Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: ytN+reQ9nNReT4gflKfkT9wzKKNJAjg2Mrn9rN7dZGw=
Subject key identifier: EB:2A:4D:09:45:99:4E:90:EC:94:E7:52:A5:AF:DD:CC:5C:CF:69:D3
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 01969F3F1A91D746A67AB6027FAC73FD997C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0E61
Signing time: Mon 05 May 2025 07:00:34 +0000
Manifest this update: Mon 05 May 2025 07:00:34 +0000
Manifest next update: Tue 06 May 2025 07:00:34 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: FbgEuOrqQ+4gK+1VCAv2mZfvsAFaYeuHrtB+z9lJk5E=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:1a:91:d7:46:a6:7a:b6:02:7f:ac:73:fd:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: May 5 07:00:34 2025 GMT
Not After : May 6 07:00:34 2025 GMT
Subject: CN=eb2a4d0945994e90ec94e752a5afddcc5ccf69d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:67:57:66:df:66:67:c0:67:f2:43:14:e9:
b6:18:e3:2d:17:d3:a0:e9:f6:a7:77:5d:1c:af:a5:
bf:53:9a:a4:00:9a:dd:c4:67:c4:ac:39:e4:19:70:
2d:d7:8a:4a:43:ab:ef:7e:7c:b1:7b:06:05:16:c9:
b3:ec:7f:c1:bf:9a:6d:bf:66:7c:0f:15:08:20:dd:
05:8c:73:c7:3c:52:a8:6a:76:6d:f4:21:11:f7:66:
12:a1:7c:1a:09:49:ef:ee:43:e3:54:37:76:99:58:
45:19:a7:48:06:c8:1a:1d:60:2a:b9:44:cc:21:4c:
1c:e7:6b:9c:75:89:97:1f:bc:7d:45:83:eb:54:91:
a7:91:a5:30:4a:fc:e3:4b:7d:d3:fd:3f:e6:0d:3b:
f8:ff:42:9f:0d:c5:46:62:d3:e1:7a:f9:c8:0f:dd:
20:a6:96:53:9f:9a:ca:0b:0c:6b:a2:be:1b:29:ac:
b0:14:af:c0:e4:28:5c:fd:b0:e1:7d:88:1a:af:1c:
76:34:71:57:aa:05:77:52:fc:84:8e:33:a1:9c:93:
4d:70:3e:03:00:a4:59:fb:c8:d8:07:d7:d0:11:d2:
e0:4d:03:9c:3d:40:24:ba:61:8d:64:6b:fe:e0:9a:
94:fd:9e:76:de:3d:38:9b:46:f3:d2:7f:b6:ed:7b:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:4D:09:45:99:4E:90:EC:94:E7:52:A5:AF:DD:CC:5C:CF:69:D3
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:19:90:12:6d:8b:80:5c:a6:34:5b:10:37:ae:37:8d:60:
6c:5f:8f:59:d4:60:83:c9:bd:84:e1:72:d9:33:a7:9a:14:36:
c7:ee:87:5d:01:d1:8c:9f:9c:3e:4b:12:c8:c3:42:bb:e5:b4:
d7:cb:eb:f7:93:05:13:7e:8b:6b:bb:c1:48:9b:12:cd:e4:57:
ed:a9:43:30:b8:b1:6d:4e:36:22:e9:d1:c1:8f:d3:64:a9:5c:
82:01:1c:3d:16:6c:27:a2:26:e1:7b:73:42:a2:b9:4b:8a:5a:
c2:0d:11:b7:df:b6:1d:d9:32:33:47:48:62:b2:4c:d6:c6:3e:
68:08:08:11:94:8d:36:ed:3f:ff:ef:f3:f1:73:f8:83:15:97:
5d:3e:93:76:12:3e:90:2e:7b:f8:3d:8d:15:c7:a0:8a:18:1d:
69:ac:f5:db:63:30:3d:54:1f:ee:02:65:e9:f3:aa:c1:b7:b4:
89:1a:eb:ce:82:7a:53:b2:14:dc:5a:f4:21:ab:e8:83:91:66:
29:e4:5e:7d:e9:bf:b8:10:7f:0b:03:98:a0:ef:52:f1:63:75:
c0:b1:92:8b:4f:70:ef:89:7c:a1:96:9b:c2:63:2d:67:f8:b4:
dc:38:04:b1:39:ec:78:96:51:54:33:98:48:d5:3c:07:41:09:
6e:60:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:29:34 2025 by rpki-client