Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: H9F42K1OHVpyLOCdv1P2RiykiJna4+zEi5HVMscv3YU=
Subject key identifier: 17:B2:C0:2A:2D:66:4E:6C:D9:4E:DC:E4:CF:1F:2A:62:07:AC:B3:16
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 0196C5030BCF39803B5AF6645B665BD8973B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1057
Signing time: Mon 12 May 2025 15:00:33 +0000
Manifest this update: Mon 12 May 2025 15:00:33 +0000
Manifest next update: Tue 13 May 2025 15:00:33 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: tQUcTrh50S9v0PrYjxksYbMdi3MVfItVAjsaK48O04s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:0b:cf:39:80:3b:5a:f6:64:5b:66:5b:d8:97:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: May 12 15:00:33 2025 GMT
Not After : May 13 15:00:33 2025 GMT
Subject: CN=17b2c02a2d664e6cd94edce4cf1f2a6207acb316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:f9:93:36:5f:a0:e3:af:ba:7a:39:70:28:
bf:22:f5:d5:12:b1:f3:48:7c:5d:f7:a9:77:8f:7f:
4b:a7:14:96:33:f8:33:f1:4f:74:7b:5a:3c:e0:cd:
12:fe:7e:87:9a:e3:2f:67:41:7e:d0:6f:66:64:33:
24:87:c3:52:3f:d7:5f:8b:0c:53:0d:48:28:ef:f0:
70:2f:5f:2a:ad:2d:84:56:02:66:00:f1:1b:be:94:
e6:c7:06:ea:a3:d7:bc:13:29:dc:e2:55:d9:92:eb:
d5:91:53:70:da:02:36:fb:cc:9b:28:c2:d6:8e:b1:
40:15:fc:0b:d0:f5:ce:c5:00:06:b3:5e:b2:87:7a:
f9:c3:c1:97:62:0d:a2:09:ea:bf:8c:a2:23:f4:0e:
2b:b4:10:b6:88:14:68:1b:4e:44:5c:1a:81:cd:e7:
cd:c7:3e:31:3d:f9:1e:f9:98:60:48:73:ed:47:c9:
e4:fe:71:2d:04:b5:78:1d:03:5b:bb:10:06:67:b4:
59:22:ad:d4:26:83:f2:ae:a6:f1:fe:2f:65:65:e8:
1c:2b:65:17:a2:df:4f:e4:34:b9:ba:0c:1c:04:f7:
90:f1:bd:8b:48:0a:79:13:1d:ac:d1:46:e9:a1:53:
cc:45:ff:dd:d6:ad:1c:4e:29:fe:3c:eb:dd:67:6d:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:C0:2A:2D:66:4E:6C:D9:4E:DC:E4:CF:1F:2A:62:07:AC:B3:16
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ef:c7:29:97:89:22:ae:79:f5:8f:b2:e2:1e:56:d0:2a:d1:
66:ce:ce:8a:a3:e9:31:43:0a:a8:7e:d5:69:63:a5:40:84:b5:
b1:57:24:dd:4b:14:e3:b8:d8:66:0d:5a:bb:d8:17:ea:ac:ae:
a1:d1:6d:d1:7d:0b:90:96:23:bd:8d:43:9c:92:b7:0e:39:b7:
09:d9:1d:af:31:72:e8:5a:c1:9f:f6:15:18:a5:cb:ae:f3:b5:
0b:d4:27:73:6a:5e:34:68:c5:a0:56:28:9a:e9:99:79:cc:5f:
c9:51:e3:98:b8:1b:93:4b:65:77:1c:d8:2b:d6:4e:c1:ac:12:
5c:37:25:2a:7f:06:76:63:41:b0:5c:dd:09:17:dd:f3:15:5d:
8a:e6:0f:b7:03:65:04:0e:0c:c4:6b:c7:6d:47:88:52:d1:7f:
3f:d6:28:a2:cd:4d:6a:b1:f8:66:a7:16:40:89:0d:9d:94:db:
ee:6c:ad:0b:d5:59:a0:0d:cb:ff:9f:24:17:2b:75:3f:ac:44:
83:2d:b1:26:f4:a5:ef:19:ea:94:cc:02:f0:b8:7d:29:22:21:
d2:4d:02:2e:2f:b8:0f:10:70:4a:e5:b2:bf:03:ea:aa:3e:60:
38:f4:92:41:83:ab:ab:0f:9d:ca:2c:cc:52:28:d4:e3:05:07:
c7:25:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:01:43 2025 by rpki-client