Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: 9ucN5+YOV4nyr3sQkR0sH0wWdr8tQsds0G0oQFCf9bU=
Subject key identifier: 51:AA:5B:5A:53:27:98:48:87:05:AB:CD:AF:D9:E6:D5:3E:6B:B1:59
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 0196CBE12E0AE856DC4A0EA32389E732F19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 23:00:54 +0000
Manifest this update: Tue 13 May 2025 23:00:54 +0000
Manifest next update: Wed 14 May 2025 23:00:54 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: u2WtJBbas91kLnOpbnwi7XFfucacmTuNdC22a8gTBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:2e:0a:e8:56:dc:4a:0e:a3:23:89:e7:32:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: May 13 23:00:54 2025 GMT
Not After : May 14 23:00:54 2025 GMT
Subject: CN=51aa5b5a532798488705abcdafd9e6d53e6bb159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:07:64:56:de:2d:26:da:73:8d:10:e3:2f:
b5:b3:50:64:9a:32:2e:ac:74:e0:d9:a7:5a:e5:54:
9c:27:1d:fd:e8:05:54:f9:a9:95:6a:f2:16:e2:a4:
71:49:39:71:e0:0a:1c:ee:27:2c:c2:2d:15:26:81:
20:f2:7a:53:74:84:cc:32:88:8a:0b:97:f3:88:94:
eb:eb:3a:3e:64:f2:5f:52:80:7c:58:33:5e:b2:0a:
af:40:ff:0c:69:4c:fe:76:55:54:a0:7e:3f:77:88:
09:61:0e:e5:e5:84:6d:73:8f:c9:38:7b:51:2c:43:
a2:0c:96:be:36:60:cc:e6:13:cc:35:95:73:ba:e5:
c9:96:87:e0:a7:95:a1:48:a3:cf:21:5d:bb:16:56:
85:2f:67:22:11:d1:e1:a3:3a:5a:bf:89:4e:bc:08:
28:8e:ea:94:2e:22:26:c2:4f:2c:dc:ad:0b:05:f7:
3e:9f:0d:6c:a9:c8:df:0e:4a:89:e0:13:f5:c7:ef:
54:63:13:d4:a5:c7:bb:66:61:7f:ab:cd:90:3d:9e:
f0:fd:d8:e9:3a:f2:65:aa:d8:74:a0:68:ae:2e:63:
6f:9d:31:38:32:d8:c0:1d:f1:e0:02:d2:84:ba:71:
7b:eb:a6:f1:2f:35:00:f1:af:09:4e:3d:01:8d:68:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:5B:5A:53:27:98:48:87:05:AB:CD:AF:D9:E6:D5:3E:6B:B1:59
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7c:a6:f4:d6:d9:09:d1:d4:31:0f:b1:53:9d:9e:39:53:14:
ac:0e:d2:0b:dd:b0:e9:33:6d:de:06:1e:c1:30:ed:67:41:a1:
1f:49:cb:10:ae:d7:7b:ce:ce:9f:69:dd:bb:a8:47:87:b3:95:
89:72:fc:e3:2a:f1:30:61:9b:06:08:66:4b:61:ba:96:67:a7:
a9:3b:7a:4f:63:b9:bc:3e:44:dc:8c:45:33:a1:3f:76:10:24:
b8:dd:da:b4:47:98:bb:35:8d:bd:60:fc:36:2e:a8:e6:e4:cc:
94:b5:23:b4:9b:ba:b1:c0:45:b8:2b:06:84:f8:91:f6:6f:32:
93:9c:ae:09:5a:0f:da:4d:8c:82:1f:ef:0b:0c:64:cf:48:d1:
d8:bc:e1:2e:2a:2a:4c:2d:15:17:40:99:62:2b:6b:34:27:50:
5c:ee:f9:bf:47:4c:94:6a:5f:d0:ce:bf:6c:2d:fc:44:ab:a2:
86:61:a8:b8:71:f3:d6:94:ac:f7:ba:25:ab:33:fd:84:60:2f:
16:ac:73:82:15:81:74:3d:8b:f4:8c:9c:aa:a3:c7:6e:86:3e:
76:72:23:a1:f2:7c:d4:aa:3f:6a:9f:c9:33:5d:b1:00:ba:f1:
e9:ab:62:2d:20:83:f4:db:fd:1a:ce:40:59:70:40:54:4c:42:
54:cc:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:46:20 2025 by rpki-client