Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File: Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier: YMklScR7D1LsS1I27Gwea9p55iYIFVs9Y/X4WYddEbE=
Subject key identifier: 97:54:DF:E4:F5:AB:2D:D3:E9:CB:24:B8:B4:B0:10:F3:1F:82:70:44
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 01968F94CE5A06E5040E69DFCE1EB3FE9FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number: 1084
Signing time: Fri 02 May 2025 06:00:16 +0000
Manifest this update: Fri 02 May 2025 06:00:16 +0000
Manifest next update: Sat 03 May 2025 06:00:16 +0000
Files and hashes: 1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: 33l9fy5bktSoi0R1Fw09gEoE5lYylbEOOK/yFMDq+wE=)
2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:94:ce:5a:06:e5:04:0e:69:df:ce:1e:b3:fe:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: May 2 06:00:16 2025 GMT
Not After : May 3 06:00:16 2025 GMT
Subject: CN=9754dfe4f5ab2dd3e9cb24b8b4b010f31f827044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:68:26:b2:dc:cb:8e:e7:a9:ac:3a:40:30:
5f:10:b4:67:54:6a:95:d5:b3:1d:de:9a:5e:82:a7:
d1:7a:e1:e4:ba:07:36:89:84:b0:59:39:ab:e0:93:
0c:47:46:4f:05:91:b9:7c:fd:7e:9f:ca:52:20:af:
2d:67:4d:a5:00:5f:69:08:08:45:ba:8e:45:3d:3a:
71:c3:c9:19:58:23:64:cd:6c:48:6d:6c:78:5a:e3:
a8:43:b2:b3:bd:4c:e4:2d:9c:f2:ae:5e:de:1c:51:
8c:60:08:e3:9c:f4:0f:7d:02:ef:2b:54:58:e3:d5:
d2:ba:b9:89:b3:74:56:62:63:9b:b8:56:d9:af:e3:
fe:fb:47:89:50:67:05:f8:1b:88:44:2a:99:e9:03:
92:81:b7:a1:d1:f4:97:c8:b8:7c:f4:7c:79:70:39:
e2:e6:54:46:5b:d0:52:71:aa:94:18:77:d9:2f:10:
f8:99:76:30:ee:89:08:17:56:c6:32:4d:3d:03:fc:
13:d8:27:8e:d6:72:2e:1d:4e:7f:66:6a:93:99:e7:
29:3d:dc:2d:74:3c:c9:e3:04:22:71:26:45:8c:ca:
76:0b:b9:be:e5:78:fc:47:e7:cd:b6:53:c8:56:a6:
03:11:6b:7d:0c:77:47:97:2b:b1:10:c8:8b:b2:ee:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:54:DF:E4:F5:AB:2D:D3:E9:CB:24:B8:B4:B0:10:F3:1F:82:70:44
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b9:3c:cc:75:b1:80:2d:0f:5e:f4:f9:03:72:bb:75:96:9d:
3e:9a:e3:60:73:9c:3c:ce:a5:99:ee:01:f7:e4:d0:8e:7c:54:
c6:ce:3e:7b:84:fa:9b:06:7b:ed:5b:71:89:8f:64:83:82:63:
1f:f2:e8:61:62:2a:d2:59:bf:f5:ba:b0:1c:b2:d1:70:10:a1:
57:c2:8a:fc:7b:8f:cb:26:7a:76:b7:4e:b9:61:5b:85:39:35:
09:ae:cd:6f:74:2f:7d:57:37:66:a0:1b:5d:f6:1b:2a:32:e3:
25:93:23:60:85:ac:09:58:85:a9:ec:c2:54:15:cf:db:e6:fc:
15:e5:48:b9:36:8e:cc:7a:de:93:ea:63:0d:77:d2:df:c2:d0:
f4:b7:b0:e7:09:c6:af:4b:29:88:1a:aa:f7:87:e9:b7:27:c8:
93:35:d3:2c:6d:0b:55:bc:d5:55:34:9a:b1:22:45:ff:d3:e3:
ba:e5:51:da:65:c0:fc:ef:bf:46:6b:c0:27:5a:66:77:8c:42:
12:61:2e:a7:ab:9a:7f:92:6b:a3:92:e5:01:a0:ed:d0:9d:d8:
4a:00:b3:23:e3:ad:10:66:79:b4:aa:51:4f:0b:82:27:d7:e9:
b5:e9:0d:0a:0f:48:83:f5:7a:72:37:d7:8e:a5:0a:16:6a:80:
73:b4:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:04:10 2025 by rpki-client