Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: /s8NOjc/pu598maKD3jUuSEv31uTiFfKvNRs2UQwUB8=
Subject key identifier: E8:58:71:CE:05:F7:9E:DD:A3:2A:38:F5:4A:6E:15:BB:9C:4B:59:9E
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0196BD81351DDB62E82BE23D8C48CAFDF008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 04:01:23 +0000
Manifest this update: Sun 11 May 2025 04:01:23 +0000
Manifest next update: Mon 12 May 2025 04:01:23 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: Tzy7VcdbmdxsmaRDYPEpn2bKAGPa6skK1MBqM4jkjpY=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:35:1d:db:62:e8:2b:e2:3d:8c:48:ca:fd:f0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: May 11 04:01:23 2025 GMT
Not After : May 12 04:01:23 2025 GMT
Subject: CN=e85871ce05f79edda32a38f54a6e15bb9c4b599e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:8a:11:10:65:27:e0:be:84:fc:35:34:e2:
fb:80:7d:93:e9:96:93:11:34:2e:df:04:2f:a0:7a:
e1:44:43:dd:b1:ae:ec:fd:45:93:b8:35:8b:73:55:
74:a5:1e:60:ec:fc:e2:e8:c9:e8:d6:78:ea:be:2a:
97:78:22:65:0d:e4:9e:04:a2:89:91:ce:b7:85:e8:
58:60:5d:5d:c4:4a:20:33:15:60:f9:94:09:f2:d8:
08:84:bf:0b:97:d2:63:bc:ec:30:ad:be:72:cd:58:
ba:8c:1d:9f:cc:43:05:6d:60:d0:bf:81:9f:e3:6a:
29:bd:54:d3:8f:6a:e3:a7:9d:b7:c6:25:f5:85:d1:
9c:ba:93:a9:42:13:aa:d8:dc:9f:a6:68:58:01:41:
8a:f6:4c:99:e5:df:36:9a:bb:58:90:f9:1c:e8:bb:
1b:6a:f7:4c:11:d0:53:9c:86:c4:3a:e5:fa:6c:fb:
f1:7e:20:45:44:4a:b6:86:7b:dc:57:2d:11:e4:9a:
eb:97:b7:f0:e9:58:2e:62:7d:76:5c:18:dc:8e:bd:
da:96:62:06:9a:81:49:f3:d2:93:18:23:37:f8:61:
57:64:d0:16:2c:ec:f3:99:3a:78:ed:4a:81:de:29:
5f:44:8e:73:d8:d4:6c:d5:48:68:83:ab:0a:1c:fc:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:71:CE:05:F7:9E:DD:A3:2A:38:F5:4A:6E:15:BB:9C:4B:59:9E
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:91:1b:6e:ab:0e:19:4a:63:53:5f:36:dc:61:fe:15:d1:
36:0f:b7:0e:0b:c6:85:c8:7e:2f:9f:78:20:fa:44:9d:b2:1c:
cb:ec:a4:3e:4b:5e:9c:95:dc:a9:56:e9:7a:27:61:46:13:44:
5f:df:59:88:ff:2f:39:68:45:9a:be:77:1b:09:d0:82:9c:2b:
00:ad:d0:2a:75:17:4b:42:91:23:1e:75:04:4c:68:86:85:62:
1b:82:1a:dd:bb:28:14:ef:95:bd:ce:90:bd:2b:45:2b:c4:7e:
ee:81:43:ff:6e:0d:02:c9:f3:77:d0:d1:18:0b:33:49:b5:de:
11:b1:6f:27:66:06:ca:ec:af:a8:b3:ab:0d:92:6e:43:1d:f2:
59:61:a0:62:d4:f6:e5:2f:5b:eb:99:00:f5:a7:2a:bd:6f:34:
3b:1d:a0:74:34:f5:95:a2:0f:f7:c4:fe:73:e8:29:db:21:4d:
20:7a:76:2c:a0:02:a5:3a:7d:07:e3:24:8d:ff:dd:11:1c:81:
a3:81:f6:cc:f8:28:a7:29:a8:9b:e0:4f:d5:12:01:ec:68:84:
7c:ac:9a:e8:14:9a:ea:5d:8c:02:58:fa:64:b8:9f:d7:d3:7d:
6a:ac:d1:ae:9c:f3:84:2a:27:0f:f2:9e:ec:be:06:18:5e:66:
d7:f7:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:32:56 2025 by rpki-client