Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File: Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier: uKqqYO/pivJFexcqScowdQ/BWxI1xtRfamMTHy3sNU0=
Subject key identifier: A6:69:B0:FC:E3:31:91:0C:34:DC:DF:A9:27:F0:52:3F:08:40:54:AC
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 0196C72883786B29634DCFFF92E80A6BDC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number: 0858
Signing time: Tue 13 May 2025 01:00:43 +0000
Manifest this update: Tue 13 May 2025 01:00:43 +0000
Manifest next update: Wed 14 May 2025 01:00:43 +0000
Files and hashes: 1: UZAf8A9-pMDfvYbHB760wm3mim8.roa (hash: j34ASxN7++MCsv3IXa3rAjo5KvWthukAGWu5QUJzwPY=)
2: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: s7f+Yz6xX1QnZtHE1twMjFrP79NQL3iZSMsQU4D12tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:83:78:6b:29:63:4d:cf:ff:92:e8:0a:6b:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: May 13 01:00:43 2025 GMT
Not After : May 14 01:00:43 2025 GMT
Subject: CN=a669b0fce331910c34dcdfa927f0523f084054ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:d6:ad:43:e9:98:72:f0:9b:23:40:8f:49:
48:69:9d:d7:38:b1:98:00:c4:dc:8c:9d:6e:64:41:
66:c7:94:b7:8b:c3:20:72:7e:5e:ad:17:ed:7f:4c:
3b:a5:13:34:b5:01:a4:52:43:38:d9:a3:fc:1a:e8:
b6:ff:41:e7:37:c2:6a:8e:21:66:60:fe:b3:fc:e2:
de:88:7b:a9:9c:15:65:5a:49:eb:ac:7b:49:1b:a3:
7d:dd:5b:97:27:9a:4e:f9:69:24:59:0d:d8:8e:be:
22:3b:62:97:83:e9:40:ae:16:af:26:7a:7e:d7:8f:
85:90:37:7d:30:c5:60:fe:bf:93:6d:d4:cd:0d:de:
c9:7f:21:5d:a2:ed:05:13:ca:12:04:4c:aa:f3:5d:
c0:dd:a2:b5:df:3f:db:19:ff:3f:60:88:6b:fb:bc:
3c:01:6a:25:26:ca:8d:2c:cd:d4:78:da:3c:a5:3c:
44:5e:2b:f0:87:45:e3:93:3f:bf:38:76:a5:fa:96:
51:48:7c:58:2a:43:17:ca:3f:ca:05:3f:71:84:3b:
3e:e3:be:d8:4f:43:73:f1:ba:46:8d:f5:2f:98:d9:
ba:59:b9:0e:52:88:47:13:2a:a6:98:47:23:4f:e0:
fa:97:54:e0:51:f8:06:fb:fa:6b:c4:ff:47:1b:c9:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:B0:FC:E3:31:91:0C:34:DC:DF:A9:27:F0:52:3F:08:40:54:AC
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:12:17:c5:d4:fc:96:be:34:97:fb:61:1f:63:dc:92:bc:
14:78:89:4b:93:74:5e:90:7e:49:23:7f:15:d3:4f:78:96:3e:
53:ac:a9:c8:59:28:77:47:de:d2:59:c0:21:d2:4b:d8:31:99:
b5:2a:46:f2:ed:9c:9d:42:ab:3a:2b:2b:3b:de:89:86:d9:73:
8c:dd:8d:8d:fb:65:27:02:e2:d1:fd:1f:fb:17:4a:c5:c0:e0:
fd:2c:3c:60:99:8c:58:29:b8:9f:44:db:35:b4:10:45:bc:62:
0e:35:df:cd:de:bd:80:f5:ce:e3:4e:8b:b2:39:72:ea:d6:cb:
fc:e7:ea:5d:e3:41:77:6f:0a:6c:b4:51:56:c9:51:1a:8a:51:
9d:13:d2:ce:12:b1:65:03:ea:03:7a:80:9e:df:8e:cc:be:bc:
54:90:80:ba:27:58:ff:48:b1:78:0f:fe:08:ad:07:d1:9a:11:
d5:47:75:83:09:c7:f6:b0:77:0f:a5:f2:bf:e2:03:52:d1:25:
5d:9d:74:12:c1:73:40:76:2a:2b:97:28:11:c7:3a:b3:3e:29:
81:69:d6:80:8e:51:ad:15:0c:d1:d2:2b:14:9c:b6:27:54:4a:
d3:fe:29:15:b8:b4:29:af:95:1e:c5:9b:65:18:32:8f:f6:a3:
ea:e4:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:46:14 2025 by rpki-client