Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: ViqYvf5OemPSNJon7Urv71EJVLyoTRksQuEaU1NNwHk=
Subject key identifier: 67:FB:F2:BC:46:61:08:88:EC:7D:CE:F1:A7:21:B2:F3:38:A9:F5:3A
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0196BC6E1B6D7BAF424C1E5512ADB641D620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0981
Signing time: Sat 10 May 2025 23:00:54 +0000
Manifest this update: Sat 10 May 2025 23:00:54 +0000
Manifest next update: Sun 11 May 2025 23:00:54 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: 88lz/gQXG/ePfh1lm+nJbFGBqmUTNOFBxRxwDp6KgXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:1b:6d:7b:af:42:4c:1e:55:12:ad:b6:41:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: May 10 23:00:54 2025 GMT
Not After : May 11 23:00:54 2025 GMT
Subject: CN=67fbf2bc46610888ec7dcef1a721b2f338a9f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:db:7f:5a:67:ec:69:af:f7:42:6f:13:72:
a6:d4:6f:f4:c3:da:3a:0c:7e:3d:e8:31:bb:f5:e0:
5f:fc:4a:19:0a:a4:d7:f4:2d:9f:4f:4e:d5:81:e6:
79:cc:72:4d:59:41:d2:ff:7f:09:6a:f1:a3:2a:31:
19:37:81:9f:4c:67:1a:8a:00:39:41:8a:ef:6f:51:
36:e5:b9:8d:77:c4:d6:4d:fc:85:2a:98:2b:83:f6:
2d:19:19:ac:f4:8b:f2:ba:bf:24:3e:9c:01:0f:e1:
6a:77:1b:33:86:51:ed:a3:7d:e5:ee:cc:ed:71:f6:
3c:8e:14:59:96:e8:a8:71:a9:a3:40:f5:73:a4:7c:
73:70:e6:5d:59:a9:3d:1f:f2:8f:11:8e:3f:be:3a:
61:d0:ac:99:04:3e:0d:b4:7c:ec:50:80:bf:c9:1b:
5a:08:3e:a2:69:ee:b0:db:9c:6c:40:8f:ba:75:24:
24:5a:c1:5a:fd:f9:73:d3:c4:c0:ad:cd:c4:56:4b:
62:78:ab:aa:77:6c:84:58:1d:2c:ee:33:68:6e:b2:
e0:87:9b:2d:e1:d0:ae:17:50:af:c9:43:79:b3:41:
c2:e6:ab:9b:ef:7c:23:21:de:b8:d6:3c:33:94:e7:
e0:96:06:47:e5:01:7a:97:7c:61:85:9b:aa:7b:d3:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:F2:BC:46:61:08:88:EC:7D:CE:F1:A7:21:B2:F3:38:A9:F5:3A
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2e:25:ec:20:5f:1b:ac:3e:52:45:ff:2e:5b:d0:65:c9:73:
78:45:6d:44:33:c2:7f:25:67:ba:b1:4b:bd:07:5e:7d:2f:b2:
80:2d:41:82:a4:d2:2c:7a:2c:22:71:35:a9:a4:06:52:19:ba:
0b:e2:b0:3b:ee:43:b8:73:e4:32:6a:36:df:f9:1b:11:e8:42:
b0:20:45:b9:e0:4c:68:d5:55:2c:ac:df:6c:c5:61:b9:c7:07:
44:da:10:9c:b6:c2:2b:7a:b5:1f:4a:d4:90:79:28:4b:6b:d8:
c1:c5:66:94:1a:f6:24:9c:5b:9f:ba:a8:49:60:57:6a:9f:03:
30:d4:e7:9f:04:00:bb:8d:20:32:99:4c:4d:a6:40:f2:c7:18:
45:50:fe:d0:fa:77:64:e3:f3:bb:e5:36:62:c2:1f:2d:f5:3b:
ce:5c:88:49:a4:72:4f:ef:f8:05:cb:fe:62:4f:8f:ed:4f:6b:
7d:8b:e9:5b:76:23:36:b2:18:f0:02:c1:97:d7:ee:7c:32:e8:
db:d8:25:43:79:4e:83:dd:e0:58:7b:24:c3:40:1d:20:49:3f:
db:e6:f8:e8:ec:b4:fb:9f:75:c5:93:fd:35:c4:4c:ef:4a:71:
c6:dc:1b:68:9b:ce:7f:3a:37:51:c0:b6:b4:e3:3c:a9:37:b7:
c9:62:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:32:04 2025 by rpki-client