Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: iCjNlvZZ3PjAVRUuiMqgSBachekIpBdSSPel2sc4XkU=
Subject key identifier: A7:47:E3:ED:A8:4F:61:2A:E6:55:08:CF:9E:DF:E2:C2:8B:2E:58:A2
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0196A42E5881593806D8DA4271B9CA84E501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 06:00:22 +0000
Manifest this update: Tue 06 May 2025 06:00:22 +0000
Manifest next update: Wed 07 May 2025 06:00:22 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: XpgxefCYMPtDtRMBcotoshSiXwIwqKEvWqPxvLpnHUg=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:58:81:59:38:06:d8:da:42:71:b9:ca:84:e5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: May 6 06:00:22 2025 GMT
Not After : May 7 06:00:22 2025 GMT
Subject: CN=a747e3eda84f612ae65508cf9edfe2c28b2e58a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:fb:ad:02:12:30:da:d5:8b:ff:25:38:8f:
30:d8:15:60:e2:b0:10:54:67:25:2e:ee:41:0e:09:
1b:b5:34:15:07:94:26:95:6e:82:ee:93:c1:cd:8c:
2f:6d:ad:9f:0a:66:ef:ba:e1:e5:d9:06:e5:32:c2:
d0:3b:fd:ca:ff:5b:1b:70:5a:06:ba:51:70:e9:37:
ea:97:7e:63:eb:a8:3d:72:97:63:ef:4d:98:12:e5:
d3:17:86:c0:7a:a4:2e:2e:0d:e8:15:15:2d:1e:12:
94:12:1e:6b:49:c4:8e:4f:20:b3:47:17:55:9f:a9:
3c:d6:07:d4:a9:49:7b:35:4b:ce:32:df:fe:74:e7:
83:ab:4b:fd:f3:c1:e8:db:64:7e:b5:0a:da:c0:5d:
97:4a:6a:92:9a:c9:b4:ed:b0:11:10:8c:a0:77:2d:
54:73:47:2b:59:b2:15:52:f4:29:3f:84:b5:f6:0d:
ec:cd:f1:90:e5:98:30:6b:ef:f9:48:0c:b6:19:d9:
29:73:8c:4c:bc:55:4f:84:e5:49:ea:19:b2:09:f0:
8f:b9:7a:8d:8c:19:cf:71:7b:49:68:75:99:19:ba:
24:8e:0a:ef:f3:e7:95:11:c9:ee:ea:bb:6c:e6:c5:
7f:89:13:40:57:32:d4:03:c8:72:26:90:4a:63:3f:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:E3:ED:A8:4F:61:2A:E6:55:08:CF:9E:DF:E2:C2:8B:2E:58:A2
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:36:41:20:b3:84:8f:55:26:95:67:2f:31:d2:a1:9c:62:7b:
3c:ab:01:ac:37:b7:40:ef:02:0e:ab:96:60:79:58:a4:f9:bd:
9e:60:9a:9d:76:09:2c:1e:ad:fb:a3:56:53:cd:57:a7:b5:ff:
94:0c:43:52:b3:c0:7c:95:92:86:3c:88:ef:88:54:92:e5:b4:
bc:af:e7:fc:3d:d7:82:3f:d1:90:25:13:39:e9:ac:43:09:3e:
58:b4:49:1a:d5:36:53:d8:c5:5f:cb:cf:23:3d:49:a5:fd:25:
57:ba:d1:e1:15:a7:3c:6d:fa:20:cb:36:f1:5d:f8:95:64:5c:
ee:ad:fc:82:fd:8f:47:ca:2e:88:6b:18:7f:af:3f:25:b6:a2:
90:68:0e:25:ac:31:99:84:42:01:12:56:9e:03:cb:a8:7b:29:
39:58:75:52:6c:60:71:df:fb:0f:2b:9a:48:a3:26:8d:35:55:
e4:59:e9:78:56:8a:7c:bd:3f:82:af:58:5d:b0:4e:65:5d:c5:
de:96:d8:4c:56:c7:c7:04:71:3d:fe:f2:8e:98:4a:c0:03:45:
92:cd:8f:de:d5:55:25:38:c0:b2:8a:7c:88:fa:b3:04:b6:b1:
43:e4:ea:70:0e:10:5f:50:f2:40:8e:74:03:22:26:fe:6e:6f:
a5:d3:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:18:03 2025 by rpki-client