Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: g9VdSRXJFwCl8nAS5eDCBpEj7AlTQBIswDMnsEQM2oI=
Subject key identifier: CF:FF:77:08:37:9B:6D:B6:11:42:1F:B8:8F:EC:27:6C:B3:42:51:29
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 0196D7AE3A6EBA543273D36CFC0D728404C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 04EC
Signing time: Fri 16 May 2025 06:00:41 +0000
Manifest this update: Fri 16 May 2025 06:00:41 +0000
Manifest next update: Sat 17 May 2025 06:00:41 +0000
Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=)
2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: j2KYvcJlHnKeJQ5W0BlR+fZxeYpPIYPVZK1gQ6wiLSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ae:3a:6e:ba:54:32:73:d3:6c:fc:0d:72:84:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: May 16 06:00:41 2025 GMT
Not After : May 17 06:00:41 2025 GMT
Subject: CN=cfff7708379b6db611421fb88fec276cb3425129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:08:9b:00:91:f4:6f:bf:23:d0:d2:ae:46:
b4:b5:35:10:e7:69:c1:b4:e5:0a:7f:c5:63:5d:9e:
71:1e:d1:71:09:78:62:36:f7:34:39:65:4b:9f:98:
c1:ec:c5:95:99:60:37:af:82:b9:b1:12:43:19:66:
9a:76:7f:c1:da:e2:d2:6e:b0:13:f6:01:48:ac:6e:
f0:aa:c5:1c:a5:63:3c:71:94:35:87:1d:f3:57:55:
21:6d:e6:5c:cd:ca:fc:65:d1:1f:23:19:43:5d:16:
3a:9e:9e:ee:10:46:c0:81:bd:67:b7:39:7a:2f:8b:
b2:4b:81:26:8c:6b:40:7b:52:75:39:ea:95:0d:71:
c4:dc:90:a0:7f:32:66:8e:4f:7e:67:6d:fc:8a:eb:
ec:ec:48:8b:d4:22:d4:dc:63:0e:02:22:74:0f:f1:
76:fb:e2:c6:7d:94:fb:07:89:34:ca:3d:e1:4c:70:
90:33:10:5d:ea:4c:e9:7a:88:73:43:c5:88:eb:97:
68:ee:99:4c:98:82:fe:26:63:ee:18:24:d5:36:4b:
af:21:74:49:5a:1e:26:77:1e:87:a0:7c:20:b3:ea:
9b:6e:bd:fe:08:9e:7f:41:fa:ae:30:a8:f8:f1:31:
88:d7:2b:69:3b:e2:f9:e6:2d:97:95:b7:59:e7:84:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:77:08:37:9B:6D:B6:11:42:1F:B8:8F:EC:27:6C:B3:42:51:29
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dd:22:64:c9:66:34:09:7b:eb:d6:3a:ff:6a:d2:d4:f2:cd:
2c:05:ed:36:4e:07:6d:f4:3e:12:b2:b0:5d:a4:73:c2:29:78:
08:4f:a2:4c:02:0e:a3:f2:d5:6b:d5:7e:04:31:84:e7:9f:c5:
13:ae:1a:10:2a:c2:3a:4e:df:bc:9c:64:29:0b:be:a2:69:ca:
3b:f0:33:76:06:47:32:fd:e7:e8:22:f3:63:3f:3e:fa:33:0e:
00:99:4b:da:38:17:67:2f:19:14:e7:b1:df:4a:31:6f:bf:af:
18:e2:c6:16:2f:1c:67:bd:8d:11:a0:ee:53:d8:79:84:8d:b7:
1c:f3:ac:17:37:9c:77:a5:4b:7b:2c:b8:ea:2c:fa:8a:68:1d:
7c:e4:cb:c3:37:ab:31:b6:ef:e0:8c:d8:d0:8b:e5:59:a2:35:
68:ff:c2:24:67:06:a3:9a:99:a1:a0:ba:67:b3:5a:c7:35:26:
f5:32:da:52:5a:2f:b2:d8:47:61:82:b8:4b:4a:b3:e2:72:38:
58:3e:c7:c3:e2:ac:56:77:35:8f:90:c0:2d:17:3a:c9:63:03:
c5:f9:9f:ff:e3:ae:61:7c:7f:fe:47:e3:8f:5f:25:5a:8f:6e:
2b:e8:e1:7f:53:0d:52:fe:3a:37:7c:b8:ab:ec:76:b1:1b:a7:
07:86:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:56 2025 by rpki-client