Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: cSfp+FsL6fxAx1x0Zy4HFG5/djyjZLGHNWT9OV8mACA=
Subject key identifier: A6:39:F0:04:25:E1:BA:38:15:FB:0C:3F:9C:01:52:2A:3A:F9:9E:D5
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0196BD808AD96AFD3872B9EDBA4C9B80F3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 033F
Signing time: Sun 11 May 2025 04:00:40 +0000
Manifest this update: Sun 11 May 2025 04:00:40 +0000
Manifest next update: Mon 12 May 2025 04:00:40 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: eP7KP3ZEfZ8ydOXSolGFZqyH5CfK4QSz0+DW8RKQwv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:8a:d9:6a:fd:38:72:b9:ed:ba:4c:9b:80:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: May 11 04:00:40 2025 GMT
Not After : May 12 04:00:40 2025 GMT
Subject: CN=a639f00425e1ba3815fb0c3f9c01522a3af99ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:e9:2b:d8:4e:83:ef:9e:2e:69:bb:b0:9e:
b1:cc:fe:0b:9e:c5:6f:05:82:db:b9:f4:60:ee:86:
33:fd:a6:f9:d9:c1:d8:ed:8c:1c:57:5b:54:77:c7:
05:91:66:3a:09:e8:3d:e3:5b:be:79:4c:0a:41:c5:
92:e6:27:dd:8d:31:08:80:88:8c:68:32:fb:fe:c5:
48:cb:72:b8:83:71:4a:1d:ca:5c:1e:b0:08:de:e9:
a4:e0:91:20:63:a4:f0:18:ec:37:ef:6c:ff:d0:9d:
44:43:89:7d:cb:f7:5e:0b:dc:b9:ef:24:6e:2b:ab:
5e:e1:ec:a4:e9:58:57:cc:96:dd:39:dc:7d:be:53:
d5:97:65:08:13:08:e9:fa:07:53:ef:c1:81:d7:ae:
49:18:fc:f0:c7:8c:5d:d2:b0:34:1c:97:9e:4f:05:
60:c3:22:46:cd:4e:48:e2:71:0c:e5:b6:f1:04:bd:
68:ca:9c:93:e5:c0:32:5d:26:19:b4:92:16:29:e8:
88:be:ae:1c:06:ab:e1:1d:48:39:88:5e:3c:bc:9a:
64:d4:a6:d4:61:e6:88:f8:c4:17:d6:78:ba:4c:a2:
25:d2:18:97:71:c0:66:ed:62:94:8e:fd:eb:74:19:
7a:46:a8:c1:5b:a1:fb:ab:fc:eb:48:85:0f:9f:0f:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:F0:04:25:E1:BA:38:15:FB:0C:3F:9C:01:52:2A:3A:F9:9E:D5
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b5:c5:f1:ed:05:ee:38:ef:a2:b5:1c:3c:ec:cd:8e:5d:d3:
55:b5:58:67:31:dc:d7:01:d2:81:2b:3f:b6:16:af:48:a2:ab:
1e:14:03:73:52:c7:16:43:ad:24:38:ca:e0:9b:fd:08:92:14:
36:ee:02:3c:f0:ac:26:3e:4e:9d:06:cb:ad:9c:4d:80:b4:33:
ac:39:d5:af:c3:af:72:33:df:9c:fc:26:d5:50:76:a9:0c:0b:
76:77:56:a4:1a:f4:32:80:d7:1e:a0:cf:5b:0a:c4:17:2e:7c:
3a:11:54:97:ea:e6:d6:ad:a4:cd:63:01:30:2c:3a:1a:25:f8:
5f:77:12:50:97:3f:c1:ce:11:39:a9:09:5b:e7:53:35:68:a3:
fb:da:b4:d3:0b:70:c8:12:6f:ea:8d:40:d5:d6:d3:8c:e8:5e:
ec:f2:b5:fd:37:b4:88:29:a2:ec:29:ed:18:3d:18:45:88:ee:
03:54:84:2c:f1:ec:81:3f:03:7b:16:37:5f:41:f1:7a:4f:5f:
90:f4:42:a0:2c:5c:a0:2f:4c:78:cd:04:1c:78:15:c6:b5:1e:
9c:dc:a6:fd:4a:d9:18:b8:22:f3:09:6b:bd:45:32:b1:0f:b9:
6e:e1:82:15:5e:ba:31:f7:24:79:3f:ca:79:43:9f:b1:65:10:
79:6a:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:44:02 2025 by rpki-client