Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json)
Hash identifier: Fk3JCe3uu2DKgCfgldxr4TP7dlnESFabZSLfk61/ZVM=
Subject key identifier: F6:06:BD:22:C7:06:5D:40:7E:D6:1C:07:32:2D:93:9D:D3:04:25:BD
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0196BB92BBE24F1F6D24C89BD9BC0B641E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
Manifest number: 0710
Signing time: Sat 10 May 2025 19:01:17 +0000
Manifest this update: Sat 10 May 2025 19:01:17 +0000
Manifest next update: Sun 11 May 2025 19:01:17 +0000
Files and hashes: 1: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=)
2: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=)
3: OXzsoQWcfSLHj04LygHORaYth3Y.roa (hash: gP/eQqQ3pnpzbZZ+ZP/h1YGN6dV6ixwkRO3nX2q99p0=)
4: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: 2C+fcquZxp6Dw/wWFgcm8PFsQwgxcRgDT1ugPXy1nw4=)
5: cpBh0w2t5SUeTveHMXo0e45wl_g.roa (hash: wnpUNv6ppC8UNUrj4/3VOaysZ1B8H6QoFf3xDmtiXxw=)
6: hvBvJyG5-CfH83M2DhYFOWkU2Cg.roa (hash: wDKtmo40dwgRFBSRXHY0QDbdfttnASkBSxoZO1r3tGg=)
7: jB110pDZmcuujfQezVUYFypdnk4.roa (hash: Ja58Yq8wHJsWad7BVjuXhBRa5NCGI3uYM6r+ME659AY=)
8: nP6Wp7rqjDbaj9VXPjopbJmmZLQ.roa (hash: EDsEYJXVC7X/AF/ZHxiwn2CZKU1Xg1iI8gyvla1QqdM=)
9: prBGAJfo6jykezuLUpZ1BEDdn5A.roa (hash: STwdoXQqtV0U9DHkB0uJmQZyaRCvXoZ221e5pNUAHBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:bb:e2:4f:1f:6d:24:c8:9b:d9:bc:0b:64:1e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: May 10 19:01:17 2025 GMT
Not After : May 11 19:01:17 2025 GMT
Subject: CN=f606bd22c7065d407ed61c07322d939dd30425bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f3:4e:68:a0:c3:95:d9:b4:38:7c:8f:8d:f2:
92:8e:c0:d2:fe:e5:b9:8a:f6:97:ba:73:2f:e4:a2:
61:b6:81:d7:2a:3b:6a:0b:f2:0a:a8:2b:67:f9:db:
4a:02:d9:9a:05:bf:b9:93:b4:06:89:aa:ac:98:1a:
8b:5b:a7:d2:41:81:b9:c0:15:54:97:8f:fa:6f:18:
84:22:78:9d:43:cc:01:11:dc:1c:55:b0:03:70:cf:
38:fe:e4:e9:ec:c5:38:e8:85:48:f2:76:6c:3a:c8:
e9:9f:f3:29:ea:5a:dd:4d:46:25:a0:49:4d:cd:4c:
fa:73:50:d1:70:ea:51:0d:af:a8:e5:66:86:c1:a5:
41:30:ac:09:e2:d8:b1:60:c6:b1:6f:62:8a:56:74:
4d:8d:0c:06:1f:4e:2f:02:7d:cc:f8:f0:38:38:1e:
da:9e:1c:18:9d:c4:b1:66:98:1f:ef:fb:37:0c:26:
3b:45:b9:4c:ca:ce:b3:3f:39:09:2b:30:08:02:31:
71:f5:55:c0:30:6f:1f:72:59:46:04:ae:57:16:08:
70:e0:15:c8:8b:2e:f8:2e:5a:86:8f:86:10:e0:b9:
ce:2a:bc:7a:4c:17:3b:34:b1:9e:70:0c:ec:0b:17:
14:8b:b2:cb:76:ec:bf:ec:81:6f:e3:8d:86:51:f9:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:BD:22:C7:06:5D:40:7E:D6:1C:07:32:2D:93:9D:D3:04:25:BD
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:52:64:8f:6d:f7:75:f1:09:b8:7a:2f:8f:fa:f2:14:23:
23:e1:db:3d:8d:6d:91:10:ab:d7:4a:99:9b:35:cd:fe:e5:b9:
ed:08:cb:aa:a2:93:87:fd:20:20:f3:f8:5c:67:57:64:54:0d:
ef:96:15:f5:ae:b0:39:b7:57:2b:ab:dc:56:b5:3e:cf:8d:b8:
29:f4:31:c9:0a:b9:e2:d2:87:d7:83:e7:03:55:4c:a0:1f:ec:
25:7a:0d:74:f3:7a:30:a4:f3:03:8e:6a:b3:94:04:57:70:b3:
16:89:f5:2d:ad:f6:71:65:90:f4:fb:cb:8b:33:6c:a3:12:bd:
dd:ef:fa:77:68:05:ca:0e:ce:64:4a:c6:1c:10:23:24:68:df:
1c:6b:c8:3c:ec:9a:93:fc:c9:1b:e1:e0:b8:24:7b:17:52:f2:
25:50:93:73:92:f0:21:08:39:71:59:59:61:f8:f6:60:82:0e:
08:a8:02:4c:0a:68:a6:0b:b4:bc:37:ef:33:bd:8b:fe:f3:0e:
5c:5c:b9:0d:a3:00:4a:99:4c:c5:e6:19:a1:92:90:18:87:b8:
6c:b6:11:03:97:df:d8:85:b2:d6:b9:a6:88:a6:d2:6c:37:e0:
0c:4a:11:4c:3d:05:88:7e:9a:eb:eb:83:57:c6:b0:9d:ee:a2:
17:32:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:58:54 2025 by rpki-client