Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: iW6cJIylQrNmIttiiUuwpgCPy7luiD5wKgwpSdZb0RU=
Subject key identifier: D5:8F:15:7D:F2:CD:5F:C2:2D:7E:D5:44:4A:59:9D:95:03:0A:A5:C4
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0196A653AF4C9FED8837797FAA7A42147354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 1569
Signing time: Tue 06 May 2025 16:00:24 +0000
Manifest this update: Tue 06 May 2025 16:00:24 +0000
Manifest next update: Wed 07 May 2025 16:00:24 +0000
Files and hashes: 1: PxmxbjDo4ld_LpQlBIImvTBCGQo.roa (hash: JEoZS4ChBX6LhNbOSp/Oqghn+r+iFDQ5qgpRHocx1xU=)
2: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (hash: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=)
3: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: dlDKTXzX0qHZWjWZ+SFGb9pBwS6vfOwou5+43b1n9U0=)
4: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
5: kNG8doC8aOlVcpdzC4H8wIke8-4.roa (hash: RhzxZTrYI5RS5OoyTDGpnX6oHuBHa87akNaFgCcYhjo=)
6: pbstzXprxQ_2h1fYCvh7hGnFtxE.roa (hash: 8R2FpGn0FkaVFxjBR316An56384LFtz5CeDRnrOaQ80=)
7: qaon0_VUrQ1CtM8ujS3h5z-HyYE.roa (hash: QjdBf8u7Dl0e5x76/XhPz/FbSF5qqjpq22dycf6FL9w=)
8: zya-nVnvYDRCe-NCa3yWVbEp98k.roa (hash: YAuOnGIJzSzoCT2LI34mrWSk3/Q4ZvQVKTNwjixKRhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:af:4c:9f:ed:88:37:79:7f:aa:7a:42:14:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: May 6 16:00:24 2025 GMT
Not After : May 7 16:00:24 2025 GMT
Subject: CN=d58f157df2cd5fc22d7ed5444a599d95030aa5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:15:fe:fe:7e:ff:a8:61:bc:16:76:c2:77:
34:ef:63:cc:01:7b:cf:6f:f9:a4:5f:2c:60:b2:45:
00:6a:0b:92:5f:ee:6a:89:20:f1:93:a4:31:82:c2:
29:77:f6:56:62:94:eb:90:11:3d:e6:c6:07:ff:71:
d8:33:4b:82:2e:00:9e:b8:fb:85:91:39:5b:1d:1f:
2b:65:ae:78:73:2d:56:f7:e5:b4:40:fe:dc:6a:97:
b9:e4:7d:d0:44:55:d9:f4:84:ba:38:95:e6:8e:8e:
a1:a1:cd:99:f0:21:24:4e:56:a8:05:d6:25:fa:8c:
4d:1b:b1:32:28:17:6e:47:ec:34:a9:a8:fd:b5:4a:
7e:02:dc:4e:b7:9e:81:19:ec:57:7a:d9:be:6e:63:
9e:ee:ac:72:4e:e9:6f:1e:d0:e0:95:83:f6:4f:7b:
14:53:15:d0:cf:77:76:06:9e:1b:2e:2f:61:7f:dc:
c2:3a:8f:08:50:26:d1:cc:1e:91:2b:ca:ad:2d:b7:
30:5d:a8:25:8a:a8:9e:e6:b0:44:ec:3c:c1:ba:84:
3c:e4:79:d1:1e:ce:36:c4:3e:1c:a5:41:fc:1e:1d:
07:f0:f9:94:c3:2a:db:49:5c:f6:b3:bd:0a:96:b9:
20:bb:2b:50:be:6e:38:fa:f7:1c:c4:06:88:37:75:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:15:7D:F2:CD:5F:C2:2D:7E:D5:44:4A:59:9D:95:03:0A:A5:C4
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b2:4b:d0:ae:19:bf:7e:64:88:13:9a:93:67:73:8b:fb:35:
d5:66:86:60:d3:28:8b:66:a1:9c:77:36:a8:1f:42:a3:1a:90:
6e:d6:71:74:7e:9c:ac:f7:80:ee:a7:80:6b:d7:91:d9:76:50:
dc:7b:ee:32:b0:d0:04:ce:cf:b3:de:ac:ca:d7:cb:7a:43:62:
bd:c1:cc:78:8e:b9:58:41:11:1d:7a:a3:7b:8c:fb:a5:51:da:
6d:da:f4:25:de:25:d5:9f:67:9d:9c:38:51:44:9b:1d:42:22:
49:e1:a0:b2:de:c0:b9:3a:12:27:59:bd:b1:d7:c9:55:e5:e9:
95:92:98:a0:fd:6d:4d:49:75:39:45:67:3b:90:f4:b5:09:9d:
49:8d:bf:65:d4:92:9e:d9:20:29:9a:db:4b:9c:0a:f0:e5:94:
08:87:d9:dc:77:48:ea:44:a7:8f:a3:8c:f1:33:97:07:63:28:
ba:ac:4f:c9:e2:8b:f2:3f:f1:2a:72:66:e0:e7:f9:50:c5:54:
34:50:ad:49:f7:8e:04:67:de:cc:bd:9c:91:3b:d4:9a:30:84:
1e:89:f2:de:28:5e:28:6e:b5:4d:43:99:29:c0:2d:da:36:80:
4d:fe:e8:c1:b8:a8:48:33:55:f0:45:f0:63:0a:44:26:44:98:
7a:9f:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:47:55 2025 by rpki-client