Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: CKr1vJaEtRdxSxUXlIsj7tqzUKa6jYnEByY2UP5ERaQ=
Subject key identifier: CC:AA:AF:B5:B0:7D:C6:A9:DA:2A:01:47:F4:A9:1B:20:26:B0:AE:1B
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 01965838D9675921892E1EA233E384724656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0A8C
Signing time: Mon 21 Apr 2025 12:00:42 +0000
Manifest this update: Mon 21 Apr 2025 12:00:42 +0000
Manifest next update: Tue 22 Apr 2025 12:00:42 +0000
Files and hashes: 1: T7qjUpuFek2HO0YlRj5-k5NdZXM.roa (hash: mMiY1pDTZBZHtZK+AEVkPiyRFIi1wbnQYRg+XFOmlGk=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: fUJELeFcqpcqljDyHgovcelrQg/gcKy/QL3XVpb99gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:d9:67:59:21:89:2e:1e:a2:33:e3:84:72:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Apr 21 12:00:42 2025 GMT
Not After : Apr 22 12:00:42 2025 GMT
Subject: CN=ccaaafb5b07dc6a9da2a0147f4a91b2026b0ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:a9:00:e0:79:34:d4:bf:0d:6e:51:d7:d4:
80:ba:97:c7:f2:ff:18:86:93:42:54:57:6d:74:97:
8e:b1:68:63:57:4d:f6:ba:af:7b:c2:b9:3c:f3:33:
95:71:2c:0e:e1:39:68:5d:b8:47:89:18:da:7b:53:
58:42:0c:6a:ae:b5:45:95:4e:2e:62:7d:98:3e:fc:
45:f5:12:f9:21:5d:f2:ac:97:6f:8f:c0:00:1b:b0:
a4:75:d7:d0:0d:7a:71:bd:e4:be:c3:25:58:21:20:
e8:8f:11:76:af:72:43:b2:8e:71:11:24:b5:cc:69:
46:74:b3:49:2d:86:e4:19:54:e8:74:c3:d7:60:6d:
01:66:d8:16:87:3e:16:c6:dd:5d:7f:11:e1:bd:cb:
6c:a2:85:a5:78:da:63:72:0c:54:25:f5:4e:90:e3:
df:9f:5e:c3:86:21:89:9f:40:aa:7c:9c:f9:6d:01:
b0:c6:5b:c5:21:88:9d:6e:18:6c:9d:31:3f:73:4f:
8b:84:20:70:4d:16:46:b3:24:23:4f:16:54:98:0c:
be:6f:47:6b:2b:6e:44:8c:42:a1:3f:23:cc:d9:38:
61:77:15:00:ea:f4:ee:37:cd:48:ce:4e:d7:94:3b:
8a:a8:55:7d:61:01:3b:f9:cb:54:ed:8b:36:97:94:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:AF:B5:B0:7D:C6:A9:DA:2A:01:47:F4:A9:1B:20:26:B0:AE:1B
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:18:5e:79:e6:23:b2:27:d5:b4:ad:0a:ec:08:d9:2a:6c:38:
8f:dc:34:49:90:44:86:d6:b9:8a:1a:68:15:9b:80:d5:f0:d4:
23:b9:41:b8:e9:db:9b:34:bd:d2:e2:13:ec:ed:d2:29:99:39:
83:21:d8:8b:fd:14:c9:85:5d:46:bb:f1:31:5c:b8:c6:f6:91:
38:dd:ca:cc:e2:70:b6:2e:da:3c:ff:12:d6:07:8f:c6:e8:85:
03:cb:f3:d3:13:8d:23:fe:b2:38:cd:69:c7:30:ae:09:49:62:
90:08:b0:0d:97:cd:56:64:f7:42:91:d8:ca:f5:ea:43:07:59:
dc:01:7f:e2:8f:56:0d:b6:e5:85:bf:5d:6e:84:e9:cd:7a:27:
b5:bd:e3:5f:a3:82:37:02:b1:54:84:dc:6e:6d:20:5e:1c:e3:
7b:b5:17:c1:cf:3c:90:e9:b3:b2:dc:75:1a:4c:89:36:4f:c1:
a4:6b:f2:74:57:90:c3:28:b9:75:04:da:35:0c:76:25:a4:ae:
dd:46:9c:50:1e:a6:c4:d8:4c:d8:00:44:52:f3:aa:97:b8:ed:
c8:58:e2:da:f7:c3:d1:df:1a:e9:0b:57:90:3a:dd:3b:b0:54:
48:c6:cb:1f:83:05:8f:b4:bd:3c:ce:67:88:55:ef:b0:90:30:
d9:44:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:10 2025 by rpki-client