Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: RLOOdsmlhFHPtpZak8BuLdBrqAStsXDH2t3buV9aydg=
Subject key identifier: 40:47:C7:48:C5:30:99:6F:8C:F8:E9:FC:55:92:B3:10:CC:97:34:D7
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 0196A8435FF8A01D05BB9BA94F875AAF8D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 13
Signing time: Wed 07 May 2025 01:01:49 +0000
Manifest this update: Wed 07 May 2025 01:01:49 +0000
Manifest next update: Thu 08 May 2025 01:01:49 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: 7ED/wcfMfwcitR8nc1xV0fGVgzMcOW8h4kxdpqzvGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:43:5f:f8:a0:1d:05:bb:9b:a9:4f:87:5a:af:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: May 7 01:01:49 2025 GMT
Not After : May 8 01:01:49 2025 GMT
Subject: CN=4047c748c530996f8cf8e9fc5592b310cc9734d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:02:0c:61:d4:1d:fc:6b:3a:fe:7d:56:12:
46:56:bc:28:52:e6:11:90:08:92:cd:c1:83:f3:3e:
ec:6c:07:d1:77:5d:1c:50:99:80:1e:fb:c2:8c:67:
58:95:ec:a5:6f:68:14:67:37:9c:5e:31:9c:52:d9:
46:e6:e6:0e:bd:b8:0f:b4:78:7f:cf:4a:81:a0:27:
7d:a9:27:95:11:be:41:a5:12:f7:0b:da:b2:25:f7:
17:72:3c:d1:93:5f:3b:13:f2:36:ea:51:2f:fc:b8:
ae:81:52:b8:6f:d1:10:7c:62:ff:13:ac:fa:f5:4e:
91:5f:fd:18:47:9d:51:cf:19:89:b2:68:af:17:4a:
c6:79:1e:06:30:6f:52:51:c4:95:76:4a:4a:3b:33:
04:58:3f:5e:f2:2b:75:3b:42:f5:49:d0:e4:22:1d:
36:07:d5:6c:ad:51:98:ea:78:48:bb:b6:68:8d:16:
f0:95:c5:b3:60:d5:ff:cb:72:6c:2d:89:9d:8b:ff:
70:9f:00:3f:f4:07:db:87:e8:82:ca:50:0c:db:60:
89:ff:d7:73:38:3b:99:b9:7f:4b:87:bc:4a:9e:bf:
15:2b:27:db:93:5f:46:00:02:cb:3f:ca:6c:59:59:
b2:22:51:69:f8:19:3b:9c:a1:6e:50:16:55:1f:58:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:C7:48:C5:30:99:6F:8C:F8:E9:FC:55:92:B3:10:CC:97:34:D7
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d5:c1:b3:67:7d:63:c3:81:db:d7:9e:bb:72:2d:e1:31:c6:
67:53:24:d4:e2:d7:ad:84:29:87:c2:43:96:ba:55:f8:29:97:
05:31:36:88:34:c9:69:36:65:5b:96:1a:ea:27:03:99:09:c9:
cc:8c:81:d0:77:1c:de:af:0c:cb:3f:3c:3c:c2:c4:28:f6:b7:
a0:07:c4:0c:bc:d6:93:8d:90:bc:66:83:38:ea:22:45:87:1c:
81:72:0c:a8:d2:9b:ee:2e:33:dd:37:44:16:bf:96:72:3c:03:
40:a0:4a:cb:42:a1:3c:82:00:6d:05:d0:bb:2a:20:41:47:62:
1f:0c:03:11:b0:ff:17:61:d1:3d:50:79:d9:db:d2:97:22:f2:
52:a6:75:38:68:fe:38:16:5e:c7:23:c9:19:c1:f8:24:b2:53:
79:fc:3c:ec:e2:cc:a9:49:ce:5c:2c:67:f8:4a:2f:bd:49:3e:
78:05:87:a2:71:93:d8:2e:f7:87:e4:88:64:10:23:3e:77:30:
b8:0a:32:6e:6f:67:ae:23:0c:e2:af:97:c3:f9:97:1c:0f:6d:
9f:1c:84:ea:c3:f3:1f:32:17:2b:ea:a4:31:fe:1c:33:e7:7e:
cc:81:59:c4:38:a9:4e:1f:94:b7:37:63:ea:8e:3b:b8:74:4c:
b0:c1:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:48 2025 by rpki-client