Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: morkwT+YqIJTREnQEZ54UHA95Eyavo2d8RWqYjPmZRM=
Subject key identifier: F7:5C:C5:78:58:E5:7C:6C:D1:D9:BD:9F:45:60:96:75:74:89:B8:95
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0196BBFFB9566CC30A02203751FB8EE609C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0760
Signing time: Sat 10 May 2025 21:00:20 +0000
Manifest this update: Sat 10 May 2025 21:00:20 +0000
Manifest next update: Sun 11 May 2025 21:00:20 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: jAJAivaqj4Qzl9QZatd4QJeeD+poAOoR5GfbNghP1DY=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:b9:56:6c:c3:0a:02:20:37:51:fb:8e:e6:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: May 10 21:00:20 2025 GMT
Not After : May 11 21:00:20 2025 GMT
Subject: CN=f75cc57858e57c6cd1d9bd9f456096757489b895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:07:82:82:b9:4e:4b:f1:a0:2e:5b:1e:54:
cf:11:2c:ad:9a:9d:73:d6:cd:90:f8:58:52:b8:34:
f3:ca:1e:ff:7d:5f:4a:d8:ba:8c:b7:56:f1:6c:a3:
ca:5b:54:92:ec:5f:ca:9f:5b:51:3d:a3:26:e7:39:
70:49:c1:a4:8a:c5:0e:eb:b2:d5:2b:c8:51:a8:f3:
d4:47:29:46:d8:af:44:cf:d4:04:c5:c1:07:7d:bf:
9e:c9:81:21:b8:52:1e:98:1c:3c:33:6d:e1:d5:d7:
7d:99:0c:c5:f3:d5:2e:c1:45:79:c4:0f:19:f0:c4:
81:5f:0d:af:4b:34:7c:80:0c:a3:91:12:7e:96:35:
b7:c4:56:c8:1c:51:08:d1:59:f8:6d:1c:8e:0b:28:
69:b2:e0:ce:1d:4c:15:6d:aa:10:7e:67:e9:13:2e:
a6:18:ae:9f:f4:90:d0:9f:6a:cc:4f:32:99:38:60:
4a:68:f4:bf:72:6d:98:7c:4c:14:03:7f:86:e3:a8:
ea:67:a7:12:f8:c9:12:0d:fb:ba:ab:6d:32:6c:89:
97:e5:22:d3:b3:d3:0e:85:93:50:97:06:f9:68:b6:
b5:5c:67:18:67:e7:c5:27:51:96:f8:6e:6a:5b:ab:
25:6f:5c:dd:55:84:b7:2c:05:ea:c7:0e:c4:d9:16:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5C:C5:78:58:E5:7C:6C:D1:D9:BD:9F:45:60:96:75:74:89:B8:95
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:26:21:54:74:41:96:0b:7c:28:fc:8c:c2:d9:92:c2:25:
2e:3e:90:6b:43:20:54:e1:05:12:60:05:2c:29:b6:f8:e1:2f:
53:5a:bd:6a:32:1f:26:ec:43:ab:cf:14:75:7a:20:bd:2d:f4:
b0:ba:bc:8e:9f:7d:44:05:21:cf:54:ef:de:07:78:ad:36:20:
58:9c:1c:30:00:5e:93:90:64:fc:90:b3:27:5e:20:f0:ea:81:
50:23:ee:cd:f3:03:ec:bd:05:bc:df:47:3a:79:4e:e6:34:9f:
dd:d8:50:16:bb:21:a4:a2:34:ea:bf:c7:e0:c6:9c:b7:3a:a4:
9c:a9:c0:1d:7e:72:16:5c:b2:d0:e3:c2:af:d3:8e:d7:70:27:
31:95:c0:f0:8c:b1:b7:31:1e:0a:66:36:d5:d6:02:95:e2:b9:
4c:4b:7c:e5:64:b9:01:fe:77:57:37:a2:bc:8f:ab:cd:49:75:
d5:f8:57:87:d2:2a:03:81:61:e0:dd:23:c2:5a:99:58:7f:59:
af:91:4e:9f:b6:4c:90:75:d6:62:22:6e:ea:81:df:50:07:9b:
b5:17:3e:68:d9:2f:8d:c7:e8:35:74:b8:38:51:07:0c:c6:e9:
d8:55:54:30:5c:5b:5b:55:cd:10:76:d0:17:85:88:10:36:93:
a7:6e:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:44:38 2025 by rpki-client