Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier: s1oHCKxaK0pX5I7HzS2UBiHpa/gwqySV2oMZ/AgtYx0=
Subject key identifier: E7:0F:EB:93:62:D1:45:5A:49:77:5F:29:DC:D8:55:60:B1:A1:A1:A5
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial: 0196BC3725A08EE9C69449175E12DFA04121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 22:00:52 +0000
Manifest this update: Sat 10 May 2025 22:00:52 +0000
Manifest next update: Sun 11 May 2025 22:00:52 +0000
Files and hashes: 1: O8Js1mgAF0iv_PSwJLDMH2LqzNs.roa (hash: uCecidRlrlebYe8zpAxIMGUV7GE/OrG+H65AT04t1PQ=)
2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: hs/B7zecK2SM/JbSFHqAmjq8/rSfvZmle++W+uZVCes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:25:a0:8e:e9:c6:94:49:17:5e:12:df:a0:41:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Validity
Not Before: May 10 22:00:52 2025 GMT
Not After : May 11 22:00:52 2025 GMT
Subject: CN=e70feb9362d1455a49775f29dcd85560b1a1a1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:79:db:d0:1d:b1:e5:05:32:2c:e3:7b:02:
4f:37:13:ee:82:ab:3d:5e:5c:66:2b:a8:18:eb:b8:
41:f5:d0:57:44:23:a0:06:73:eb:d9:56:a0:d1:a5:
60:cd:ae:ba:5a:bc:e7:4c:2b:f8:96:5c:db:ae:40:
40:98:ae:79:86:82:1c:13:f6:3c:02:6a:c8:7c:88:
43:04:87:d6:a9:4c:80:e0:7e:c0:02:f3:ff:97:c2:
a6:1e:35:c3:46:5d:ab:92:e5:c9:6e:d7:ae:6f:4a:
bb:6b:06:b4:11:79:7c:79:2d:22:f5:28:3d:21:88:
19:13:48:74:aa:90:11:46:b8:fc:cb:42:36:55:ab:
1d:75:71:7d:d9:d3:83:f8:c6:ed:32:15:46:ee:e0:
c1:94:09:30:1d:16:1e:74:00:a8:a3:d4:3d:be:99:
8a:b2:23:8f:9d:8c:4e:ee:00:ad:c6:eb:8e:cc:38:
09:95:78:30:b0:bc:63:7d:df:04:78:48:63:49:19:
f2:b6:3d:1d:78:bf:05:0a:f7:b7:9a:46:2d:e3:46:
62:eb:ff:4a:2d:77:2f:3a:e9:d2:69:5f:d7:43:0b:
6d:ef:76:c4:23:e8:49:44:09:d3:6b:64:af:e9:cd:
1f:9d:c5:98:e9:d5:df:be:e1:7f:96:39:94:3c:45:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:EB:93:62:D1:45:5A:49:77:5F:29:DC:D8:55:60:B1:A1:A1:A5
X509v3 Authority Key Identifier:
keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2e:d3:66:5d:22:1f:f4:d8:59:f5:51:61:94:9e:ba:5b:3b:
9e:e3:a3:0e:2f:e1:dd:10:6d:80:47:2d:43:18:bb:83:18:b3:
a6:12:ae:72:d7:19:19:d2:56:3f:c5:be:1e:b6:fe:96:92:41:
64:95:29:51:94:87:a6:62:24:bf:c7:01:5f:43:5c:80:0b:45:
63:0a:8c:29:c9:44:79:9d:1e:1e:1c:e0:69:d4:e0:84:9d:10:
f2:99:7c:4f:03:83:50:21:29:d4:21:37:b0:c3:cc:78:39:77:
b4:fd:e3:2c:4d:61:c9:2c:09:42:29:c2:2b:0d:5f:c9:a7:e0:
f4:f9:36:51:08:ec:61:7b:c4:05:1e:3c:a8:26:8f:f8:3f:19:
ad:4f:4c:6e:b1:08:f1:56:41:5f:da:ff:72:2f:58:c4:ac:60:
53:af:27:f4:ab:5e:7f:54:b8:5b:fd:43:67:04:09:84:19:2a:
c5:59:12:04:18:41:6a:79:20:df:01:28:92:e4:24:b1:b4:00:
64:15:60:b3:c3:77:8a:ff:d2:47:21:5d:6d:3d:57:e0:a7:c3:
64:40:b9:b1:fe:79:9a:b8:7a:40:ff:0d:83:03:bf:ef:c7:e8:
4a:0f:6b:c9:59:47:ba:40:ea:92:2e:bc:b6:27:23:91:af:9a:
45:e8:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:13:50 2025 by rpki-client