Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: 0oJi8g5WUxOll+0jE/z5NLfIMkSp7Pf9IZFowkCbaNU=
Subject key identifier: F6:36:02:6F:CF:EA:6B:A0:1A:E5:B0:B2:4E:13:1D:73:F2:B9:8F:19
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 0196BEC9C3BF69AA0740255F7C84753E9BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 1546
Signing time: Sun 11 May 2025 10:00:15 +0000
Manifest this update: Sun 11 May 2025 10:00:15 +0000
Manifest next update: Mon 12 May 2025 10:00:15 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: zmAqlOgBPkwxr043b9PsZlbtwK/LcrFwU9bbGlA09vg=)
3: lmtLzOVEBCMJmFDW97nmpW6PzFg.roa (hash: iVAnqzIcFvJJNH7mwFr2Z4NAC8vfHKTonzu7qSoeFDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:c3:bf:69:aa:07:40:25:5f:7c:84:75:3e:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: May 11 10:00:15 2025 GMT
Not After : May 12 10:00:15 2025 GMT
Subject: CN=f636026fcfea6ba01ae5b0b24e131d73f2b98f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:a7:67:b1:64:79:98:04:9e:6e:7f:f0:73:
c9:23:d0:29:f4:64:29:1f:ba:b3:d5:f0:65:73:50:
33:37:ee:ac:8a:fe:ba:29:ef:6a:31:be:f2:2d:3c:
09:f7:ec:78:5b:9a:7e:fa:4e:cd:f9:aa:55:f1:dc:
05:53:65:c6:5a:38:ce:08:5e:3d:43:18:7b:d0:fc:
a2:80:e3:d2:32:ad:23:2d:42:35:1a:16:0d:11:4f:
e5:97:eb:89:08:ca:7d:f3:eb:45:78:f9:c4:30:db:
9c:8a:8d:f0:4a:cd:80:b4:93:ce:67:c7:cf:46:15:
88:31:1e:6a:91:13:b5:12:33:f2:9d:93:0a:49:fd:
df:d9:88:45:7b:a8:f8:41:25:10:b7:cc:de:a4:94:
c0:ce:1b:e5:4c:7a:6c:15:79:a7:97:96:54:f0:63:
5c:d5:40:52:98:34:92:c9:32:42:f3:d5:2d:9a:5d:
5f:a1:5d:d6:bf:c1:a7:61:a9:8a:68:c4:23:7c:7a:
7f:39:d1:e0:96:ad:b2:22:b7:02:94:ba:59:45:80:
00:fe:49:89:55:c8:3b:2f:fc:ae:5e:41:12:18:a3:
62:dc:1f:f4:a5:c1:bb:93:0b:a8:34:4f:54:ef:cc:
52:89:b5:8a:48:36:cd:f8:ac:7e:16:a8:9d:c7:29:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:02:6F:CF:EA:6B:A0:1A:E5:B0:B2:4E:13:1D:73:F2:B9:8F:19
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:67:7b:0b:0c:0a:23:8d:20:50:d9:d9:55:27:87:03:50:70:
a0:d5:27:ec:78:20:10:5f:a9:27:a9:46:71:73:db:d7:e4:57:
08:37:d9:a4:40:4f:02:ba:fe:90:93:9a:d5:96:25:41:68:ea:
78:e3:0d:bc:c3:60:26:35:50:84:71:d2:55:7e:2d:07:54:0e:
a3:34:74:34:d6:c2:5c:7d:47:2a:bd:bc:11:3a:70:9f:87:88:
79:41:4f:24:48:41:72:bc:d3:6c:18:8f:95:5a:66:22:7e:c2:
6f:a4:89:bd:c7:27:15:f8:c4:c4:2c:22:74:1f:4f:03:4c:7e:
4f:59:13:41:94:d5:e0:b1:9f:7a:85:12:f2:cb:0e:e3:c0:cf:
62:cc:12:0e:c8:ed:a0:36:71:d7:49:00:83:fc:ab:ae:0d:7b:
73:7a:5b:6c:60:82:75:3a:87:42:3b:1b:17:40:5b:4c:d8:69:
f6:48:07:bb:34:90:8f:eb:56:b6:19:96:6b:78:1d:fe:d7:1e:
03:10:e1:d8:f0:ad:ad:45:cd:23:71:10:9e:8f:22:fa:82:bd:
1c:34:85:b8:02:69:32:a6:da:01:90:f6:e8:3e:c4:59:75:40:
b3:e1:1a:38:f1:ec:4b:d1:c4:82:5d:80:07:ff:ae:c4:3f:d4:
36:6b:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:10:54 2025 by rpki-client