Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: KTF35K0oA1ReLBM2Lw/9Yoj9z5EEB4fwB60OuuZQLds=
Subject key identifier: 27:01:26:B0:2F:F2:87:90:AE:82:6A:5D:6D:1E:21:A1:87:EE:F8:E4
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 01969C753ED594DAACFC453E3CE45244B7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0858
Signing time: Sun 04 May 2025 18:00:51 +0000
Manifest this update: Sun 04 May 2025 18:00:51 +0000
Manifest next update: Mon 05 May 2025 18:00:51 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: AHwzeLZdsJvN4ML3h1YG4I8fY4tJ//c0dtOSGbw54XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:75:3e:d5:94:da:ac:fc:45:3e:3c:e4:52:44:b7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: May 4 18:00:51 2025 GMT
Not After : May 5 18:00:51 2025 GMT
Subject: CN=270126b02ff28790ae826a5d6d1e21a187eef8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:5d:48:3d:56:09:1e:56:9a:65:1a:8c:5d:
85:61:c4:41:0f:8b:ea:3e:bb:de:5a:fe:f2:08:ca:
a9:31:53:62:6e:fd:aa:71:a7:c8:17:3f:a6:ce:68:
f4:38:ac:02:3f:4c:37:28:65:79:78:1c:5b:09:4c:
41:e6:b1:02:e6:e8:1c:94:fa:66:92:e1:2d:f8:9d:
be:a6:0f:63:6b:be:88:d6:44:39:52:b5:51:73:78:
be:1e:9e:28:99:8e:1a:9e:71:9c:81:1c:7a:e8:1f:
77:62:1f:82:4a:ae:f3:98:ae:8a:71:fa:0d:da:3b:
37:46:19:f8:90:5b:9e:4f:a4:0e:02:09:d9:55:2b:
d6:d0:92:17:77:9e:57:39:22:bc:56:f1:cd:cd:e8:
60:de:3d:b9:b3:7a:28:57:53:15:d0:50:7c:95:84:
da:a3:31:b3:3b:d3:6c:95:bc:e6:23:1a:27:1d:c6:
6c:6a:11:0a:3c:c3:b9:a2:5e:73:c6:18:6d:21:9d:
df:de:a3:94:4d:f7:c0:19:51:e5:f3:a2:6f:5f:16:
55:70:6a:36:d3:6b:60:a2:a5:8d:bf:36:0b:a7:f6:
45:14:95:53:63:e7:23:b0:c3:0b:fa:9f:43:aa:c9:
ff:69:6f:5a:9c:96:5c:1d:d6:b9:fd:12:79:8d:cc:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:26:B0:2F:F2:87:90:AE:82:6A:5D:6D:1E:21:A1:87:EE:F8:E4
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:19:e7:2e:c2:18:74:29:ca:25:2e:62:4d:17:f3:80:df:52:
04:77:47:a9:05:5a:3a:56:32:e5:41:9f:5a:dd:3f:72:90:1f:
43:e5:20:fa:16:86:42:b0:72:32:d4:f1:92:be:e3:22:a9:c5:
e3:c9:b0:4c:60:27:15:7e:45:6b:01:1a:6a:dc:2f:54:94:0f:
28:ea:30:e5:61:72:a3:e4:29:be:db:9d:c7:16:10:eb:7a:ea:
71:18:a3:da:cd:07:76:c9:60:99:8f:62:d7:d5:dd:76:40:53:
0b:71:44:09:c8:6f:ca:ab:2d:15:87:d6:a4:ce:b3:ef:2e:15:
fe:27:c4:38:80:95:fa:f1:25:c3:a9:0e:db:0a:a3:cf:4d:08:
f5:3e:52:75:8d:31:e6:f5:ba:bf:15:5e:6f:bb:17:37:89:70:
3b:b2:90:35:bc:db:2d:de:45:28:ad:62:e2:07:6f:4d:00:74:
46:f2:af:60:1d:6c:da:25:17:bf:1b:2f:dd:49:3a:57:b6:25:
50:09:7f:b2:dc:82:1a:0b:17:57:bb:15:d8:69:e6:e4:bd:d7:
da:9e:20:5d:0f:41:ec:9a:0e:36:e7:94:b6:a8:7a:aa:6d:e7:
47:70:ec:e4:74:c6:7a:16:e1:11:00:d9:d9:4d:14:f0:9a:c0:
6b:8c:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:25:49 2025 by rpki-client