Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: MvibMvRHu+XDVqc+QneXg3ahlj4Ndd/HYcL+cQr4Hvg=
Subject key identifier: DC:53:40:12:47:DF:B9:77:3B:A6:84:88:0C:0E:8B:19:0A:BA:8D:2D
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 0196B85A3ACB74C64E7768C5C450A76B9DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 053C
Signing time: Sat 10 May 2025 04:00:43 +0000
Manifest this update: Sat 10 May 2025 04:00:43 +0000
Manifest next update: Sun 11 May 2025 04:00:43 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: Hwj7RE9eliidgQiNDy5BFXJ5P7gcF+osZHrhnDBK10k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:3a:cb:74:c6:4e:77:68:c5:c4:50:a7:6b:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: May 10 04:00:43 2025 GMT
Not After : May 11 04:00:43 2025 GMT
Subject: CN=dc53401247dfb9773ba684880c0e8b190aba8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:cf:f8:48:3b:47:c6:e6:33:09:19:e7:3f:
18:50:97:46:16:6b:33:7e:b0:67:5a:4b:42:7b:53:
40:dc:96:4c:42:29:f7:b0:2a:88:53:d0:30:a3:7a:
03:f7:85:0b:88:cc:af:5b:43:61:57:31:22:42:fb:
c1:55:6c:25:36:f0:2c:f9:63:c5:31:9f:ef:07:48:
30:74:2c:c7:ab:b1:37:d4:63:a6:85:f4:ea:7c:40:
b7:5b:6f:17:1e:40:6f:d3:a4:13:bd:f7:11:5f:e9:
5b:77:4d:7f:b5:e9:5d:da:8d:ef:02:37:5a:0e:f2:
2d:a5:09:8e:d1:ff:71:ed:5a:33:c0:4f:67:89:ce:
7f:f2:d7:bc:15:06:92:cc:d3:ad:d4:15:46:95:c0:
d0:8c:a1:cc:b8:4f:e9:c9:5c:37:7f:c0:91:ff:4a:
4e:f5:cf:ff:42:cc:56:47:65:82:db:46:5c:f6:69:
1f:28:98:c5:af:eb:e2:13:08:4a:41:4e:33:f4:84:
14:75:b7:b4:a9:6d:07:9c:f1:96:b5:83:34:a6:e2:
da:c2:00:b6:09:57:ff:22:26:d1:98:a5:0a:a6:d4:
e7:db:d9:53:a1:0f:e0:0d:d0:30:0b:20:22:b1:91:
d8:ac:27:e1:b0:35:a3:39:8e:6f:29:14:55:b9:63:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:40:12:47:DF:B9:77:3B:A6:84:88:0C:0E:8B:19:0A:BA:8D:2D
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:39:1e:f1:34:b1:4d:ac:07:cf:94:83:18:8d:c9:d8:de:d1:
8a:8f:bc:9b:61:bd:7e:1f:87:b1:9b:3e:cb:7a:98:26:29:f5:
7f:17:6b:b6:53:3c:35:fb:ba:fd:da:70:82:b0:f1:f3:a2:e7:
a9:83:56:65:b7:bd:4b:bc:ee:a8:0f:74:c0:da:5e:49:81:2a:
b6:a8:2f:b0:3d:c2:9b:6f:53:0c:b3:8f:5a:8f:48:c5:09:e8:
4d:6c:8a:1f:86:dc:f8:24:2a:b3:98:33:64:36:8a:76:49:df:
02:6d:b0:6e:f5:a5:37:03:fe:2a:f1:90:e9:35:f1:01:20:6d:
48:d2:86:b3:1f:b5:eb:91:df:a4:38:8c:70:19:4f:16:3f:9d:
65:d6:04:db:3e:8f:16:f6:f7:28:c2:a5:dc:c6:f5:af:f3:0c:
e1:69:df:a6:b1:ed:b1:61:1a:86:4d:8a:fc:c7:67:08:aa:d6:
a1:ce:f8:90:d0:10:f2:bc:3e:15:74:82:8a:a6:aa:f8:f3:4a:
13:2a:38:cf:2f:97:75:dc:5b:5e:3a:1d:52:a1:7e:91:38:8e:
3b:cc:7b:5c:84:49:0e:00:3d:69:97:a0:f2:9c:0d:46:78:cc:
29:0c:e6:9b:a3:cb:c3:6a:63:1f:f7:f5:ef:15:3c:72:9d:b5:
ab:10:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:21 2025 by rpki-client