Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: 5YYwvvDBflhIRJr4wao37XKWMoMI9tVdbdS8TXITlUk=
Subject key identifier: 47:91:2D:5D:DE:AB:E1:37:D3:54:23:B4:A8:3F:C9:68:8E:B1:03:4F
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 01967B695C8A4360F34D42AFD976BDCFC481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 11D3
Signing time: Mon 28 Apr 2025 08:00:24 +0000
Manifest this update: Mon 28 Apr 2025 08:00:24 +0000
Manifest next update: Tue 29 Apr 2025 08:00:24 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: 6BBaTyPK5epTdKvjURZeTZnHsgh08auJiq39FwsmX3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:5c:8a:43:60:f3:4d:42:af:d9:76:bd:cf:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Apr 28 08:00:24 2025 GMT
Not After : Apr 29 08:00:24 2025 GMT
Subject: CN=47912d5ddeabe137d35423b4a83fc9688eb1034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:14:da:24:e5:02:fb:b4:24:aa:68:ce:bd:
05:8e:78:a0:84:00:f3:82:eb:93:1c:ca:a8:c1:48:
96:5a:bb:83:f5:98:69:8c:8c:98:dc:c7:87:77:76:
49:5e:81:61:60:d3:02:ab:fd:64:9b:f0:a0:ee:4d:
3e:dc:e6:2e:f8:40:d3:25:7f:81:68:fd:37:3e:26:
5e:f0:07:fe:df:60:21:98:a9:80:a9:34:e6:fc:62:
b1:08:28:fc:2e:a7:ca:df:dc:b2:a8:c5:c1:18:0e:
71:d4:3b:1f:ed:17:b6:99:87:56:d4:04:16:86:92:
bc:de:99:4e:41:8e:43:dd:00:34:8d:5b:c6:9b:d9:
96:a7:e6:ac:46:83:4d:39:d1:a5:62:a3:b1:70:c5:
f3:93:2b:cc:52:f1:30:08:7c:52:2e:b5:85:2d:70:
68:38:cb:33:5c:75:ab:1d:af:2d:fe:ec:8c:2a:c1:
eb:02:ba:c3:f5:50:d9:9a:bf:4e:3c:b9:21:f8:3b:
36:fd:f6:27:88:02:94:18:7e:e5:80:ea:d5:ca:b9:
b6:ee:90:d3:c7:5c:78:12:fd:7b:b4:88:c3:f4:e1:
eb:82:40:69:4b:dd:14:4f:56:a0:5e:0b:d1:f3:18:
df:fe:e1:fe:23:17:03:6f:16:bf:62:98:c8:7f:cf:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:2D:5D:DE:AB:E1:37:D3:54:23:B4:A8:3F:C9:68:8E:B1:03:4F
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:48:79:ec:c5:ca:c3:a2:42:7b:0c:1a:d1:86:a1:6c:26:50:
c6:24:ed:7c:9d:5b:61:ee:b8:b9:4a:5e:f4:0e:18:26:6d:13:
21:71:f3:70:28:88:ff:28:ff:be:d4:d1:17:82:3a:66:d5:d0:
da:11:a8:62:99:3e:b1:f8:ca:ce:c1:95:e0:8f:42:d4:8b:9f:
0e:09:72:c4:75:5c:60:9d:aa:1c:cf:02:b9:84:7b:a2:8f:32:
95:82:8d:c5:48:ce:67:dc:6d:04:4e:e9:33:74:9d:6e:fb:e6:
44:68:5a:56:f0:2d:b2:71:75:6e:05:aa:ed:05:33:25:a9:77:
f0:46:b9:b0:68:3e:44:0f:27:df:c6:5d:da:63:02:08:71:fc:
aa:0d:b1:c5:eb:f7:4e:58:0a:7e:7e:12:55:ae:c1:f8:4f:6d:
91:1c:e5:5f:70:c1:6a:ee:f2:09:8b:c2:1f:4d:bc:b4:83:56:
c8:85:e7:6b:b6:e8:ad:0f:48:6e:1e:b8:8e:83:04:0f:5a:84:
83:41:94:77:ea:1b:9b:96:31:dc:73:f8:ab:35:63:87:dd:45:
bd:61:c4:07:d6:45:cf:69:e0:a4:b2:07:3f:87:b4:da:6b:c3:
1a:8c:9b:9e:4c:76:89:8f:b9:b4:aa:a3:83:d8:8c:bf:9b:ee:
bd:3e:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:36 2025 by rpki-client