Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: OTS3hkIPLI8duwiUy1ehklTu1SJ9xbQ2vPVyhWVYk4k=
Subject key identifier: 74:32:6C:4B:01:6D:4B:D4:35:80:A4:5A:69:C0:07:12:37:BE:4A:23
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 0196BE2592766A8B3295648EA46FB7A09DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 07:00:55 +0000
Manifest this update: Sun 11 May 2025 07:00:55 +0000
Manifest next update: Mon 12 May 2025 07:00:55 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: 2AQlj1mkMAvG3BvGfVtVlJgqx+H1Q33TcYjlHjNg14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:92:76:6a:8b:32:95:64:8e:a4:6f:b7:a0:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: May 11 07:00:55 2025 GMT
Not After : May 12 07:00:55 2025 GMT
Subject: CN=74326c4b016d4bd43580a45a69c0071237be4a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:c0:0b:46:97:f6:17:34:9d:15:42:7a:ad:
69:2f:b8:14:bd:46:ce:94:fa:5d:98:e6:c4:cd:65:
2e:75:02:51:cf:b7:0f:c6:18:b6:db:df:62:fc:ff:
60:99:c3:d7:5f:da:e6:2a:be:91:ed:47:98:74:c8:
21:78:8b:58:9b:e4:d5:99:76:71:29:90:5c:e6:3f:
1d:22:dd:78:e4:cd:5d:e5:d0:5f:2e:b6:7d:d7:5a:
79:72:8b:7c:90:2b:4b:a4:50:3c:62:37:07:6c:7f:
23:a7:83:db:97:60:bc:95:ff:d1:4b:f8:5f:17:8d:
7a:4e:8a:17:ea:3b:75:b5:f9:c0:83:3a:59:2d:e2:
8d:a1:e5:13:1e:ba:a5:ad:16:2d:cd:6e:ef:d4:7e:
fe:ad:e9:19:0e:04:f6:bd:a7:5e:5d:b1:89:b5:1d:
2c:af:dc:87:63:5d:cc:af:aa:e3:8b:59:14:2f:e7:
3d:be:ae:ef:be:e3:5b:88:29:87:13:87:15:69:b9:
28:ff:b5:87:1e:63:4d:ca:74:8b:7c:b2:ed:57:1b:
ff:25:23:fd:97:29:32:85:76:52:ab:9c:f6:16:00:
7f:ef:d6:6a:45:97:e0:67:8d:2d:9c:1c:cb:9c:77:
7f:79:46:30:1c:25:0d:76:d9:71:97:22:35:5a:f5:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:6C:4B:01:6D:4B:D4:35:80:A4:5A:69:C0:07:12:37:BE:4A:23
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:58:cd:fb:7c:c8:6f:10:0c:69:3d:4c:1a:77:12:cc:fb:
42:36:04:82:dd:f6:f1:07:1d:27:54:bc:f8:83:48:6c:65:46:
ac:9d:d7:0d:84:ff:36:fb:72:41:7b:fa:aa:07:25:3e:d1:82:
e3:9e:c5:b3:0a:19:2e:e8:8a:5d:8c:87:7e:3c:eb:b9:84:04:
ac:48:f4:33:c3:14:5d:21:1a:43:05:9f:54:18:06:50:71:da:
9c:9b:af:e9:74:13:58:ec:c6:c3:dc:5c:58:92:cb:62:cd:46:
09:2a:cb:cd:73:41:28:91:c1:f5:71:9a:12:28:07:4b:44:79:
50:c4:f5:0b:0d:e0:4e:38:fa:74:ba:06:74:92:2e:08:48:a4:
db:f9:96:de:0c:9a:06:b6:08:1f:25:2c:a6:e3:21:43:45:fc:
b4:1b:47:7d:a9:23:bc:a7:bf:a6:05:cd:58:f1:5d:6f:41:8e:
ae:7c:08:df:34:ef:e6:f5:f3:f6:5f:a6:fb:9b:c5:21:14:90:
69:8c:ca:06:6a:b0:eb:a8:3e:16:4c:64:e8:1b:be:8b:d8:31:
82:44:65:df:b9:13:e2:db:64:3c:60:ca:9e:d3:34:36:3b:6b:
d0:50:c3:57:89:bd:80:cf:f7:b0:ca:58:c1:dd:63:31:5a:aa:
e5:ea:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:27:39 2025 by rpki-client