Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: Ws2Igvk2Z//fgho6zQpMkDkagG/NVvAxTZmydOBy0IE=
Subject key identifier: 04:5C:1E:A2:5A:1E:41:91:85:07:56:40:94:19:F0:F7:67:2F:63:9B
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 0196C3B95A6BE30462323A43A875C42F9575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0F7F
Signing time: Mon 12 May 2025 09:00:26 +0000
Manifest this update: Mon 12 May 2025 09:00:26 +0000
Manifest next update: Tue 13 May 2025 09:00:26 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: gqo2Ffo1FfdP+c1/SjZnaxYCPUUPEhbMldHFEnNIZWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:5a:6b:e3:04:62:32:3a:43:a8:75:c4:2f:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: May 12 09:00:26 2025 GMT
Not After : May 13 09:00:26 2025 GMT
Subject: CN=045c1ea25a1e4191850756409419f0f7672f639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:a9:3f:71:b1:d0:84:9d:47:c2:25:d6:2c:
ee:33:2a:3d:ff:a7:ae:fb:24:07:72:dd:8e:b2:e0:
6d:f4:5b:48:ad:4b:cc:7c:e5:d2:73:f5:eb:3c:49:
ae:97:1d:c5:d4:24:47:53:8d:cc:1c:f4:74:8d:76:
39:6a:9e:c2:b6:a5:bb:c3:b1:19:b2:34:41:45:e3:
4e:15:7e:7a:24:bd:5d:8e:3f:df:f1:15:45:41:64:
4a:2d:a4:68:83:04:37:7e:09:7a:16:be:21:41:70:
32:88:44:50:6c:4b:76:51:39:76:87:33:1a:bb:01:
d7:b0:35:88:23:be:d8:e2:1d:e2:a0:84:93:4b:56:
a2:7e:69:4b:b6:d3:65:53:7a:85:f9:b7:37:6c:15:
14:56:47:47:d0:41:18:69:7f:35:da:13:49:3e:ec:
00:6b:39:bb:d6:2d:b5:5d:29:2f:bb:2f:cc:ff:11:
85:72:5c:cf:71:c9:de:34:f7:b4:dd:21:fe:87:96:
2f:29:c4:cc:ef:5f:c8:ba:3f:ea:66:61:49:53:32:
2f:33:9b:c3:42:5e:34:96:1e:45:bb:3b:ff:e2:76:
58:33:45:bb:c6:f8:81:a1:a1:2f:7f:2c:75:05:5e:
fe:27:9b:26:cf:55:cd:86:bd:8a:a8:70:b3:6e:9e:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5C:1E:A2:5A:1E:41:91:85:07:56:40:94:19:F0:F7:67:2F:63:9B
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:1a:46:e2:b6:2f:e6:09:9c:cb:9d:55:9e:de:bc:37:2f:
c8:ee:59:f9:74:ba:b5:b7:72:a8:e3:fa:43:5a:d3:78:3c:c0:
2f:76:2d:d9:db:53:16:03:f4:66:85:b3:8f:d6:92:5a:58:9b:
42:3e:3a:ed:8e:52:97:de:8b:a7:b4:f9:9e:82:fc:e4:34:ce:
5f:3a:bc:9e:15:cf:f4:d2:32:b1:24:25:f8:75:b8:4c:0f:12:
5a:89:d8:4a:2d:37:9e:c6:2c:71:3a:3f:5c:f2:72:e3:61:b4:
03:14:af:83:bd:82:35:76:49:72:a7:98:b6:d2:a6:b8:e3:50:
cf:f6:bd:d9:a8:f3:7e:8a:9b:5b:20:e5:c0:71:62:08:e8:4c:
47:54:49:fc:4c:f2:ab:e3:8f:95:d8:1d:dd:86:0b:91:da:9e:
ed:99:b0:37:2c:9d:0e:08:b1:aa:29:8a:16:ad:d7:fe:e8:7a:
6d:60:d0:8a:97:55:fb:56:91:c0:a6:40:59:d7:95:58:71:1a:
ff:e7:fd:27:28:1f:44:31:00:84:e7:64:22:7a:e6:0b:4e:be:
4b:7b:4a:17:e8:da:f4:80:7f:c4:57:72:5c:a3:db:1e:ab:40:
f6:97:42:3c:22:7e:3d:f1:ce:5d:f2:04:d6:4a:cd:43:99:a3:
e7:22:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:32:38 2025 by rpki-client