Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: ey5mjk/7LnyPdRejhhLUIUnD0Tg3DDhfexaguG3CJ68=
Subject key identifier: 9B:DB:C4:63:8F:90:6A:84:1F:CE:09:0C:BE:B1:6E:60:DE:8A:F4:67
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 0196A91DC3AC3330587FD03683C1E60DE034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 04E7
Signing time: Wed 07 May 2025 05:00:22 +0000
Manifest this update: Wed 07 May 2025 05:00:22 +0000
Manifest next update: Thu 08 May 2025 05:00:22 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: QLetiYcl/wN17lIi6PcdSiVSLtSLro/TcAMS+9s9gCc=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:c3:ac:33:30:58:7f:d0:36:83:c1:e6:0d:e0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: May 7 05:00:22 2025 GMT
Not After : May 8 05:00:22 2025 GMT
Subject: CN=9bdbc4638f906a841fce090cbeb16e60de8af467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:e0:08:dc:2d:c5:c4:19:9b:2a:8f:a8:dd:
17:15:60:b2:0e:1a:c5:4c:56:07:b4:b2:56:60:28:
4d:3d:69:43:ef:4f:1d:fb:a2:e7:3c:f9:ac:d6:3b:
d0:7d:24:2e:01:90:69:ad:89:ea:39:e0:86:f0:74:
e6:7b:12:9f:21:a7:55:0c:19:fa:f7:3a:a1:01:78:
19:74:30:c6:fe:24:4b:03:8b:8f:be:e8:eb:d3:dc:
60:02:91:94:7b:e8:c5:18:68:ce:b8:b8:26:9c:4c:
f5:f2:25:04:ef:84:01:65:00:8a:77:d0:d4:06:d0:
96:f3:bb:e6:f1:bc:77:f4:dd:3b:0c:b7:84:7d:3d:
d9:69:5f:82:69:d1:b8:9b:a3:d8:dc:25:3d:d4:ec:
e7:37:45:47:cb:14:f2:d1:59:65:21:20:1d:60:46:
2c:2a:fe:d4:df:7c:34:2d:5e:e9:be:02:db:64:94:
c7:43:fd:85:67:af:df:10:35:43:3f:96:99:f8:e8:
30:e8:c9:9b:cc:4e:5c:17:b1:7d:ac:bc:87:3e:ae:
6d:68:c7:ff:3b:c8:e1:56:08:2d:9e:a9:20:e2:3a:
aa:32:9d:ed:2a:d4:b2:cf:fc:d0:fe:1f:e7:b5:73:
ce:64:b5:db:2c:00:81:3f:b2:fd:32:df:6d:71:df:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:C4:63:8F:90:6A:84:1F:CE:09:0C:BE:B1:6E:60:DE:8A:F4:67
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f6:25:7b:cb:87:bb:90:a1:02:05:27:27:72:54:48:c2:84:
eb:3e:64:68:0c:bd:c4:74:52:13:bf:4d:cf:fd:bd:7d:23:fa:
c9:3c:a6:ac:fc:75:7b:7a:14:51:e1:c2:ce:10:c7:6e:03:b0:
26:27:ee:6e:b2:b2:62:2b:fc:4c:00:df:3a:68:96:8e:95:1d:
15:d6:a7:65:00:e6:4e:6d:98:07:76:4b:1c:3a:12:68:16:cb:
8a:d6:b2:6e:69:fe:5b:64:7a:97:b4:21:c2:6c:d4:20:bf:d9:
c5:2f:62:d3:a6:a6:b0:24:65:ce:17:d5:4e:8e:c3:c9:31:e4:
13:54:ca:c1:df:c6:ee:11:9f:56:a4:45:a3:40:ca:5f:91:e3:
81:b7:d1:ad:c3:8b:09:5d:b0:74:1c:f9:b7:38:85:d9:dd:8b:
4c:3f:32:64:ec:1e:bd:59:7e:b0:58:96:e3:30:2e:57:1e:43:
eb:46:08:f8:80:b8:5e:3c:84:8f:b5:5b:c2:bc:97:7a:64:28:
a9:9d:79:18:d8:92:c8:2f:4d:de:d7:ba:8b:25:67:f3:52:ec:
4a:d3:ee:03:d6:3e:22:14:3b:a1:9a:e9:1f:b9:4c:43:23:70:
60:5b:00:ac:64:86:36:7f:d9:7d:48:b8:c4:a2:62:89:5a:96:
4b:ad:93:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:33:36 2025 by rpki-client