Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: 6UIrapdxa8nMMO/cRFZGfA1c1HFab8qz+edPycyDKWs=
Subject key identifier: 59:7F:2F:B6:3F:E7:26:45:F8:D9:85:9F:B8:90:9E:4D:D2:05:A9:92
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 0196A088CDA1DF157FABD5A2F20454738B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 13:00:42 +0000
Manifest this update: Mon 05 May 2025 13:00:42 +0000
Manifest next update: Tue 06 May 2025 13:00:42 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: LUAlTbIFsdUlQUheJ0SDXzTqxFv9MZlis0EAyi6hYHc=)
2: ZyIu060SPaMWxMQNL4CIeyP46Zk.roa (hash: GVU/SWZQhKij7yAFfd4z7w9wi6LHgd9IcJaXLlSPbVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:cd:a1:df:15:7f:ab:d5:a2:f2:04:54:73:8b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: May 5 13:00:42 2025 GMT
Not After : May 6 13:00:42 2025 GMT
Subject: CN=597f2fb63fe72645f8d9859fb8909e4dd205a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:37:13:48:52:66:d0:e8:55:1a:fc:52:4b:ba:
84:a0:29:1f:d7:09:d4:9d:2c:a4:0d:76:4b:1b:34:
1b:89:20:8a:bd:b2:8e:67:57:3b:07:96:64:86:53:
75:52:08:23:6b:91:e4:4e:0a:3c:85:35:b5:41:ed:
26:6d:06:60:19:8b:eb:37:cd:ae:65:fd:c3:65:87:
f6:75:31:27:bc:05:1f:46:88:5b:ad:80:e5:32:b3:
46:c9:f7:0f:19:a2:df:3b:89:9a:72:e4:ed:2d:db:
ce:7d:a4:4f:41:8e:55:c0:96:71:9c:ee:5c:ad:97:
23:65:42:d5:cd:50:47:f8:e2:9d:ae:65:11:07:46:
cd:ee:f7:18:ea:78:4b:21:26:ca:b5:7e:98:18:83:
8b:04:89:56:d7:09:2f:9d:0f:f7:e8:d1:27:8a:55:
d9:7d:3c:9b:e4:a0:eb:1a:e2:0c:38:8b:1e:bf:21:
21:b6:c4:ad:0d:32:72:a6:63:66:cb:08:02:99:51:
3f:f6:50:91:2f:82:8a:f6:85:7f:a4:44:28:2f:18:
e1:02:eb:be:7f:9e:b9:ad:17:23:0f:5b:27:55:62:
89:24:42:8b:97:2f:54:c9:cd:54:55:cf:0d:0b:a5:
4f:56:38:48:d1:47:48:64:3e:10:e4:55:39:0d:0b:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:2F:B6:3F:E7:26:45:F8:D9:85:9F:B8:90:9E:4D:D2:05:A9:92
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:de:67:b7:3b:30:5f:5f:5d:44:75:ed:33:2c:98:5a:bf:
d9:31:05:e2:d7:61:d1:96:72:b3:48:f9:eb:b4:d0:eb:87:bf:
7c:96:48:60:89:19:1a:e6:76:0d:8d:a4:53:9e:3f:5c:3f:2d:
04:f3:96:45:57:0b:f8:a3:09:dd:3f:27:ff:79:6f:08:c5:8d:
ac:98:a0:29:62:ee:49:04:62:6c:a0:37:97:72:24:88:aa:84:
81:97:7c:e8:96:24:6b:9c:b1:9b:32:1e:81:8c:f8:92:f2:d0:
b9:73:05:1f:5d:64:de:6a:bf:61:d4:60:71:59:0b:7e:44:c4:
7a:23:3a:3b:b1:41:44:5a:39:a6:f5:02:44:4e:f6:8f:c1:df:
91:e1:4c:44:0a:33:01:3a:4c:6a:09:aa:14:e4:0e:15:db:ad:
3c:45:8f:ac:0a:c7:b5:ce:89:a2:59:14:94:19:3c:f3:10:20:
40:0b:05:d5:7d:ad:c4:27:b4:3d:6a:3d:d1:01:7c:86:3e:7f:
01:03:ca:fe:05:4b:ff:9b:dd:cd:ce:43:4b:d7:98:63:e9:36:
ce:36:13:e9:a5:81:1b:c8:05:28:a7:79:c4:90:9e:6a:5d:86:
3d:a4:a5:6a:15:06:ff:2f:22:40:28:fc:8e:b8:de:5d:ea:64:
97:b8:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:17:20 2025 by rpki-client