Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: eH/csiEpTF9AB7EgGWukHAzm70FfMF7ABaDnsgfvs0I=
Subject key identifier: 45:61:1A:B7:D7:08:E3:33:AC:26:D5:93:41:B7:E1:CD:A0:90:21:2A
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 0196BDEED69A80857CCCB4D9A2FAED203859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 06:01:08 +0000
Manifest this update: Sun 11 May 2025 06:01:08 +0000
Manifest next update: Mon 12 May 2025 06:01:08 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: 3x3cY5kjEM2euygUWGakXKa15MoD0r/sIxSYs2/LxsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:d6:9a:80:85:7c:cc:b4:d9:a2:fa:ed:20:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: May 11 06:01:08 2025 GMT
Not After : May 12 06:01:08 2025 GMT
Subject: CN=45611ab7d708e333ac26d59341b7e1cda090212a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:87:a9:30:14:e1:e6:f8:ba:26:21:17:40:
52:77:ca:f9:94:10:f3:22:68:3b:30:d0:3f:2d:0c:
e0:15:a5:b1:8a:e3:3e:3a:a5:dd:6c:f5:8c:ba:13:
0a:dc:46:5a:14:03:23:10:36:34:02:49:c9:97:e7:
6b:3f:e3:ef:c1:c2:da:29:25:12:ce:23:90:4a:30:
54:14:c0:05:b5:4b:95:c1:59:83:32:88:27:48:dc:
27:c7:d8:f3:da:d3:97:52:b5:67:12:11:cb:49:62:
82:9a:0b:b9:dd:ac:8a:47:28:43:c4:20:e7:f2:dc:
ad:84:91:3b:1d:b7:d2:16:7e:0e:19:6e:54:52:3e:
8a:7e:4d:37:b1:94:1d:44:67:9c:be:eb:63:a0:25:
e7:2b:f0:1b:32:54:d6:11:87:1f:36:34:a1:b6:3f:
bd:02:8d:97:be:85:13:5c:fc:a3:46:fa:2c:ef:84:
6c:ab:52:79:ff:51:88:bd:f4:0f:a9:ad:e3:94:dc:
7c:e3:1b:e0:b7:03:f8:11:8e:3d:3d:1a:a0:3c:70:
2a:96:1d:8d:03:6d:d1:04:25:2d:76:1d:e2:b8:10:
50:3a:2e:c2:90:8c:0c:c7:fb:69:19:89:66:bd:7e:
e8:c5:2a:6c:ab:fa:0b:5d:50:28:13:3e:9a:66:b7:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:1A:B7:D7:08:E3:33:AC:26:D5:93:41:B7:E1:CD:A0:90:21:2A
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:a2:39:fb:78:80:4e:74:06:f1:51:b8:99:92:18:32:fc:
7a:d6:4e:99:6b:9e:1f:a3:09:7b:c5:b8:91:e2:2a:b7:98:2a:
c9:ad:2e:05:a6:ec:9a:7b:6b:64:52:88:32:a2:e2:00:80:6e:
4c:23:04:e3:8a:5e:32:ea:f1:96:5e:d4:c3:ff:23:e3:18:d3:
c8:09:97:5d:7c:ea:04:3e:5b:f6:b2:ca:c0:55:bc:86:20:9f:
c7:7d:3a:6a:cd:65:d9:e6:3b:1d:2e:b4:8f:95:85:77:40:2b:
d6:f0:0f:9f:57:20:c6:07:39:b6:57:f8:06:36:82:fe:66:14:
92:16:34:80:98:5c:46:19:ce:c5:1e:29:45:72:98:47:e9:9c:
60:fd:53:38:6b:12:f9:54:3e:c5:86:a6:23:73:3a:f8:b4:f4:
7c:a7:5f:a6:20:b8:f7:5a:48:78:78:f1:f5:5a:89:9f:79:07:
01:51:86:c4:35:4b:60:e8:6e:c3:4f:14:1c:40:14:00:1c:03:
ed:fc:88:e4:f6:8c:a4:b8:29:6a:be:fc:0e:ca:2e:ca:05:a8:
82:c8:fd:28:df:61:26:68:e5:03:20:be:6e:0d:32:57:17:b9:
ce:a9:a5:97:4b:22:1d:0e:86:de:80:4c:a6:2b:dd:94:00:55:
42:c4:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:31:27 2025 by rpki-client