Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: uCEjZH2nAlcpvD2s4Usng0ZRpd9YSbHgqOcKisC0ivY=
Subject key identifier: F4:26:A3:48:F0:27:8A:D7:78:40:33:53:D0:D6:56:4A:56:C5:47:1B
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 0196BBFFD611919828C2E997F3FB35918ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0ECA
Signing time: Sat 10 May 2025 21:00:27 +0000
Manifest this update: Sat 10 May 2025 21:00:27 +0000
Manifest next update: Sun 11 May 2025 21:00:27 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: pSv9nC8dNmDrxVA7POTXmF6CeHuxYq6rCqCpeijpMrA=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:d6:11:91:98:28:c2:e9:97:f3:fb:35:91:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: May 10 21:00:27 2025 GMT
Not After : May 11 21:00:27 2025 GMT
Subject: CN=f426a348f0278ad778403353d0d6564a56c5471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:95:cc:01:1e:fb:4a:48:15:22:dd:db:a9:
3e:20:b4:fa:3a:c3:d7:da:bc:02:e6:d7:62:8d:73:
fe:a0:dd:1a:0b:ee:eb:76:8e:b3:44:fc:b0:be:70:
80:f8:2e:fa:c5:d5:2e:e6:fa:a0:48:89:04:12:15:
2a:64:27:1a:05:17:06:23:d4:48:ea:a5:cc:a8:eb:
a5:31:fe:e3:40:fb:0f:e2:21:ad:07:cf:d1:96:54:
03:de:12:f6:1d:7f:c1:3a:2a:ab:d3:95:d5:5a:1c:
a2:ec:cb:b8:78:00:f9:ce:e0:fb:dd:55:0c:67:89:
98:55:96:fa:b9:d3:91:36:4a:c9:6e:05:32:b2:94:
5c:07:cb:1b:ab:3e:fc:a1:70:0e:78:2a:e0:44:23:
2d:bc:89:7f:20:04:55:ae:b1:0f:bc:fa:42:26:b1:
1e:72:bb:6b:f8:85:3e:62:84:7a:ad:5b:d9:62:60:
2c:e4:d7:d2:0f:7f:55:33:0d:36:6f:04:89:42:f2:
71:5e:e7:06:15:62:3e:08:23:31:f2:84:d5:af:e3:
dd:9a:29:92:46:f8:24:a0:f5:85:61:d1:ca:22:7c:
a0:e7:63:30:60:ba:d7:f9:2a:3a:c4:4f:e9:2a:04:
3a:36:16:3b:39:47:33:e4:fb:d7:e4:d3:97:06:19:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:A3:48:F0:27:8A:D7:78:40:33:53:D0:D6:56:4A:56:C5:47:1B
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:31:9d:9e:02:17:44:4d:26:77:c8:98:ee:14:24:5a:a3:2b:
a7:a8:7d:0c:fd:15:fb:89:48:b9:f7:3d:fd:8f:14:15:33:8f:
c3:fe:1b:52:2a:41:ed:61:44:88:13:2c:76:4d:1d:5f:0f:1f:
af:cc:4f:50:30:32:56:5a:9e:5f:c7:b6:41:3c:21:11:c8:8d:
da:01:b2:6c:04:0d:0c:6b:f2:2a:31:c5:f9:6d:5f:53:26:8f:
33:7e:4f:e0:bf:0b:0b:af:3b:e2:02:e9:17:64:6f:91:f7:7d:
69:c7:9d:27:6e:ff:34:28:3f:f3:3f:52:20:9d:87:f2:d9:4f:
a6:4a:61:30:96:5c:b5:98:01:77:1f:cd:42:1d:61:69:dc:fa:
ae:b2:03:47:be:e8:fd:81:b3:00:c6:09:1f:c1:7f:44:2a:bb:
54:bc:ff:d6:9e:95:73:78:75:c1:dd:7e:20:9c:77:5a:9d:f8:
8f:df:17:a9:5b:a9:bc:69:21:de:54:8a:b0:39:a0:29:29:0f:
1d:9d:e4:03:43:09:99:44:46:b5:6c:6c:45:c8:97:2f:4a:74:
20:87:d1:1b:39:b3:04:d6:77:b8:0d:de:51:a2:f1:52:b6:0c:
dd:17:17:55:7e:93:97:2e:fc:7d:5a:6c:30:2b:0a:e7:73:75:
37:b6:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:45:08 2025 by rpki-client