Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: ul82DM2iyvyUfDoSgdiya5QLiHIHPN9GDV1wymNPhJU=
Subject key identifier: 2F:AD:3D:86:D2:65:4E:52:75:1D:08:17:D1:79:C3:03:8B:51:68:C5
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 0196A465C9EAF9E624356F587EBB8673C740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 07:00:56 +0000
Manifest this update: Tue 06 May 2025 07:00:56 +0000
Manifest next update: Wed 07 May 2025 07:00:56 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: 5seLCWgJ1UvvfS7BJxKXl10MY0B0XWn30Iz/O4xQuNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:c9:ea:f9:e6:24:35:6f:58:7e:bb:86:73:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: May 6 07:00:56 2025 GMT
Not After : May 7 07:00:56 2025 GMT
Subject: CN=2fad3d86d2654e52751d0817d179c3038b5168c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:bc:20:70:62:3a:c7:09:79:af:6d:1a:80:
7c:dc:79:c8:de:c7:b6:08:94:65:cb:ee:d7:63:b3:
c2:05:9a:86:65:2c:03:6c:e8:0b:49:e8:63:4c:81:
9e:57:e7:d7:1b:b5:9c:ee:db:e3:c3:14:57:b1:c9:
ab:90:c7:77:36:c6:52:b1:35:d5:5c:49:18:bd:44:
df:7b:21:7a:b5:38:7a:e2:1d:84:a0:d8:cf:25:a0:
a8:75:cc:9e:65:ed:73:73:de:a5:8d:7e:3f:a3:3b:
d3:42:e9:a6:82:fa:f8:59:fd:e7:be:3c:18:17:08:
af:5c:70:de:7b:92:2c:ac:fb:f5:48:0d:a5:dc:3b:
c9:b8:ae:8d:89:8e:7e:57:87:96:c4:a0:32:62:ff:
5a:ca:4e:f3:af:c8:73:65:75:0f:5d:2e:a5:1f:1e:
02:8d:70:19:fa:aa:4b:2a:bc:d8:a6:19:e7:e7:08:
4a:ec:3d:52:69:0c:ce:6c:25:0f:6e:9d:9d:d5:70:
3b:21:dc:f5:4a:fd:16:e6:74:7e:e8:7a:51:b5:3f:
77:dc:07:4e:06:93:d1:fa:0c:da:03:05:64:82:34:
92:99:a2:91:97:60:4b:6f:a7:7f:4a:be:81:b9:e7:
b9:c8:b9:14:87:7c:4a:68:e0:d4:7a:ef:b8:23:20:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:3D:86:D2:65:4E:52:75:1D:08:17:D1:79:C3:03:8B:51:68:C5
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:df:dc:61:e6:af:fc:3e:53:75:10:21:e5:14:7f:23:09:8f:
fb:94:61:52:66:07:e4:56:ec:fa:98:d7:25:b7:61:89:22:81:
6c:c2:f6:d8:11:44:75:6a:06:0f:1a:db:bc:df:1a:f2:44:55:
7f:03:3a:0c:59:97:72:44:99:60:f5:e1:4e:79:26:81:ee:93:
5e:91:d5:98:29:04:6c:ad:55:29:c1:08:53:a2:0c:a9:19:e1:
75:aa:9f:21:1d:5d:28:e9:f5:3d:17:31:73:f0:9a:0a:aa:9a:
35:b8:6e:77:33:b7:eb:8e:36:4f:2a:4d:05:8b:ab:a2:09:ed:
a6:46:48:73:ba:4b:4f:51:df:ad:b2:a1:f1:99:9a:50:c0:80:
d1:95:0d:16:41:29:15:89:4c:ef:c2:0b:74:40:f6:85:df:6e:
67:a0:08:de:52:12:21:09:39:a4:6b:b9:c4:94:e7:b8:1e:a2:
0d:64:58:f8:ab:f8:55:4e:a3:4d:05:31:60:52:af:d7:f6:47:
1c:3e:39:48:2d:65:d8:c0:2b:72:d7:a9:f8:ac:97:25:81:6e:
38:b9:55:9b:7e:19:48:0c:10:db:6f:26:81:3e:bc:03:e7:c0:
14:f3:64:99:dd:75:d9:a2:2d:b5:a3:cc:f9:b2:da:47:bd:db:
cd:05:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:56:00 2025 by rpki-client