Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: 1R6yTiiTQZe+u0n8riPTBjYgjq+uzZn5B/P/UUPm00w=
Subject key identifier: 99:30:B9:D1:6B:6B:3F:58:00:02:A5:38:8C:8B:E8:A6:16:9F:88:BF
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 0196A49C489746797D9BD617FD803AFA4ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0729
Signing time: Tue 06 May 2025 08:00:27 +0000
Manifest this update: Tue 06 May 2025 08:00:27 +0000
Manifest next update: Wed 07 May 2025 08:00:27 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: 8DzWhyKTRAMBd+wWrrpUHBtVTJ9pKq43vD9H2monDcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:48:97:46:79:7d:9b:d6:17:fd:80:3a:fa:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: May 6 08:00:27 2025 GMT
Not After : May 7 08:00:27 2025 GMT
Subject: CN=9930b9d16b6b3f580002a5388c8be8a6169f88bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:2d:a6:1c:64:f4:dc:0b:70:fb:16:97:ff:
40:6d:44:44:56:00:f1:fd:a4:44:88:b9:8d:b6:3e:
b1:6e:a5:c1:f6:aa:bd:62:2b:e5:ee:0f:47:a4:1a:
5b:6a:b0:59:5b:ae:e2:f0:4c:49:88:ea:6f:89:68:
86:05:bf:df:5f:8b:22:76:0c:f1:f8:d1:07:96:40:
f8:4e:2e:fe:52:e8:b7:8f:69:c0:fd:a5:b8:a4:3b:
27:5a:e1:5e:ac:3c:91:6d:4c:e7:9c:9a:20:4d:27:
2b:c4:fd:9f:58:b9:b3:5c:9c:44:5a:18:11:71:12:
cd:a5:2a:b2:0e:b2:74:99:67:e9:ec:c3:0b:fa:ea:
44:92:c5:8f:45:5d:f4:a6:fa:99:66:f8:05:3b:04:
34:f9:b5:e5:f5:2a:77:fa:5a:d9:17:2d:e6:e4:ea:
df:f9:c8:e9:55:94:89:bb:47:ac:42:cb:00:f6:ef:
d9:94:bb:a0:97:ec:71:65:b5:cd:f5:96:4a:df:24:
82:05:33:95:5c:29:3c:3a:c6:89:39:45:49:46:8d:
93:38:f8:73:cd:d0:7b:fc:be:aa:6a:ae:21:f3:d8:
0b:2c:50:83:22:65:04:12:57:c4:7a:28:45:34:37:
b7:a7:3d:ef:f4:dd:78:72:c3:21:aa:94:52:31:da:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:B9:D1:6B:6B:3F:58:00:02:A5:38:8C:8B:E8:A6:16:9F:88:BF
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:12:a9:cb:72:a7:8b:f7:db:01:3e:02:35:a9:63:b3:44:
be:3f:59:d5:41:b5:df:50:e5:0f:1b:1c:1f:04:b9:d8:d5:67:
5d:0b:95:2e:8b:67:cd:73:bf:2c:57:9e:a9:ac:c7:f7:8c:8e:
75:45:8d:fe:5c:dc:54:76:81:0d:fb:6f:2b:f5:77:b0:9b:ba:
45:19:94:3b:d7:76:e0:83:16:b9:dd:14:00:d4:dc:96:ad:79:
c6:80:7a:15:bf:04:d2:fd:ca:e6:5a:05:b6:d6:a8:2e:b5:34:
cd:30:7b:4d:c8:b6:46:75:75:de:ca:1a:23:f8:c1:99:0b:a2:
aa:67:1e:fa:ec:77:9c:09:ef:22:a2:bb:9a:21:fd:6e:d3:7f:
58:5c:50:36:6a:15:82:38:ab:ed:13:8e:b9:e3:08:c0:e7:3a:
81:0d:7c:61:67:4c:0a:f1:c4:12:04:19:21:3a:da:0f:3c:d9:
c1:6e:a8:60:43:1a:b6:2e:87:1a:de:12:16:96:61:7b:70:be:
f0:15:cf:22:c5:c1:bf:33:b2:e7:d9:75:5e:7c:8f:fe:92:ac:
d6:95:1c:09:eb:5e:d0:ef:07:34:53:39:ab:73:07:dc:9b:62:
34:4e:78:33:0c:68:bd:7d:49:78:a5:dd:df:e5:cb:47:c3:1e:
4e:ba:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:00:03 2025 by rpki-client