Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: Y3Zf2PafUuZcFa5uSs9lWU2ETQuJkYkmn5gCljMBTb0=
Subject key identifier: D4:C4:D2:32:C8:2E:02:84:1F:5D:5A:20:96:03:28:52:A9:5B:13:10
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 01969D87979974F512DC04432466DEF8AF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 02C6
Signing time: Sun 04 May 2025 23:00:31 +0000
Manifest this update: Sun 04 May 2025 23:00:31 +0000
Manifest next update: Mon 05 May 2025 23:00:31 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: ZXwYv3mVogkoSqc/nxAK1gtElRcqbgZloLN8JpR4vs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:97:99:74:f5:12:dc:04:43:24:66:de:f8:af:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: May 4 23:00:31 2025 GMT
Not After : May 5 23:00:31 2025 GMT
Subject: CN=d4c4d232c82e02841f5d5a2096032852a95b1310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:7e:27:87:18:d3:08:68:46:e2:be:a6:45:
e7:05:42:35:78:24:a2:24:b5:ed:5c:af:6e:c9:73:
14:44:9d:06:b7:19:00:e9:16:e9:31:b5:cf:71:6e:
b2:e7:27:58:e6:72:7b:d1:a7:60:a0:84:1a:e2:a1:
55:7c:12:1f:76:0a:49:8f:ed:76:ea:68:0e:0a:61:
9c:f4:f4:74:e0:c8:9e:19:eb:fd:52:72:b9:b0:1e:
59:e5:2f:da:a4:5d:39:d2:0b:3d:91:57:d9:2f:42:
eb:68:b7:8a:b1:39:bc:f8:fd:8a:07:3d:ad:77:f7:
13:11:ef:ca:93:fe:34:fb:fa:15:26:2e:26:1e:08:
cd:e4:cd:26:f3:34:4a:6f:cf:5a:4a:ac:c5:87:a6:
12:87:8b:78:42:55:26:44:d4:26:84:8f:24:0c:06:
86:11:75:e0:3f:db:29:25:f0:ff:14:1c:1d:2b:72:
fa:cd:6b:ce:60:cd:9f:9d:88:1c:03:3b:b6:97:82:
30:f0:23:10:8b:05:a1:c3:3a:b8:bd:b4:bf:f0:f1:
93:2f:f9:54:4a:af:b4:d1:a8:5b:78:5d:d8:32:99:
5a:b5:bc:c0:59:30:04:d1:89:06:45:6a:d8:56:4e:
c9:48:39:82:24:b5:a6:b6:6d:de:89:b6:bc:95:54:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C4:D2:32:C8:2E:02:84:1F:5D:5A:20:96:03:28:52:A9:5B:13:10
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:ea:16:df:bf:73:96:0b:3a:5d:d1:e6:0c:7a:4f:a2:dc:
a6:e7:c9:af:ab:c7:c6:c2:c5:5f:90:28:f0:2d:51:96:ac:62:
73:0b:dd:42:62:45:06:ee:1a:c6:e1:32:27:e5:67:3e:68:69:
e3:fb:ad:8e:48:4f:46:ea:2c:ac:e6:43:8a:82:0d:7f:5b:f4:
12:87:dc:04:a7:32:99:b3:ea:fb:4c:a2:6e:35:c4:76:54:7a:
85:97:1f:7e:61:55:11:4a:7a:c4:b9:d9:4d:b3:58:24:a9:68:
69:53:5a:1d:64:34:26:36:9e:d6:64:7e:f8:43:e6:8b:a4:0d:
6a:f3:78:ac:5f:d4:8e:4f:e9:00:0d:65:04:9c:6d:2d:87:2a:
cd:43:1b:e1:09:97:38:c3:65:f6:86:57:29:9e:9e:f1:65:bc:
d2:86:5c:48:09:42:d6:96:2b:1d:51:5b:cf:bf:48:58:38:3d:
f4:39:fc:3f:fb:6d:25:19:48:60:75:3c:0e:c2:92:b9:5e:13:
a0:16:30:3c:54:7d:e8:0f:48:d1:16:b0:a1:13:51:59:4a:b9:
f8:9e:ec:b5:19:f8:ca:a4:b2:5b:12:1d:79:c8:ba:d9:e0:7e:
14:2c:54:3e:8a:18:13:f0:45:c4:d2:9d:54:4b:b0:16:48:18:
41:aa:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:03:52 2025 by rpki-client