Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: y7WO4TUnL8s3ie5zourSQ6Cs1cIVTYC1QUOw3MSp9jY=
Subject key identifier: 4E:DE:9B:26:EE:7C:CF:D1:89:15:97:0E:D6:65:C2:37:DD:5F:F4:4A
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 0196C2A6DED98EE214994C9F27632AFCC003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1542
Signing time: Mon 12 May 2025 04:00:37 +0000
Manifest this update: Mon 12 May 2025 04:00:37 +0000
Manifest next update: Tue 13 May 2025 04:00:37 +0000
Files and hashes: 1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=)
2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=)
3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=)
4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=)
5: gKm9U9kV3usN6GfYJPy4pqvULX0.roa (hash: K9fqqKzRvHHDY8DtMbWp1xPSx9UsJ8K3o3kBsz7gZhU=)
6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=)
7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: MegwWqUsgvMhSBOyDeTYFL86Kz2nPgMYAwNTop3acbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:de:d9:8e:e2:14:99:4c:9f:27:63:2a:fc:c0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: May 12 04:00:37 2025 GMT
Not After : May 13 04:00:37 2025 GMT
Subject: CN=4ede9b26ee7ccfd18915970ed665c237dd5ff44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:f6:03:f4:89:34:e4:6d:e8:58:c7:c9:ed:
aa:01:61:0e:9a:31:46:97:b5:95:79:ca:04:1f:98:
f1:53:cc:9a:75:56:d7:2f:e7:3a:30:7a:8b:2c:fe:
65:92:69:a4:08:9c:fb:1b:0a:74:44:9e:9d:e3:14:
ba:07:b3:cc:45:80:57:e1:30:24:c8:8e:84:04:83:
b1:82:26:9a:7b:75:a9:70:58:e4:d0:f9:62:bc:5c:
9b:9e:2a:87:77:0a:35:ee:9d:ae:1c:7f:74:a2:d1:
c0:c7:b5:b8:67:82:91:df:61:0e:c2:1f:94:13:61:
e7:e5:a7:11:bb:23:3e:41:11:64:fd:49:fb:67:f8:
bb:5d:95:5a:9f:71:a0:de:fd:92:67:13:11:c6:45:
f7:66:b8:49:0a:98:9e:67:25:b2:b4:f0:c5:96:07:
3b:aa:f5:77:e6:f9:26:c8:bc:c6:ef:ae:6e:97:42:
e7:15:31:7a:4f:f5:03:e3:40:24:dc:49:29:87:8b:
de:d8:e5:0a:40:37:ad:3f:a9:4b:a8:3c:5a:b1:76:
a6:2b:25:0b:1b:a7:9f:f1:79:99:e0:94:f8:d2:39:
ed:af:db:1a:08:12:4e:2f:9f:c3:ae:2b:87:fd:b2:
11:c1:db:5a:6a:93:88:79:49:7a:c6:b4:61:11:f4:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:9B:26:EE:7C:CF:D1:89:15:97:0E:D6:65:C2:37:DD:5F:F4:4A
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:54:88:00:69:38:53:1a:f6:08:e2:c4:9f:f4:92:92:34:09:
16:cd:75:8d:b7:e6:db:53:9a:cf:ab:43:5d:6b:26:1b:62:19:
2d:0f:a1:b6:6d:1c:d5:89:64:84:7d:64:b0:9f:b0:49:6e:a5:
16:43:8c:b7:cb:ea:64:8b:e1:ac:7d:3b:a5:dc:ed:b1:fa:9d:
24:a4:62:b9:bc:e7:89:a8:45:40:4d:d7:a1:65:82:e1:47:b8:
d6:5a:f8:6f:15:dc:1f:0a:9e:a1:57:32:8e:b2:4a:9d:b6:47:
c5:d9:9d:38:db:29:ba:f7:e3:44:fa:6b:ed:ef:fa:e6:f3:ca:
d6:33:be:86:98:a6:bb:15:45:63:12:9f:41:15:9d:81:f7:bf:
e1:a5:43:71:2b:77:80:7a:42:f1:73:64:05:87:f9:67:59:80:
5a:b9:de:a0:12:07:ea:88:31:89:6e:0e:ba:35:d2:37:56:c4:
4c:cf:54:ae:09:70:87:db:0c:21:03:72:b2:c9:da:03:3a:7c:
58:40:ce:5c:e8:16:4a:cd:c2:43:e6:8e:58:9d:19:83:bf:44:
7a:69:a5:6f:f2:fa:26:97:2d:5f:cb:0b:24:0e:ec:f6:6d:b8:
41:b9:6a:a4:e6:36:7f:83:3f:eb:95:cc:b5:7c:c5:dd:b6:c7:
09:a9:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:22 2025 by rpki-client