Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: hOHMYg7jr2c7V3drC2bUw1gZyBbiE6zNyRG1gwq7Sik=
Subject key identifier: 98:5B:E7:52:B5:AB:02:62:3B:AF:79:E2:B2:73:EA:7D:A6:49:52:C4
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 01969E2C1C7FC47DD58AEBB520F5B52A50DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 02:00:12 +0000
Manifest this update: Mon 05 May 2025 02:00:12 +0000
Manifest next update: Tue 06 May 2025 02:00:12 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: +TMaKVEjDxC3CkiDy6Q+wT9J9LYCg22MxWQ5Uy9sFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:1c:7f:c4:7d:d5:8a:eb:b5:20:f5:b5:2a:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: May 5 02:00:12 2025 GMT
Not After : May 6 02:00:12 2025 GMT
Subject: CN=985be752b5ab02623baf79e2b273ea7da64952c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:f0:bd:43:65:54:77:8c:fd:77:3f:d0:f3:
b9:df:d0:5a:e5:e5:fd:7e:bd:c7:bf:e8:99:f8:13:
b6:1f:39:7c:60:1f:38:31:c6:fa:40:5d:11:e0:01:
76:d8:37:3e:c0:86:1c:1c:0c:c8:c9:35:6b:20:02:
a7:45:85:9b:da:15:ce:07:d0:c3:41:8c:f3:0c:c9:
9f:3e:d1:1d:59:cf:45:30:12:63:01:96:d0:55:8a:
ad:bf:04:80:86:fd:2e:9a:4a:a3:d6:35:01:4f:48:
28:df:f5:b2:c0:92:a4:b0:f0:ca:e7:78:77:03:93:
e5:9f:f9:90:9b:34:10:e0:a6:35:d4:ab:e2:13:8a:
3f:d6:2c:89:cb:07:57:84:ec:e4:e3:d1:3e:14:6f:
57:2e:23:9e:75:2d:4b:1f:90:0f:cc:54:f8:b9:7d:
1f:77:e1:bb:c7:e7:9f:aa:97:00:30:6c:02:c1:28:
90:47:9d:79:0c:2d:82:8b:41:37:f0:76:83:ee:a7:
d0:1a:09:1e:2a:dc:76:08:50:14:ae:ac:a3:0e:c8:
99:84:7d:09:4a:8d:98:b3:5b:fa:f3:fc:f2:b2:55:
f4:32:a0:c0:59:9d:6d:96:62:3f:5e:5e:16:2b:f4:
d8:61:e2:f6:c6:71:03:59:1f:fb:c4:ae:ba:46:74:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:E7:52:B5:AB:02:62:3B:AF:79:E2:B2:73:EA:7D:A6:49:52:C4
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2c:f0:fe:22:80:84:37:9f:ad:51:e5:ec:11:1f:6d:37:8a:
72:13:ac:70:0e:cd:2a:44:68:eb:77:cf:a9:59:a9:d8:a0:8e:
14:af:0e:05:ab:1b:0e:cc:ff:3a:7e:24:fd:38:96:24:19:8f:
98:6e:e4:60:89:1a:1e:9b:2c:fa:c3:93:66:40:d7:36:60:98:
43:05:8c:df:34:97:9e:41:c3:54:37:c9:de:e3:03:7e:7f:fa:
ba:69:a1:4c:19:13:4d:1e:55:99:18:0d:5d:36:f7:1d:a6:48:
e7:48:ba:5b:ce:2d:2f:cd:7d:a8:1e:e4:a9:61:2e:ae:63:e6:
25:8f:38:68:bf:17:8c:30:06:c8:f9:fa:47:a7:92:6a:0d:fa:
5f:48:0f:63:18:ea:c4:c7:7e:f4:21:e3:a0:a6:ab:09:7c:ac:
11:e8:0b:47:f1:5d:50:5f:23:e2:5e:4d:85:7c:0f:39:b7:4f:
fd:2e:af:bf:bb:80:52:51:02:20:9a:8f:3d:8b:60:d5:6b:7c:
1a:b6:78:bc:e1:df:38:7a:fc:0f:50:a9:7d:b8:e9:9d:c2:0f:
f8:49:28:f1:f5:e7:05:ad:63:56:6e:a8:41:2a:73:3c:65:a9:
80:0a:92:e6:7f:e3:73:a7:ef:aa:5b:27:5a:a9:54:a1:c8:2f:
1d:2b:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:44 2025 by rpki-client