Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: jer1pV6CQC2LEZpyK/0tzPKwX04RreVS975mWPsALP0=
Subject key identifier: DF:EF:6B:59:0A:BA:5F:1A:A3:83:6D:7E:CF:02:BF:30:F8:A3:1F:8C
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0196B6A24A82770FC2E5A1909484BD4A07E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0C61
Signing time: Fri 09 May 2025 20:00:11 +0000
Manifest this update: Fri 09 May 2025 20:00:11 +0000
Manifest next update: Sat 10 May 2025 20:00:11 +0000
Files and hashes: 1: N6I7GkRnTLkodakf220Jx4FEOJ8.roa (hash: 5pNB3KiUL7LD9fJaUhiHJ+4Sn0d2T6l1b/8wj0M4PyI=)
2: Notf8xfdCB98W17uF8DyEZXaKD4.roa (hash: Php02ygExlsiQ8rFpeIHuq+3hV7Ago1mfAxcB+vPXnY=)
3: PAVyRbFaEEoOWTl92A8TbczIVRA.roa (hash: exAiJS6L6PDn4Agqv44VIUH/UIoW7ahABMr/MK9GM9o=)
4: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: XxpG8jrul+bFQywRSM5KLHK2jmv0FS+gdxW2TgPdruc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:4a:82:77:0f:c2:e5:a1:90:94:84:bd:4a:07:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: May 9 20:00:11 2025 GMT
Not After : May 10 20:00:11 2025 GMT
Subject: CN=dfef6b590aba5f1aa3836d7ecf02bf30f8a31f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:03:e8:29:0b:bd:13:ce:22:52:8c:46:fe:
87:51:4b:2d:79:26:b3:c9:f5:c7:68:fa:e0:2c:98:
cd:46:95:cd:3a:49:c4:9f:45:69:3b:f6:b1:6c:b5:
e2:98:ff:c4:ef:45:9c:88:6c:b9:9f:b1:a3:5c:b6:
9e:e5:b9:44:8c:47:28:f6:c7:44:6a:77:72:b8:3a:
ce:d9:47:2e:d5:bc:2d:ba:41:84:e7:fb:c7:43:06:
d2:95:df:24:b1:48:fa:b2:25:a8:15:9f:5e:8c:b7:
d0:c2:3a:e6:2a:bb:b9:3b:4f:ff:ed:1e:2e:a0:89:
03:66:0b:db:18:df:1e:81:6a:b9:c6:25:2a:fa:a8:
dc:8c:2f:b1:73:52:91:9b:31:2e:23:04:f8:a2:bf:
a6:65:b1:43:42:3a:78:4d:d4:3c:b3:eb:30:d4:56:
99:ca:5f:f1:90:35:64:1f:05:fa:a1:f1:b6:be:c1:
4a:32:f0:ca:49:d7:47:ac:2f:f0:f7:90:7a:86:23:
20:0a:b4:2d:34:e8:a2:3b:9d:f3:eb:42:c2:a2:8a:
30:3b:c8:11:b7:e0:49:75:53:b7:4e:b8:92:e1:a8:
73:b1:8f:77:70:13:27:67:63:f0:b1:1d:41:12:c6:
67:af:e0:69:db:ce:6a:20:5a:86:22:c5:c3:70:b0:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:6B:59:0A:BA:5F:1A:A3:83:6D:7E:CF:02:BF:30:F8:A3:1F:8C
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:29:9c:15:2b:dd:0f:a4:27:d5:1a:17:04:1f:d4:b4:37:bb:
cd:11:bd:a2:90:f4:11:33:38:27:c3:20:56:5e:e7:4f:a7:98:
b4:8a:43:75:b6:ff:06:6a:1c:57:1a:53:c9:99:8c:2d:07:fa:
90:34:f3:3f:c2:75:4d:5b:3f:ba:69:b7:18:ae:e6:4e:0f:fa:
f5:14:51:c5:52:b0:04:32:86:45:fe:9b:a9:f3:a1:2f:38:db:
d4:3a:43:ee:bd:5b:34:2e:44:01:d6:3b:3d:e1:97:97:e3:05:
84:0c:b5:7a:1d:42:65:f7:a0:37:8d:d1:ab:db:96:c4:2b:a5:
7c:7c:99:21:b6:7b:d7:e7:54:cb:99:4b:43:50:2e:a6:26:50:
17:d6:89:e3:66:5c:63:8f:47:c5:e3:ac:52:80:7a:31:75:8d:
61:45:46:f2:3b:47:b2:f2:32:2e:03:98:a0:fe:cd:50:02:e0:
8d:d2:b6:1b:b0:4c:de:e4:0a:60:68:28:05:68:c1:62:55:e4:
0c:81:4d:2d:87:9d:9d:5d:d9:74:43:9e:82:59:25:0c:02:fa:
d1:54:25:f8:81:a1:a6:1a:91:2b:17:80:51:00:b6:4a:1e:00:
1a:38:3e:8b:96:74:63:52:e9:17:20:ca:2c:18:3a:6d:75:f0:
40:1c:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:58:04 2025 by rpki-client