Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: tsOV8UHbKR90hVLCOYF8bWOnZVBkL3RsOFCGAaD26iE=
Subject key identifier: 55:9C:F2:9F:15:02:80:48:00:24:8E:01:68:92:78:1A:C6:C0:FE:EA
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 0196D1ABF5D0C4E8C6F2453CB9BFD89E1DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0A11
Signing time: Thu 15 May 2025 02:00:29 +0000
Manifest this update: Thu 15 May 2025 02:00:29 +0000
Manifest next update: Fri 16 May 2025 02:00:29 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: WVEG5a247NngH1Ku9aqbVcizMgrk0rU40qCn+rW8D2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ab:f5:d0:c4:e8:c6:f2:45:3c:b9:bf:d8:9e:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: May 15 02:00:29 2025 GMT
Not After : May 16 02:00:29 2025 GMT
Subject: CN=559cf29f1502804800248e016892781ac6c0feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:86:89:4e:8e:8c:92:19:98:d5:01:68:4b:39:
4c:a2:8e:49:1e:4c:9b:43:bd:0a:0a:3b:49:73:02:
b9:92:f0:01:81:93:78:01:17:70:85:33:33:c9:80:
73:84:f1:ac:29:d8:16:0f:1a:e8:81:7e:7e:15:10:
c7:23:3d:b2:78:49:a9:87:4f:09:d3:6f:c9:70:f2:
27:6e:4b:69:16:19:82:44:c0:ab:56:03:64:a7:4f:
72:14:6b:34:71:13:30:61:0d:4f:00:26:e9:a8:b2:
8a:f4:6a:cb:b0:6d:70:d9:2b:1d:8d:6f:5d:f3:77:
1f:37:13:2f:2b:fb:24:f9:cc:2a:60:41:29:b4:f9:
67:f2:a2:a6:9a:d7:a2:8b:4d:5d:6b:80:64:49:ca:
0c:e7:2a:f6:64:8d:51:43:bf:66:d4:ee:9c:bb:0b:
a2:1a:98:6d:8b:6a:8e:12:66:17:fc:bb:ac:bd:55:
0b:d4:44:d4:4f:c4:d8:15:06:a8:e2:9a:ae:61:bb:
b4:d1:b9:90:da:d9:52:d9:6c:74:04:6a:44:83:19:
ed:4a:e3:df:e9:51:b4:0a:b0:cd:8b:fe:24:7d:cb:
d0:a0:21:bf:21:06:c0:15:ee:75:a5:51:97:29:be:
02:78:89:8b:80:a8:50:4a:ca:f4:c8:fd:99:a2:ce:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9C:F2:9F:15:02:80:48:00:24:8E:01:68:92:78:1A:C6:C0:FE:EA
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e3:9c:e1:12:93:b7:36:a5:78:f0:ee:1b:fa:26:ef:6b:62:
bc:eb:f7:f3:45:7a:45:bd:4d:99:4d:f6:fb:c3:f2:34:44:a5:
d9:6e:b9:5e:17:66:67:24:bc:cd:f4:fa:90:17:71:6a:ae:f8:
ea:b3:3d:9e:c6:b9:a3:29:60:8c:b9:56:f6:e3:45:e8:35:d5:
03:fd:c3:46:02:71:a7:e3:05:54:d0:1e:06:f7:2f:b8:3f:10:
ff:d7:f1:53:c2:55:dd:97:a8:e5:09:35:e7:b3:b6:98:ae:6c:
9a:73:c5:e1:07:21:5b:79:eb:78:a9:7a:c4:5b:77:9f:b0:ca:
ea:b2:a9:bc:db:7c:07:4c:c5:c7:80:1e:60:37:31:21:16:0b:
16:fb:33:e8:7d:29:17:e6:b1:0f:13:dc:69:2f:51:81:3f:8a:
b7:c2:3c:68:56:e5:55:68:51:af:db:ac:ea:b4:f8:9a:c5:6a:
1a:48:d9:b2:35:5e:c0:71:21:f0:ab:0f:50:63:fc:45:b1:04:
80:61:9e:66:27:35:1f:99:d2:45:4b:bd:dd:40:c4:a6:95:58:
f0:5b:ad:2a:f2:8f:f5:01:13:5a:1f:cb:65:79:72:76:ef:f7:
ae:10:c6:91:7f:b8:b5:48:44:db:fd:9c:87:f8:09:91:d6:7f:
6c:90:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:52:28 2025 by rpki-client