Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: OYPVFvol18QJhNv3yxASv628rmB0vhl0BnwKhWwDMA4=
Subject key identifier: 0D:43:E8:18:D8:57:2A:FB:1A:3D:E7:C2:AA:F1:9B:55:2C:8F:4B:18
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 01967FB47FCB3C59FB28B405E34ECAB8BB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 10EB
Signing time: Tue 29 Apr 2025 04:00:57 +0000
Manifest this update: Tue 29 Apr 2025 04:00:57 +0000
Manifest next update: Wed 30 Apr 2025 04:00:57 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: DM4juiwxl5uG3YkjXLdS6DuZuf1z5Lbzcp3U2okQal4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:7f:cb:3c:59:fb:28:b4:05:e3:4e:ca:b8:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Apr 29 04:00:57 2025 GMT
Not After : Apr 30 04:00:57 2025 GMT
Subject: CN=0d43e818d8572afb1a3de7c2aaf19b552c8f4b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:ff:12:df:d9:cc:e5:8d:46:09:2a:7b:4f:
80:c7:60:5d:51:16:7b:fa:3c:35:26:5d:c2:0e:c4:
07:5d:56:30:71:e0:39:a5:64:69:4a:30:bc:72:a6:
be:b6:7f:f3:7e:c9:2f:ef:30:8f:90:7a:f8:ec:a5:
5b:3d:86:fe:b7:ee:d7:6e:de:0d:5c:bc:ad:23:c5:
8a:74:86:16:b7:2d:90:67:53:97:a8:b6:07:b4:94:
0a:cc:2d:71:c2:12:05:49:94:77:af:65:fc:3a:54:
83:aa:e1:95:35:9f:59:cb:53:2d:2f:bf:ab:0f:1f:
31:e1:6d:f9:12:07:e3:e3:b4:55:b5:c4:ab:04:1c:
51:11:82:4b:ae:b8:38:1f:65:fd:a4:ea:b0:f0:61:
d5:9a:7f:35:5b:92:f5:ab:f6:a7:5e:bb:b1:5b:00:
74:2d:c5:1a:10:b9:ab:5c:7e:29:5b:ec:2c:5b:1d:
41:ed:80:7b:19:9d:ab:05:17:5c:43:60:14:13:6e:
57:eb:23:5e:ce:bd:83:51:d7:b3:49:6e:ff:ac:b7:
17:34:6e:2e:34:21:eb:4d:bf:32:c7:04:8c:a0:5a:
d5:72:6d:7f:06:97:94:f3:b6:64:fd:d0:14:87:8a:
b1:ac:b1:d9:0c:0f:cd:c6:a0:3b:02:54:d8:19:0e:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:43:E8:18:D8:57:2A:FB:1A:3D:E7:C2:AA:F1:9B:55:2C:8F:4B:18
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5a:d5:e3:27:b7:87:51:aa:82:8e:43:4e:f3:76:17:0f:0e:
78:3b:56:1d:92:57:8a:32:d9:a4:0e:84:f1:0d:46:38:3e:e3:
7d:97:48:21:96:19:7f:f3:30:b8:2c:39:c5:33:11:ab:00:17:
9d:06:62:69:db:29:ad:53:65:1b:be:15:90:88:85:e4:58:d8:
ad:7a:e6:f1:a5:5f:47:2e:6f:bc:0b:fe:eb:aa:6e:9c:40:ec:
d3:18:bb:42:fb:fc:49:7d:74:bc:fb:f4:00:ed:29:70:78:0e:
64:cc:8c:38:a3:93:45:7f:20:a7:fc:87:da:af:27:a5:21:dd:
08:9e:58:f6:36:bf:0d:ec:c0:89:df:5e:4b:bf:cf:2b:ad:54:
b1:8a:29:4f:59:05:a2:78:bf:c8:b7:cc:8b:bd:1d:05:68:07:
90:b2:1b:15:e7:6c:04:58:3f:66:df:1a:b3:22:8c:91:e8:b8:
e4:a7:27:8e:0f:46:d7:9a:63:26:29:b4:6f:62:8f:48:87:6b:
0f:6c:4a:1f:d9:f6:d5:de:8a:6e:b2:82:18:99:00:72:09:00:
d9:54:75:a9:c6:2e:da:ab:01:9c:be:36:76:3c:9d:ea:8e:ee:
c0:ac:be:00:fb:4d:9f:32:42:ba:b0:68:59:26:ab:58:23:07:
a0:d7:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:16 2025 by rpki-client