Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: BM427lQ1l7Hc3dyzZx7Ejf4FJ7X61ODvquGBTfRdNr0=
Subject key identifier: 30:61:72:A8:EE:F2:A9:9A:93:B1:3D:5E:BB:1F:E6:B3:FA:23:1F:37
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 0196A05180DDF4BAD4A5D609D6C8F95FB89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 095D
Signing time: Mon 05 May 2025 12:00:18 +0000
Manifest this update: Mon 05 May 2025 12:00:18 +0000
Manifest next update: Tue 06 May 2025 12:00:18 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: gtdh36UT6OHP9P4g8g+5IPn4IRVqStH8I1riYCOIJNg=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:80:dd:f4:ba:d4:a5:d6:09:d6:c8:f9:5f:b8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: May 5 12:00:18 2025 GMT
Not After : May 6 12:00:18 2025 GMT
Subject: CN=306172a8eef2a99a93b13d5ebb1fe6b3fa231f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:37:0f:d3:89:8d:bc:77:2a:8d:19:fa:f3:
28:50:7a:52:0a:8d:32:c6:c4:3c:ba:ef:94:61:f1:
33:a6:2c:12:4b:32:c0:97:d3:4a:ad:88:57:f8:fc:
6f:15:a0:78:1c:d4:fe:ce:e8:bc:ff:0d:b4:72:f4:
10:18:f8:d9:57:63:e4:3a:55:8e:a0:b6:14:9d:6f:
c9:c6:e5:c4:d4:2b:e8:93:d0:77:e0:69:60:2f:a1:
5d:be:41:2f:88:53:de:59:ab:9f:0d:24:b2:7d:f2:
47:a7:eb:46:7d:94:c5:14:d5:ba:9f:25:11:09:79:
e8:79:f3:0b:ac:39:2f:56:42:30:87:f7:d8:ac:b8:
57:7e:6c:87:b0:51:4e:bc:13:ea:77:da:26:34:30:
85:71:e2:3b:37:b1:b2:5f:1c:01:98:ac:1c:93:14:
6e:27:7c:14:28:75:43:70:ea:2d:39:0f:08:3f:e4:
81:4d:ce:84:27:c4:42:2e:5c:4f:df:7d:3c:e4:3a:
6d:f9:cc:c9:8b:bb:eb:93:b4:02:b0:78:89:73:54:
2d:97:fc:11:98:97:17:de:5a:b8:bd:50:59:2a:09:
d1:04:b9:bd:2c:ed:02:d6:ea:21:2c:b7:6b:7b:1e:
66:bd:5e:68:64:83:28:6d:d9:7e:a9:ff:36:60:df:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:72:A8:EE:F2:A9:9A:93:B1:3D:5E:BB:1F:E6:B3:FA:23:1F:37
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1a:a9:5e:cd:76:3f:88:cd:be:de:62:c4:e7:19:1d:8a:23:
cb:de:63:cd:d9:24:72:81:75:cd:0c:68:19:42:6a:71:93:9a:
39:2c:2a:d2:41:52:f5:9d:fd:8c:19:cd:e7:4a:f3:45:6a:34:
fa:0c:b9:e5:db:d8:c2:94:6b:4a:b4:b0:34:5f:78:5d:11:82:
8f:e0:32:c7:e5:84:06:ff:07:88:c7:61:c1:89:0f:97:a3:5a:
90:28:2a:d2:c7:e0:46:e6:89:70:d3:b1:ef:c8:25:ca:7a:0a:
d5:3c:3e:3e:cf:bc:6e:59:26:89:6f:52:cc:6d:f0:c8:4a:ee:
c3:a5:f3:f7:15:e5:60:9e:6d:e6:e8:23:14:45:c2:78:dd:67:
81:7f:a7:b7:4d:6c:c5:37:46:78:0d:0a:9b:98:bd:04:af:0a:
21:01:22:3e:31:27:92:35:d4:3f:35:28:18:9e:61:0f:1c:06:
ae:e0:a6:56:fd:c3:84:59:e2:5a:d2:60:47:9b:b1:eb:5e:41:
1c:65:14:dc:10:4b:5d:10:47:14:9e:73:fd:81:c0:60:f2:3c:
0b:2e:67:74:f5:f5:b8:6e:6d:25:9f:ec:5b:bd:5a:eb:7b:a3:
6e:a7:a7:9b:52:e1:7c:ac:7b:d4:75:f9:21:34:eb:07:81:e8:
96:a3:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:43:40 2025 by rpki-client