Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: WkqQqI7mCWa0ukTmWAKmopItxoPZBTqJD/4xLp2rMIg=
Subject key identifier: 95:F8:5F:1E:0B:98:A2:58:33:69:BB:EA:93:61:58:19:2A:39:EE:9C
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 0196CB3BEFA45B0640286ECEE13BC1369D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 20:00:24 +0000
Manifest this update: Tue 13 May 2025 20:00:24 +0000
Manifest next update: Wed 14 May 2025 20:00:24 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: pUmOIFUP1J9rqFmaHrgfTgydpY/k6sPwNS6/s+jJEBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:ef:a4:5b:06:40:28:6e:ce:e1:3b:c1:36:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: May 13 20:00:24 2025 GMT
Not After : May 14 20:00:24 2025 GMT
Subject: CN=95f85f1e0b98a2583369bbea936158192a39ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:41:98:59:5d:54:6e:0b:0e:cc:c4:ae:71:
8a:4c:47:a4:82:17:0d:63:9e:8f:43:6c:b5:ed:f3:
38:60:60:33:ed:a2:65:ac:01:da:0f:1e:db:ba:17:
c3:d9:be:bc:1a:c1:11:9a:e5:4a:bf:10:1f:34:e1:
07:3c:38:1c:db:6d:4b:4d:5e:ca:92:af:a8:7e:c2:
af:16:29:59:d5:dc:db:4e:d0:a1:db:4f:0f:46:53:
90:ee:59:a8:a9:a0:4d:d2:3a:25:f9:71:52:da:09:
a4:ac:77:13:9c:5e:13:45:60:90:20:ef:9f:51:ae:
b3:c2:d2:cd:a1:ac:da:8a:c6:7b:be:b7:f3:33:34:
9a:a7:e8:0b:e4:c6:28:5d:69:83:46:cb:d1:9c:2c:
45:11:55:39:1f:07:83:f8:50:2f:24:b4:0e:52:ea:
34:80:01:50:57:36:64:ed:64:cc:2d:38:67:a6:d3:
52:57:f1:69:25:6b:de:9c:25:63:ea:e0:41:e3:69:
5b:b2:d6:f0:e7:f1:5a:5f:81:96:3b:2a:93:1f:a2:
b7:f1:2c:29:ca:7b:40:9b:96:bc:d1:1b:90:79:f5:
e6:a4:db:c2:2d:04:f2:7c:6a:0a:1d:fd:18:c4:ff:
d7:3c:02:62:01:cd:9c:ed:13:9a:53:52:5b:7b:e1:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:5F:1E:0B:98:A2:58:33:69:BB:EA:93:61:58:19:2A:39:EE:9C
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:de:e1:89:a8:a9:21:a0:8b:1f:04:c9:3e:de:76:8c:b9:
59:0c:0a:66:2a:23:f9:9d:82:a5:ef:0b:07:da:5c:13:ef:a5:
91:bf:a2:a8:f3:a3:63:b6:7b:e7:86:db:3d:71:23:eb:71:0f:
05:5a:a5:2b:8d:e0:15:94:fb:35:67:52:83:80:dd:02:cc:c8:
06:a5:68:d2:03:60:e0:34:75:b6:3d:a1:32:a3:66:8c:e5:0e:
f0:34:a0:a3:e3:17:62:91:57:e5:3c:5d:ae:5f:92:9d:de:e4:
b9:df:c1:d4:9b:84:97:63:33:5f:1b:4a:d8:13:ed:c0:96:37:
d1:bc:1a:30:d3:9c:4f:20:5c:a2:54:f4:25:13:10:fd:b6:d8:
79:a5:53:4c:8a:64:b2:3b:db:0c:10:b6:6b:65:2c:82:c3:64:
87:96:c4:9a:b9:03:3a:bf:80:92:95:79:f6:39:b0:0c:7a:19:
b3:2a:65:9c:dc:b6:58:10:cf:0b:93:25:14:2c:47:3e:02:02:
31:07:ce:06:b6:e3:48:8f:b7:ca:e8:94:2b:6b:dd:d8:2f:65:
20:dd:7f:29:f8:7f:2f:76:94:6c:54:28:81:9c:fd:11:0d:9a:
5c:a2:d8:2a:8b:bc:0e:ab:ba:cf:f0:4c:54:d5:d4:16:6e:16:
03:6f:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:54:49 2025 by rpki-client