XgifpjnIy+5YiyA+cvNwa5to=
Subject key identifier: 03:99:4E:53:0F:34:27:84:ED:86:BB:A1:00:53:81:DF:E8:39:9F:BA
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019677FA825BAED410436C1365451D6DF2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 05E7
Signing time: Sun 27 Apr 2025 16:00:28 +0000
Manifest this update: Sun 27 Apr 2025 16:00:28 +0000
Manifest next update: Mon 28 Apr 2025 16:00:28 +0000
Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: 5CGtAzGV4pDJDEDy1kJQRGPuWy9kKI+yzVm/3bMWFUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:82:5b:ae:d4:10:43:6c:13:65:45:1d:6d:f2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Apr 27 16:00:28 2025 GMT
Not After : Apr 28 16:00:28 2025 GMT
Subject: CN=03994e530f342784ed86bba1005381dfe8399fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:05:bf:3e:f8:60:09:bd:d8:cd:62:cf:29:
08:b7:63:f1:e4:19:d9:15:8f:86:7f:9a:00:da:27:
57:5c:d3:22:cd:71:af:54:e5:a6:6f:23:0c:4e:c9:
8d:56:f0:ca:76:8c:88:3b:fc:86:94:e6:b4:f8:4b:
91:2a:05:91:a0:80:31:60:68:7f:7e:1a:df:70:10:
de:de:88:ac:80:06:1b:23:63:14:9c:73:30:af:93:
e5:15:a2:a3:92:bd:63:34:ef:15:59:2c:18:78:24:
78:81:0f:85:39:01:37:05:38:ec:32:d7:b9:3d:74:
a5:4a:fb:98:76:2a:89:8d:43:84:29:db:9c:ca:42:
dc:fd:f6:e2:cb:b6:7c:1e:66:d5:9c:16:e6:3e:a3:
ae:2a:35:d9:3c:95:e8:a4:c5:2f:23:95:2b:7b:22:
6a:4d:c7:5e:55:3d:76:fc:8c:c1:77:a4:22:bf:bb:
4e:1e:5c:4e:90:ff:f6:e0:5e:33:e1:fd:06:e2:dc:
a8:f6:77:b2:eb:2d:62:7f:31:29:3a:b9:b8:29:7d:
d8:33:5d:89:fb:eb:f2:ed:56:c0:e2:a7:bc:2f:e8:
4e:05:a5:01:52:83:d7:51:bc:02:bf:c8:5b:a4:fd:
4c:ce:61:7f:67:85:08:81:75:13:6d:a9:76:58:05:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:4E:53:0F:34:27:84:ED:86:BB:A1:00:53:81:DF:E8:39:9F:BA
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b8:0b:74:ca:a0:a9:c5:04:50:3d:23:20:29:d7:b6:f4:66:
12:4b:8f:72:09:e7:43:88:bd:ed:fb:a4:1f:8b:da:f5:72:7c:
6f:f1:2c:b7:46:42:e9:73:63:15:6e:ed:16:f8:e8:33:13:8a:
f1:b4:3b:4e:96:05:0b:5f:84:37:ea:ad:30:2b:21:62:58:c8:
c3:be:bd:fd:79:41:1c:ed:8f:8b:36:76:8f:06:33:2e:e1:df:
89:2a:95:5f:63:a3:9f:95:df:1b:94:44:7a:bb:7e:42:e2:44:
a8:67:0d:d4:14:52:48:19:20:ab:43:38:c9:af:1b:2b:5c:9c:
b2:2f:6a:0a:81:9c:e4:92:f6:67:08:a6:74:b8:b8:3e:ad:2b:
70:30:54:a2:a5:3c:7f:13:a4:a1:47:10:09:78:8c:f3:41:7e:
f6:87:e8:7a:fb:5f:bc:1e:21:d8:7f:82:24:2e:7a:4f:52:8a:
50:0f:09:e6:aa:38:c2:2f:69:2f:57:61:f8:96:a5:d5:3e:96:
c1:8d:20:0d:64:a0:9d:91:19:9f:dc:c8:95:53:70:d2:78:56:
24:98:3e:2d:86:aa:b9:4f:8e:0e:a2:bd:63:db:b7:37:7f:ad:
b3:af:d7:2b:f7:dd:1e:df:87:57:90:01:60:62:8a:51:16:aa:
62:ea:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:01 2025 by rpki-client