Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: fHzH7VEx2lhmOHSG4oggsIjUVWsBsO3+XRFfBx3jnZ8=
Subject key identifier: B6:29:AA:38:74:42:A6:CB:7D:C2:3D:56:4C:1E:41:D2:EA:DE:58:EB
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 0196C53AD2D29A8D3156D9914B563D514226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 16:01:28 +0000
Manifest this update: Mon 12 May 2025 16:01:28 +0000
Manifest next update: Tue 13 May 2025 16:01:28 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: ZFdgzYhdX5xXOQ8tfBpaAfbSA2Cir4eGxNVABIiK9GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:d2:d2:9a:8d:31:56:d9:91:4b:56:3d:51:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: May 12 16:01:28 2025 GMT
Not After : May 13 16:01:28 2025 GMT
Subject: CN=b629aa387442a6cb7dc23d564c1e41d2eade58eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:b3:bd:e0:f2:97:e9:70:8a:57:4a:d5:7d:
e6:09:aa:64:61:ad:79:97:ae:f5:df:7e:7e:b0:16:
c3:22:62:08:98:65:49:fa:e0:14:18:54:b3:c0:8b:
01:9d:46:75:25:b0:31:7b:e3:82:8c:e4:9c:72:89:
dd:f0:b1:c0:45:19:47:b9:51:01:57:77:d7:6a:28:
4f:4c:fa:f6:b0:f8:59:5b:c9:e6:03:8a:b0:e9:ec:
b1:96:06:37:88:a8:7b:a7:6b:69:09:fc:23:b0:e9:
aa:94:66:f9:6f:af:4e:cc:3d:d4:76:05:b3:b0:a3:
cd:e1:fa:9e:38:04:fc:66:02:8f:09:41:07:83:52:
9e:4d:8d:b1:01:01:97:a4:f3:e4:3c:be:a5:b1:6b:
ec:c7:9d:88:b3:ff:26:b7:5d:40:b4:4d:c9:01:f3:
83:ef:9f:58:5b:ae:69:52:78:28:d4:cb:60:73:31:
1d:51:48:d0:25:17:71:6a:4d:b0:64:b0:31:c6:d0:
c2:ea:c9:84:c1:6b:71:aa:9f:cc:62:d1:f3:1b:5a:
d9:28:0e:5b:66:e5:47:5c:23:32:8c:0f:27:82:8d:
b4:38:0b:82:6f:06:e6:ec:c7:19:eb:dd:7e:db:6b:
f3:24:40:12:17:5d:18:eb:0a:b1:e7:06:0b:4a:02:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:AA:38:74:42:A6:CB:7D:C2:3D:56:4C:1E:41:D2:EA:DE:58:EB
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:d9:dd:fe:a2:26:8e:d3:70:04:1c:59:69:fa:5e:74:79:
3e:d2:6b:3d:d8:92:e8:7f:ac:ac:09:ea:ca:4f:d1:ad:8a:f9:
a7:d1:40:72:6b:48:6a:0d:ba:57:34:39:47:8d:5d:5a:e8:cc:
60:ed:5c:f1:69:83:be:52:73:b9:8b:20:e7:c0:a7:e4:c5:3a:
36:bf:b2:1a:6e:3a:68:74:ba:cd:a2:bc:31:d7:72:f5:48:77:
52:56:31:89:8f:98:f5:3d:5b:79:30:c3:ec:f7:fd:2c:5b:d1:
df:a6:47:d8:5c:dc:a5:42:ee:7c:c4:64:97:e9:8a:22:db:af:
26:46:32:1d:f7:54:0e:d0:09:90:e1:4b:6b:a1:45:06:c4:c4:
4e:e1:60:73:21:d8:5d:8e:bd:cd:00:6e:4f:a6:83:aa:62:0c:
c3:ed:35:0a:13:e3:83:91:b1:40:91:3b:0b:de:09:ea:68:85:
f0:c5:9b:4d:f9:e1:57:4c:f6:0f:8a:27:b1:de:02:00:1e:47:
2e:6b:38:c8:b9:77:e7:9b:89:97:33:68:52:03:b9:cb:99:69:
12:90:f5:7b:f8:56:ac:4b:d3:01:99:6e:12:94:fc:76:d5:a0:
db:13:25:28:5a:02:ff:df:3f:ae:53:2e:0f:1b:04:85:4a:ca:
f0:8b:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:48:50 2025 by rpki-client