Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: hMeS1DlzyBTcd/YHpkCfg57KYJyD1tn97+OfkRiARe0=
Subject key identifier: 32:6D:20:09:6D:E9:28:BD:9A:F9:A1:93:9E:4D:45:28:EA:08:71:CD
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 0196B823946BA1F66EE2BE7D8EE150DB8792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0519
Signing time: Sat 10 May 2025 03:01:01 +0000
Manifest this update: Sat 10 May 2025 03:01:01 +0000
Manifest next update: Sun 11 May 2025 03:01:01 +0000
Files and hashes: 1: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: +RXEADNAOAmnvHIal9xKpZnTHudNCeY/QHhX8cJUEpU=)
2: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:94:6b:a1:f6:6e:e2:be:7d:8e:e1:50:db:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: May 10 03:01:01 2025 GMT
Not After : May 11 03:01:01 2025 GMT
Subject: CN=326d20096de928bd9af9a1939e4d4528ea0871cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:c5:32:bc:42:83:21:d5:34:e6:90:37:9d:
4d:f2:4a:de:7a:77:d4:28:77:20:c0:8e:df:81:ea:
55:bf:65:df:63:07:e1:a3:1a:2d:0c:57:71:14:05:
4f:1e:8a:e1:78:27:40:9e:dc:6e:85:33:b8:3b:93:
47:28:98:01:57:ca:b2:29:a4:8b:d6:d1:32:92:8c:
a5:f0:81:3c:11:85:6f:c1:24:f9:95:e9:8b:96:d2:
e5:bb:63:70:ee:53:be:63:16:3a:9b:4d:a6:b9:99:
17:66:cc:e9:d4:86:7d:f7:8d:a4:05:53:da:61:91:
bc:8c:b5:c6:66:5a:54:f1:86:1c:f5:2a:ef:5c:40:
f6:37:a3:62:ae:55:9a:dd:6e:b8:b4:c5:75:5e:99:
6d:58:56:a2:a1:06:f4:6b:94:f5:25:6e:6a:ca:90:
3f:77:d6:bd:44:a1:b3:c0:3a:f0:cc:59:90:14:e2:
38:44:22:21:f9:2a:38:f0:3f:5c:e8:13:07:97:44:
af:a3:06:67:f9:bc:24:bb:46:2e:3b:64:47:02:a1:
e8:49:a3:12:d0:ec:57:c3:4c:ea:fc:c4:52:56:2d:
ce:a1:37:15:a2:67:f8:63:24:6d:dd:e8:53:49:36:
6f:58:d7:7f:9b:f1:d3:bb:20:00:e0:1e:f8:f0:3c:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:20:09:6D:E9:28:BD:9A:F9:A1:93:9E:4D:45:28:EA:08:71:CD
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8a:c5:6c:6e:7c:9e:bd:00:8a:25:a7:ff:c4:26:51:87:68:
e2:b8:bd:65:fb:5e:66:00:0e:2b:c6:3c:0a:15:d0:ba:12:f0:
c2:69:ab:11:11:78:24:bd:f0:70:8d:a3:58:7d:6b:d2:a2:b1:
90:39:55:20:6c:e9:14:b7:46:fb:9b:c2:f1:2e:7c:c8:4f:4a:
0c:5f:69:cf:f2:c3:23:75:20:9a:bb:79:0b:51:51:03:6c:29:
fd:16:72:3f:79:0f:96:19:a1:eb:b8:cc:2f:44:40:d8:ba:5d:
25:f1:76:f1:ca:e7:a9:a8:39:32:09:d6:ee:93:57:d9:fc:32:
42:da:6a:96:76:76:5a:6e:13:b3:16:f2:e1:4a:e6:b0:6d:45:
d2:f0:41:18:9a:ac:78:37:2f:a0:ae:4b:90:a5:36:6a:9a:7f:
67:ba:2e:0c:f7:78:69:79:e5:4a:1a:ff:ec:52:89:87:67:89:
db:fc:21:be:99:26:ab:01:90:e9:1d:e9:60:90:de:c0:4f:5d:
42:35:20:8d:51:d6:c3:2b:d7:b0:9f:9f:59:79:36:be:c9:2d:
cc:9e:39:8a:77:c7:94:ff:4a:cb:a1:ac:2e:ec:0d:c6:2a:b8:
16:8d:61:71:00:4c:d9:09:39:3f:9e:aa:51:f9:8b:34:12:51:
11:59:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:38:59 2025 by rpki-client