Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: 47jmU/CK6UYR0d5+bdHnzRDd1ApGJa75/V74SPkWKZg=
Subject key identifier: 0A:7D:9F:05:E5:DD:73:97:79:B7:48:B7:D7:71:43:7C:B2:4A:6F:16
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 01967D57BD071439766CCD3C73A89D61BFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 17:00:24 +0000
Manifest this update: Mon 28 Apr 2025 17:00:24 +0000
Manifest next update: Tue 29 Apr 2025 17:00:24 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: DyuIV+iECEsXUik3DCIV6jpaxDTfBEn2AviwDYnz1Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:bd:07:14:39:76:6c:cd:3c:73:a8:9d:61:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Apr 28 17:00:24 2025 GMT
Not After : Apr 29 17:00:24 2025 GMT
Subject: CN=0a7d9f05e5dd739779b748b7d771437cb24a6f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:79:c7:d3:76:f4:c8:92:72:8b:0d:3b:45:
e0:cf:cd:bf:9b:9f:9b:f5:e3:9f:a6:2a:87:ee:a2:
00:78:64:6c:4b:75:eb:71:e6:75:f0:54:be:97:d3:
e1:94:4e:e0:f6:ce:3a:0d:21:b1:c2:d0:64:3d:c1:
a5:0b:c0:fc:cc:d0:82:4f:10:11:34:91:db:7f:51:
4d:29:6a:0e:40:be:79:96:5a:43:77:f3:25:56:a6:
d9:53:91:fe:7d:6c:b7:cb:c6:5b:17:cf:52:e7:3e:
87:e8:a3:76:c0:92:8e:8d:3e:da:fb:a2:87:41:74:
f7:08:6e:f7:2f:08:d7:38:d6:38:bc:9f:2f:68:6d:
c0:9c:d6:04:03:e0:1a:4d:3e:b5:87:70:c4:08:ae:
58:d6:ee:ea:3d:e9:c9:20:21:79:7d:f0:b7:7e:8b:
c0:68:d6:a7:03:fc:dd:26:76:1d:71:01:24:23:10:
ad:c3:3d:7e:b6:7b:cf:d7:d6:00:83:0d:4e:57:7c:
90:c9:a2:c3:5e:76:fc:a1:9d:4d:b1:e1:75:d3:94:
a4:d6:b4:0e:ef:b5:0c:77:22:e8:af:e3:49:01:e7:
0c:80:24:2a:31:ba:75:85:64:47:bb:e4:cf:2f:84:
fd:14:fb:cc:8a:63:7b:fe:19:d7:13:a0:a3:4e:6a:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7D:9F:05:E5:DD:73:97:79:B7:48:B7:D7:71:43:7C:B2:4A:6F:16
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:50:e6:e6:cd:10:17:c2:44:f4:01:78:3f:7f:7f:9c:2d:
1b:1b:34:47:ec:ac:a5:c8:6f:e3:4a:91:25:04:3e:76:1b:a8:
cc:99:be:a7:11:eb:31:43:ab:d8:56:b7:c4:7f:01:c7:5f:04:
79:d5:d0:5c:cf:22:3b:9f:fd:ef:1b:2b:55:5c:67:b5:01:ff:
94:ec:af:10:1c:d1:44:a8:75:ee:8a:e9:2a:63:d8:3a:fd:a1:
5d:07:bc:7f:af:30:37:e4:6e:85:40:eb:27:84:25:b9:6b:95:
7b:4a:38:0f:bd:ec:53:f9:3d:43:fb:8d:7a:69:bf:75:4c:da:
f2:3d:a6:e8:2f:b3:80:29:ca:27:a5:d4:fc:4d:af:28:5b:39:
af:dd:28:8c:8f:75:77:a6:61:ac:6f:c5:fe:f0:1e:de:4b:3b:
e5:c6:ec:11:a2:0d:45:62:8f:14:f9:5f:25:f8:f3:9e:5a:c1:
78:45:4b:96:04:89:96:ec:a8:5c:98:03:fa:78:32:f9:07:22:
2e:30:17:01:bb:a6:99:09:63:9b:d2:fc:65:ae:ac:ea:1d:ab:
22:2b:f6:b2:0a:76:67:ff:25:91:f9:ed:e8:96:a1:61:ea:33:
56:af:d4:e3:b7:7b:3f:91:5d:04:68:be:6b:53:61:be:8f:36:
e5:9e:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:05 2025 by rpki-client