Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: qrHE6sa+vYITdAsPIGjDummZm7NKlXeVXn+7SLZT700=
Subject key identifier: 65:A5:61:F6:EC:50:51:7F:8B:C7:2E:1B:E0:53:52:6F:9F:50:6E:45
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0196AB431FDD4B75C8961F856B4844BA4C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 0425
Signing time: Wed 07 May 2025 15:00:25 +0000
Manifest this update: Wed 07 May 2025 15:00:25 +0000
Manifest next update: Thu 08 May 2025 15:00:25 +0000
Files and hashes: 1: MPEgzsc7IRKTR0peLznny5u9zQU.roa (hash: CxmJR4HXGFyr5aOUpVP31nHFIaZWyT3pJR2Fks8oBCI=)
2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: PELP/HUmLEhozqG18TZBALU+cNsgTOeV4Gq2wAZR8hE=)
3: lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa (hash: Nh7UeQS8f90rjPYbwZZwjcnHax4rlbcgMRh3GqnO0aQ=)
4: wFG_1wRlWrytiChUWS0YXy18U-I.roa (hash: t+5ZCiR/UfDzq2HyCdUNOSA3Od7Ts5iAeQxRh3YXY0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:1f:dd:4b:75:c8:96:1f:85:6b:48:44:ba:4c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: May 7 15:00:25 2025 GMT
Not After : May 8 15:00:25 2025 GMT
Subject: CN=65a561f6ec50517f8bc72e1be053526f9f506e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:a8:9f:03:0c:06:e9:17:cf:01:f2:1c:37:
cf:2c:49:02:93:1b:2f:7b:4f:b6:3b:b0:23:9e:69:
7f:d6:5b:38:f5:7d:7f:60:a5:d0:44:ab:9c:cd:9e:
42:2d:da:28:cc:e8:92:79:e9:8b:5f:07:32:4f:3a:
52:1b:6f:6b:60:1e:4c:4c:a4:63:06:48:1d:28:2d:
7f:9d:63:ff:ce:ed:21:d3:6c:e4:f9:b5:72:96:f6:
65:2d:78:98:33:af:6d:92:d7:b9:43:7f:ae:8a:45:
69:30:15:e0:66:4d:35:bf:aa:3d:ca:ac:2c:cc:58:
aa:b0:40:64:37:11:01:62:2e:9d:b1:e3:f2:35:02:
4d:a7:0a:b4:a9:19:5e:e7:e4:a0:f9:dd:31:47:28:
a7:68:5d:4d:c2:03:fc:fb:27:bd:a1:05:2c:44:10:
9f:26:f5:c8:0f:ef:ce:6c:f5:96:d8:40:da:9d:91:
89:9a:b5:e5:19:6b:92:78:21:8c:56:e6:04:b9:68:
b5:a5:e2:4c:b9:0e:65:3f:45:75:42:9c:c7:b0:b8:
89:ab:ac:4a:2b:f0:73:6f:e7:cc:36:3e:a2:1d:00:
b6:d1:02:68:9b:c6:f8:35:27:1b:b7:25:90:01:6c:
2b:ff:08:af:e9:75:17:f7:d4:15:d3:64:51:67:01:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:61:F6:EC:50:51:7F:8B:C7:2E:1B:E0:53:52:6F:9F:50:6E:45
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2c:df:7c:4b:24:8e:0d:00:2f:de:78:3a:7b:62:78:dc:f4:
22:ac:d6:1c:61:32:27:2d:4c:43:8f:20:4a:d4:c0:78:0e:72:
ba:18:f4:a8:1d:00:76:f3:4a:4e:3a:b8:2c:2f:ea:2f:16:b7:
c8:1a:6d:e2:ef:f7:85:f5:55:bc:f3:e6:ab:9d:05:45:78:e6:
62:cc:f6:a1:db:ab:cf:f7:95:1c:35:ba:38:fb:4c:17:7b:4a:
ae:51:e1:8c:6a:65:fa:6b:a5:ab:57:85:e0:79:f1:b3:c2:03:
e3:12:8d:1e:ac:20:77:9e:34:b0:c3:ca:83:bd:d6:eb:a9:c1:
00:9a:d1:c3:a2:39:49:fd:44:70:4e:69:31:94:eb:36:fa:58:
74:f8:75:a1:04:c2:46:cc:f0:2a:5f:be:d7:86:66:5e:93:f8:
d7:72:b5:44:9f:16:c3:20:0c:a3:18:80:25:00:4d:20:1f:fd:
ea:8a:d3:f6:5d:48:64:5f:42:8d:18:77:af:eb:65:f2:ab:a3:
38:eb:80:68:20:fd:cf:28:68:56:aa:de:18:b7:73:d0:9e:6d:
d8:30:a2:90:09:35:19:e9:2a:b3:22:56:75:21:5d:df:c3:c5:
e2:55:72:7e:bd:de:8c:c1:01:9e:a5:a0:80:19:9d:50:ce:a4:
b3:48:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:19:54 2025 by rpki-client