Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: /cxwHsjCqbyhGcUpsPV98WIeZ9KUOkelr0JcwpBw0Kw=
Subject key identifier: A2:1C:5C:3B:2F:C2:32:A9:0D:E5:06:F9:01:BD:2F:D7:9F:82:6A:36
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 01969E63108C2F1E8D86252DE6576C6A44F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:14 +0000
Manifest this update: Mon 05 May 2025 03:00:14 +0000
Manifest next update: Tue 06 May 2025 03:00:14 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: rP0EA1xgJ8TNqrPrlzNmpAFPlg0qF2SyLps0dGZX+P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:10:8c:2f:1e:8d:86:25:2d:e6:57:6c:6a:44:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: May 5 03:00:14 2025 GMT
Not After : May 6 03:00:14 2025 GMT
Subject: CN=a21c5c3b2fc232a90de506f901bd2fd79f826a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:3d:d0:2d:22:47:ce:05:90:dc:b9:a8:1b:
7c:68:b7:31:30:d6:c6:fd:4d:aa:ec:ef:16:0d:0a:
24:62:c7:d4:f6:e4:41:2c:63:58:36:ef:9e:17:d8:
50:cb:7c:86:0d:e7:82:19:76:13:42:14:29:81:14:
8b:41:cf:b7:e9:70:73:82:ef:d5:2d:b9:b2:05:97:
1a:40:bb:9a:f2:bf:26:b0:5a:af:c5:93:38:54:24:
05:94:73:e0:99:ce:8d:cf:da:01:9d:ea:c8:1b:94:
2a:f5:8e:d8:bc:52:26:3e:d3:b4:0d:cf:58:89:fa:
f8:c1:04:04:07:49:32:1c:05:ae:7c:7c:e6:46:dc:
93:f1:63:e4:e9:c3:dc:28:c1:61:c3:0d:eb:89:2c:
58:2b:7a:32:a6:05:f1:3a:97:0e:16:ba:06:d4:8d:
96:09:c4:6f:6e:c3:3e:22:00:83:f3:8f:08:35:27:
1c:ba:34:84:bb:09:d6:52:3f:67:0b:76:24:ba:eb:
4b:bc:81:bd:a7:35:79:71:65:82:f6:d9:e5:ce:2a:
30:39:b9:d5:33:05:a6:45:1a:0b:f8:42:10:93:e6:
1a:14:b9:04:57:60:5c:36:df:27:60:52:48:18:83:
63:ca:e8:2b:7e:da:c2:0c:5b:83:fc:e4:43:16:12:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1C:5C:3B:2F:C2:32:A9:0D:E5:06:F9:01:BD:2F:D7:9F:82:6A:36
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:07:86:53:be:8d:e8:84:49:fa:5c:e5:1e:5e:d3:15:f3:
6d:90:4c:8f:71:1f:f2:f2:d8:b6:86:ca:83:48:ee:31:ce:2d:
12:fd:bf:0f:c7:24:ec:07:c5:c9:fb:a9:0f:24:c1:a9:f9:2a:
73:ff:69:3d:50:e4:65:c6:89:b8:27:22:2e:0f:7b:b7:9c:3c:
52:d8:55:47:3b:9c:f3:9c:4a:3f:fd:25:da:e1:77:e2:65:71:
08:e1:47:f0:60:1d:b1:24:7c:21:2d:df:36:c1:16:03:54:6f:
4b:41:c4:ce:c9:09:45:c5:b0:71:79:b0:a0:a1:b0:d1:9a:81:
ff:fd:b6:7d:6f:00:8b:a4:16:93:96:11:57:06:cc:3d:66:d9:
af:85:08:22:be:63:3b:a7:16:20:a1:ba:d8:fe:72:5f:3a:7b:
b1:36:de:d2:7d:cf:82:c6:4e:57:96:e3:4d:f5:9a:c8:29:f0:
9c:47:3c:36:66:fb:5c:1f:aa:3d:f1:cd:62:ef:9b:c7:a4:f1:
12:49:6f:ad:d9:e5:d0:22:31:e5:b6:b0:76:50:14:37:b9:ff:
a5:0a:aa:64:29:48:99:a0:3e:1f:c4:6d:61:cc:7d:45:ef:82:
67:19:a2:9e:73:ce:65:3f:d2:c4:7d:30:bb:30:4c:3f:e3:e2:
9e:95:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:37 2025 by rpki-client