Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File: Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier: oSqvqxQPLtR3R0HTHKD9lMVjU1J0YGybtKUnd+3wWxI=
Subject key identifier: 39:14:EC:6A:07:0F:C8:B1:A9:8C:EF:29:BF:25:14:13:95:DB:D0:1B
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 019623027FE9C9DE84FF06153AFF8C721183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number: 0803
Signing time: Fri 11 Apr 2025 04:01:28 +0000
Manifest this update: Fri 11 Apr 2025 04:01:28 +0000
Manifest next update: Sat 12 Apr 2025 04:01:28 +0000
Files and hashes: 1: UZAf8A9-pMDfvYbHB760wm3mim8.roa (hash: j34ASxN7++MCsv3IXa3rAjo5KvWthukAGWu5QUJzwPY=)
2: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: MAZWfbl4Y6ZzdU0OquBxanC5bm7U+6L6mytMBIAxQmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:02:7f:e9:c9:de:84:ff:06:15:3a:ff:8c:72:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Apr 11 04:01:28 2025 GMT
Not After : Apr 12 04:01:28 2025 GMT
Subject: CN=3914ec6a070fc8b1a98cef29bf25141395dbd01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:74:1d:b8:1e:80:7a:76:f8:09:9f:37:f3:
c4:09:05:bc:11:18:93:b6:1b:17:22:13:69:06:9d:
ea:9d:78:c5:ce:4e:17:12:6f:a5:69:29:09:4a:3b:
9d:2a:c3:29:11:bf:a0:39:e8:2b:95:a8:c4:26:62:
04:70:4c:c4:32:86:f2:1f:9f:a6:3e:06:4a:71:88:
de:fd:36:6f:eb:a3:aa:5e:61:8a:b1:2f:6f:bf:88:
92:69:62:63:95:c4:d8:e0:5f:3a:04:26:62:fa:12:
fa:3a:9d:fc:95:fa:59:86:95:8d:b1:eb:60:4f:5c:
50:c5:80:15:f8:44:d9:2d:69:11:45:a3:d1:79:00:
b4:73:b3:7e:34:d9:82:0b:0b:56:a6:7d:74:94:5e:
7b:79:d0:34:13:a1:1a:4c:ff:23:a3:2d:be:e4:2a:
ee:62:3a:af:65:6d:c1:5c:2d:5e:fe:3f:e8:c0:dc:
9f:c8:e5:9f:28:b0:9a:a4:ed:2e:d6:f9:0b:b2:0a:
c9:14:72:e1:e7:18:12:c6:e8:af:62:50:39:e6:54:
07:9d:af:50:01:9f:b1:90:4a:57:13:22:36:9b:e9:
ca:b7:f0:4c:d9:21:68:a6:98:b7:5b:e0:78:34:3d:
b4:7a:2a:57:f2:7d:09:ab:bd:40:4d:48:d1:9b:1e:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:EC:6A:07:0F:C8:B1:A9:8C:EF:29:BF:25:14:13:95:DB:D0:1B
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:d4:7a:a8:48:9f:1b:4b:06:95:64:cd:b7:45:81:8f:de:
eb:3d:c6:cb:1b:44:0d:13:44:1c:29:a2:e9:a4:95:74:42:71:
55:77:5a:bc:98:50:9a:37:7d:14:4e:e2:86:fc:ca:77:f7:ad:
98:2e:0a:5b:43:ea:2d:e2:08:93:d6:b4:a1:c1:8f:56:04:d8:
7f:76:21:92:95:eb:2a:78:72:5c:7d:93:80:bd:b1:0e:35:a8:
a0:3b:4c:28:e1:81:5e:bf:b4:25:ee:32:8a:27:a7:77:6f:1f:
96:95:33:39:61:bf:8b:c6:47:a2:bc:bb:96:36:f8:8e:f8:79:
d2:b9:d5:b6:35:85:fc:4c:43:7e:02:35:27:1b:e6:98:c9:b6:
80:2b:de:bb:57:19:1f:96:f0:e6:31:df:d0:9e:da:29:60:c9:
e6:09:f4:97:55:41:b7:8a:a9:4b:6e:38:8f:e2:83:e7:ed:e0:
b9:32:a0:23:49:46:d7:66:7d:e3:bf:59:97:eb:b4:04:63:0f:
3d:0a:5c:65:5d:85:c6:ab:16:c6:6b:be:c0:a0:19:25:85:71:
24:d3:f0:66:72:54:ca:4d:ed:f0:c5:7d:a9:ac:88:03:35:b2:
5a:1f:a6:7c:cd:0b:cd:c2:b1:18:50:71:fb:61:0a:74:f9:26:
17:11:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:53 2025 by rpki-client