Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: mRaHXtNacooVvVyCnjE9IzxdBOBKrcp7K/QibbiVtPE=
Subject key identifier: FD:47:5C:B9:E6:C1:D7:7A:68:E2:10:E5:99:34:05:47:DC:62:36:07
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 0196B36A8CE908875FD93A56AE03D075ECF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 05:00:26 +0000
Manifest this update: Fri 09 May 2025 05:00:26 +0000
Manifest next update: Sat 10 May 2025 05:00:26 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: JXmbSEon2Zk2qUgcxp1p2me0I7TE/M9VFJDu1KXExpw=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:8c:e9:08:87:5f:d9:3a:56:ae:03:d0:75:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: May 9 05:00:26 2025 GMT
Not After : May 10 05:00:26 2025 GMT
Subject: CN=fd475cb9e6c1d77a68e210e599340547dc623607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:17:9e:e2:5f:4d:94:a8:c5:25:53:33:19:
6c:b5:f7:73:55:f9:2b:0b:3c:a4:60:b7:35:f7:12:
0d:a1:47:ab:c0:e5:8e:fa:70:a0:9e:0e:ff:77:26:
d7:89:6c:71:bc:ec:c1:84:e3:09:05:1c:35:8b:95:
4f:e1:33:cb:4d:fd:92:8e:40:3b:59:a0:46:84:72:
c4:d3:aa:d1:0a:fd:e8:6d:e7:51:c1:ca:e6:9f:f9:
d6:09:96:34:73:3f:43:cf:3b:1d:ff:c6:27:1a:b6:
e0:8d:3d:f4:ff:f8:34:bc:16:e9:7c:9d:fe:05:0e:
07:2a:5d:cf:2b:0e:dd:23:ce:35:83:e9:3a:a0:96:
9d:0a:c6:64:b5:ed:5d:31:d7:e2:97:4f:87:61:8d:
51:33:08:c0:15:dd:8a:f0:8a:7f:e0:ec:cc:87:c7:
5c:75:9f:ee:2f:e5:0c:e8:65:4b:ef:06:38:4f:95:
a5:df:22:06:d2:1d:8b:b5:90:58:5d:08:86:39:64:
7b:c0:5c:b5:35:87:79:99:85:6f:8b:4e:4a:60:ce:
9e:68:09:c6:ce:c7:67:49:12:1c:bf:c2:59:a3:57:
af:63:dd:cb:21:f4:e1:3c:af:15:7c:db:d6:12:a9:
ab:5d:cd:51:d1:47:3a:74:1a:cf:b9:a4:fc:ca:f0:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:5C:B9:E6:C1:D7:7A:68:E2:10:E5:99:34:05:47:DC:62:36:07
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:5f:fc:64:5b:ba:60:43:4f:d7:47:db:ec:a4:f9:bb:cd:
af:d2:87:b1:60:56:d3:42:d0:d7:5b:cc:ce:a3:aa:12:c5:2a:
74:8b:8a:0a:7e:eb:bf:b7:bb:ff:08:9f:61:85:bd:46:ae:93:
65:53:1d:a3:60:c5:22:ad:f9:2d:69:1a:27:cd:3c:c7:a8:96:
97:a0:bf:6c:16:a2:33:6f:b7:63:97:c9:ea:3e:47:95:0d:a1:
f0:35:8b:65:36:fc:da:09:c3:95:6c:50:67:60:6d:8c:48:7e:
8d:4d:4f:da:79:66:87:9c:3f:48:c3:1d:b5:12:dd:f2:a7:61:
2e:9c:92:55:ee:34:9d:6b:22:d9:38:ac:1f:70:72:20:7a:5b:
e2:35:0d:ae:12:8c:b4:16:9f:be:28:5e:30:b3:c3:d9:ca:ad:
15:32:1d:9c:3d:38:76:fa:59:b3:7e:f0:ba:54:95:ee:4c:3a:
20:5c:0b:2f:e7:a5:ee:dc:11:d5:9d:55:cf:7b:c6:55:83:e1:
2d:e4:d8:fc:90:6a:92:0c:e8:cf:a8:35:f5:8a:02:6c:56:86:
ff:73:09:f5:30:1f:cf:52:04:06:58:ad:bd:2c:52:24:71:13:
0e:04:7a:eb:ce:6d:e3:87:06:60:24:8e:6f:03:a2:cc:bc:21:
34:4c:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:14 2025 by rpki-client