Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
File: YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json)
Hash identifier: V2fFBPuvMTPRnubJogXsn98D6Mbu8tjGN/xq/44rCrY=
Subject key identifier: 87:F9:9B:78:88:E8:EE:81:5A:77:1A:68:5B:65:F7:E7:AE:E5:DE:60
Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
Certificate issuer: /CN=633333d71526f533b1c1cf0be9fc321b623396d3
Certificate serial: 0196C3F0BF6E70265BE047963B32A8373841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
Manifest number: 05CC
Signing time: Mon 12 May 2025 10:00:56 +0000
Manifest this update: Mon 12 May 2025 10:00:56 +0000
Manifest next update: Tue 13 May 2025 10:00:56 +0000
Files and hashes: 1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: Li46+WD7EttqE1eidwt5K1Hpc2PnlZAVQzmbt4jUuP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:bf:6e:70:26:5b:e0:47:96:3b:32:a8:37:38:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3
Validity
Not Before: May 12 10:00:56 2025 GMT
Not After : May 13 10:00:56 2025 GMT
Subject: CN=87f99b7888e8ee815a771a685b65f7e7aee5de60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:2b:46:83:11:c4:86:66:2c:9e:d1:bb:7c:
0a:10:b1:f3:e9:cd:86:df:76:28:6a:3c:06:a5:1d:
be:22:c7:0b:c2:38:a8:99:8d:b7:a1:e7:66:a3:24:
5f:6c:7d:10:05:c1:93:2e:1e:f9:eb:6a:12:f7:4d:
ed:c2:d6:87:2a:02:71:d6:76:eb:8c:02:54:8d:f3:
a1:e5:20:60:1b:97:be:b7:1c:ee:2d:f2:24:83:b3:
82:3e:47:7c:6e:46:68:2e:82:ac:23:22:3a:c1:ea:
81:b2:6b:45:db:4f:49:db:2d:48:ad:f4:c6:83:3e:
04:93:f3:fa:0d:12:2e:76:9b:19:af:ec:d6:bf:e3:
70:f7:8c:30:8b:ce:2c:57:29:4d:71:b5:3a:0a:3b:
ad:09:c0:d7:d8:3a:f5:c2:45:a4:aa:a6:b2:92:f4:
c5:0d:f1:3c:02:dc:e1:be:22:f4:21:08:24:e5:5a:
4e:5a:ad:4b:8a:36:41:ad:f6:83:84:8f:aa:5f:9f:
45:8e:2f:8e:50:2d:c0:af:10:8a:cf:0b:d7:c0:b5:
c4:a0:df:a6:fd:23:81:01:e1:65:4c:c7:41:c2:82:
2e:ba:d6:04:53:d7:93:92:64:0f:3b:29:6a:a4:68:
2c:36:cc:a7:f8:65:0d:5f:6c:34:f0:9d:85:f6:29:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:9B:78:88:E8:EE:81:5A:77:1A:68:5B:65:F7:E7:AE:E5:DE:60
X509v3 Authority Key Identifier:
keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8e:f3:94:80:0a:0e:d2:ff:05:92:76:c0:3e:39:a5:bc:4e:
23:48:1a:0f:ac:08:69:c7:f6:3f:2d:6b:08:2a:a3:80:5d:e2:
9a:b4:59:6f:e6:02:98:8b:85:6a:49:29:53:5b:9b:ed:a9:95:
31:a2:1c:1e:01:7f:14:ce:a9:27:64:b7:2d:4f:f6:6d:b3:cc:
6a:02:58:a9:80:0e:4f:c8:4f:6d:0c:a2:12:34:69:f4:98:24:
53:e3:42:01:0c:ba:97:59:96:a2:27:8f:18:53:f8:a0:c5:f3:
5e:06:b0:85:c1:c3:2f:4a:b4:c2:bc:2a:9c:5b:1e:a7:cf:3b:
89:c5:e2:9e:ba:c8:04:89:93:54:b7:5e:45:2c:2b:20:07:c9:
1b:db:49:c9:3d:21:47:db:09:21:37:e6:08:be:74:6c:7b:82:
33:fa:35:08:fc:ac:c1:09:8e:08:e1:91:ed:17:9d:48:eb:d7:
45:b7:d8:2a:a8:3e:ad:bb:9d:cb:ed:40:f7:3a:e4:14:45:e0:
e0:9f:9e:d1:1e:f9:08:44:c7:0d:76:76:72:94:8c:8d:12:d3:
55:ca:ab:15:29:59:ed:43:6f:93:09:b2:4d:97:68:6a:0e:f6:
1d:40:06:90:2b:c2:90:95:69:f3:a2:21:dc:da:da:24:1f:aa:
00:ee:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:26:16 2025 by rpki-client