Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: /fBHyUKuPUkTZepNxMgEN8gqrzVuSPowHfakyP7OoYM=
Subject key identifier: D6:57:4E:26:65:41:CB:50:35:4F:E9:A1:89:4E:15:C9:B4:EC:88:E4
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 0196C0EF6F06785667AF8322A0F1117E4D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0CC5
Signing time: Sun 11 May 2025 20:00:39 +0000
Manifest this update: Sun 11 May 2025 20:00:39 +0000
Manifest next update: Mon 12 May 2025 20:00:39 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: dm8Am+bUKC3t4qnksiK1EB+wAlBrSyojKILCl3zcUTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:6f:06:78:56:67:af:83:22:a0:f1:11:7e:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: May 11 20:00:39 2025 GMT
Not After : May 12 20:00:39 2025 GMT
Subject: CN=d6574e266541cb50354fe9a1894e15c9b4ec88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cf:4d:e6:f7:c8:8f:07:2e:6d:34:94:59:c8:
f8:c1:76:a5:e0:c5:05:49:51:3f:31:61:2e:f1:ef:
be:e5:92:89:bc:19:3c:c6:e3:8e:92:88:5c:5a:7c:
e8:7d:dc:00:9b:8a:3b:91:ea:73:dc:46:a0:6f:03:
11:62:ee:ac:19:d3:09:37:f6:58:d9:a2:a2:15:08:
97:43:4f:a6:e9:03:4e:7e:78:53:71:01:0a:9c:d9:
2f:a7:80:7d:49:69:12:40:7f:db:e6:61:fd:c5:91:
9f:f0:5d:f2:0c:1c:da:f9:d1:e8:45:06:73:ea:3f:
7b:23:ce:aa:54:f7:3b:c3:2d:62:ce:c8:c0:84:1a:
14:5b:08:8c:c2:4b:f2:1b:13:83:f2:1e:7a:95:54:
b3:04:e3:19:51:e2:fd:08:f4:c7:cb:e3:39:06:b0:
61:78:88:16:a0:e5:fa:29:fe:1d:5e:73:52:08:77:
39:6c:c2:fb:b4:2f:a3:40:0c:7e:56:d1:d9:d2:55:
b4:a3:ea:a2:52:b4:7d:40:d7:31:1b:fe:63:22:ca:
e5:63:67:ff:62:9f:0e:54:72:d6:ff:35:04:3f:06:
3d:fb:ad:f9:9c:69:d9:2c:29:92:71:a4:de:51:94:
45:10:8f:76:c9:fb:f6:66:bb:de:47:c9:be:c4:48:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:4E:26:65:41:CB:50:35:4F:E9:A1:89:4E:15:C9:B4:EC:88:E4
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:8f:9c:e0:e0:ae:f2:5e:71:24:0d:52:26:4d:da:01:1a:72:
18:0e:fc:92:1b:42:d8:ba:ee:1d:3e:9e:3c:06:1e:3f:27:cc:
04:63:2b:80:6c:f4:50:45:cf:e7:47:02:d9:27:69:b6:28:c7:
86:34:7c:4a:58:c7:e0:38:9f:29:f1:d7:02:88:15:ba:0c:08:
fc:b7:d1:96:33:61:8a:12:b3:ce:5e:19:01:78:4e:bc:09:7a:
6d:c5:53:a8:0a:ec:e3:03:f8:f3:7e:42:1c:d0:a5:23:07:2e:
8e:aa:66:97:5e:c7:d8:9c:5a:6b:1c:1d:6c:b3:0c:90:e3:b4:
1f:cb:2a:1e:6c:0c:e7:58:92:32:7f:eb:2a:42:05:41:46:91:
57:53:f4:51:dd:47:07:28:61:f7:69:96:ed:55:4b:4c:4f:17:
be:79:2d:0f:3a:ac:6f:a5:ef:7a:7e:d1:b2:7c:da:30:7e:08:
c2:ff:e8:37:bd:f0:40:c2:18:48:9f:cc:15:50:aa:5c:e5:1a:
2e:80:4b:1d:96:5b:56:3b:d1:3c:55:f0:8f:08:26:4d:6b:15:
ab:f6:b8:1a:c1:12:c7:7f:55:6d:2a:5e:51:24:4a:19:92:9c:
a1:8d:e9:63:18:e2:14:cf:d3:fe:b5:f3:03:50:6a:a0:12:ec:
20:b5:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:58:50 2025 by rpki-client