Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: y9Lsv6SyCFXMoV1OKNJSvDBoKoDFWBPfR10Z/FsgIWE=
Subject key identifier: 63:5B:5F:A6:64:F2:D6:20:F3:79:4B:12:A8:E8:11:34:F7:DC:37:BD
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 0196BECA2E0445EFEB63405E97D0AE1449E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 10:00:43 +0000
Manifest this update: Sun 11 May 2025 10:00:43 +0000
Manifest next update: Mon 12 May 2025 10:00:43 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: pHKCUxQT3e+g+ttpHxFod6W0Nvr3h7F1c/Qi4CvGI48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:2e:04:45:ef:eb:63:40:5e:97:d0:ae:14:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: May 11 10:00:43 2025 GMT
Not After : May 12 10:00:43 2025 GMT
Subject: CN=635b5fa664f2d620f3794b12a8e81134f7dc37bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:0e:24:f3:3d:89:3f:65:e6:5f:6f:98:32:
c7:f6:d2:13:1a:60:58:ec:d4:0f:e9:95:bc:69:f5:
2e:43:f2:49:30:d7:92:31:d5:00:ee:6c:1b:d9:a7:
c3:76:58:ff:23:95:3c:f6:ee:22:ed:ab:bb:82:5d:
df:12:24:76:37:73:f8:5a:a5:b3:7c:24:d2:3a:a7:
b5:cb:40:09:88:94:9b:b2:69:cd:cd:8d:4d:48:83:
2c:ce:68:ec:42:14:94:9e:67:ba:7f:d1:3f:77:f7:
0f:13:ed:b7:ad:56:e8:df:24:b7:68:48:8c:10:db:
f6:b5:63:35:be:d9:58:70:5e:6e:01:88:46:a9:c8:
f9:3e:5a:1b:5e:3b:b6:ca:03:73:29:be:b5:3c:30:
5e:9c:9d:c1:76:92:98:65:2d:51:34:81:f0:dc:e5:
f6:77:cf:89:b2:ef:23:61:3f:ae:23:c5:5c:a5:b8:
2f:69:46:d0:82:c7:af:89:b9:3a:c9:7b:a7:fc:87:
f8:e5:a9:cf:83:05:84:da:a3:34:a6:18:fe:2f:45:
e0:0b:ce:75:98:90:34:82:f9:62:d1:a1:d2:70:59:
14:9d:dc:8b:6b:f3:92:0b:4f:60:61:4f:31:eb:f8:
98:8e:96:d1:64:b1:e8:ea:b7:3d:53:30:0b:ef:ab:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:5F:A6:64:F2:D6:20:F3:79:4B:12:A8:E8:11:34:F7:DC:37:BD
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:43:0b:f0:96:17:18:67:02:9f:b6:e9:f4:f8:bd:15:05:
33:10:58:e6:5f:12:34:de:7b:ad:57:b3:7b:2c:ec:70:a7:a3:
cc:82:89:fd:93:eb:ef:8d:55:b8:32:47:a8:6f:1e:ff:2c:27:
b1:c2:a4:31:92:b2:40:77:b4:02:a6:66:64:e8:8a:5c:b5:f6:
4c:9a:85:dc:0b:ba:99:0d:7d:38:25:b9:d4:bc:c6:b8:5e:37:
4f:4a:f1:b3:c6:1f:eb:99:e1:86:07:56:41:b9:47:54:63:f8:
a5:84:c8:ab:95:5c:b7:22:0d:24:94:c2:89:30:7f:dd:2d:e6:
a8:ab:b2:9b:11:37:46:39:4b:49:79:01:2a:49:e5:4e:25:14:
34:eb:1c:58:e2:ac:27:26:ba:d2:78:cd:67:84:3f:ec:5a:b7:
b2:89:1a:fc:57:9c:2f:18:4e:dc:de:f5:19:9d:0d:03:e6:b1:
81:f6:16:5b:fd:28:cf:5e:b2:a8:cb:69:1c:60:7a:d2:4a:f9:
6a:f7:dc:77:49:df:5e:72:38:dc:96:26:b5:1e:f0:f9:0c:e6:
61:a1:cd:38:ce:e2:68:89:67:20:2e:ae:55:90:54:76:ea:8b:
5f:7e:62:b5:2a:89:d7:d5:a7:4c:cd:c2:fe:4c:6d:2e:cb:94:
38:70:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:53:18 2025 by rpki-client