Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: LhokEvPTrH/pgq9aQottfKAVi/pAg2LhMWu5LSWYiMw=
Subject key identifier: 52:87:74:52:5A:BA:16:7B:F8:A5:E5:17:03:31:A1:04:D4:1F:92:C5
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 0196556ED8F798BD3094D51218F0D3835CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 0B8E
Signing time: Sun 20 Apr 2025 23:00:49 +0000
Manifest this update: Sun 20 Apr 2025 23:00:49 +0000
Manifest next update: Mon 21 Apr 2025 23:00:49 +0000
Files and hashes: 1: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (hash: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: HOGOMWxDVV63X1VSrdd1Z4UCOyqnelDKYJe+TesoNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d8:f7:98:bd:30:94:d5:12:18:f0:d3:83:5c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Apr 20 23:00:49 2025 GMT
Not After : Apr 21 23:00:49 2025 GMT
Subject: CN=528774525aba167bf8a5e5170331a104d41f92c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:7a:c9:c8:a2:14:2e:f1:a3:75:c9:f5:22:
8e:74:da:af:79:c2:84:d2:59:b4:d6:d8:75:90:00:
11:0e:4d:89:fa:01:81:ec:d3:6a:29:ea:6d:36:70:
fc:78:8f:aa:e5:31:2d:00:3a:ec:96:9a:ce:8b:e4:
fb:40:db:0f:54:32:cc:8d:98:19:fb:d7:e3:f6:60:
ee:2c:7d:01:83:6d:4e:4b:3e:f2:ad:ed:00:1f:48:
08:47:b5:2e:68:25:8c:09:0a:c4:b5:61:09:63:85:
71:8a:47:82:19:c9:0b:b8:1e:fb:c5:56:53:55:39:
28:9d:f7:18:c1:d9:2c:e4:7a:3a:12:a5:0b:2c:38:
3e:e4:61:fa:47:ea:d5:2f:74:c0:48:51:71:bb:59:
2b:9a:e5:f8:a1:e3:c4:2b:3b:b0:a4:01:8d:61:43:
05:c2:3a:dd:cd:95:6b:94:80:a0:78:89:00:c0:d4:
07:b4:7e:24:08:71:4c:da:42:ef:a2:0e:63:9c:1a:
09:c1:18:f3:2e:5a:5f:6a:f2:39:27:76:9a:bb:da:
9c:d0:04:91:2e:76:d5:fe:32:98:5e:ff:64:92:f0:
4f:71:77:a1:9f:84:a5:ed:45:2d:3d:c5:c2:1e:3b:
6f:cf:b8:13:cc:14:59:6c:0b:2f:cc:d1:d1:1a:01:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:74:52:5A:BA:16:7B:F8:A5:E5:17:03:31:A1:04:D4:1F:92:C5
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fd:15:48:d1:b7:03:3a:ef:83:a3:ba:6e:f9:94:fa:b6:14:
63:01:26:bb:92:28:4d:c8:5b:b4:aa:6a:f3:92:9a:b7:26:a0:
7a:46:dd:c4:be:a6:45:6e:db:d8:f4:42:6f:51:66:99:3c:6c:
00:73:5d:1d:4d:b0:3c:2c:5e:7f:26:11:39:51:95:43:f9:cc:
85:81:99:1e:9d:e3:11:f7:c5:30:c3:2f:3b:63:ba:62:3d:77:
7a:7b:a0:61:ba:7f:b5:98:cc:a6:a0:35:66:a3:c7:02:8d:17:
cf:7f:41:f9:64:a1:13:fb:16:8a:3d:9e:24:2d:e0:95:55:dc:
df:55:96:65:ab:95:18:28:7c:f4:da:fc:c2:ca:dd:16:52:c4:
9f:53:cf:93:32:03:44:68:b3:9d:cb:ba:a3:51:29:9e:80:f6:
8c:98:13:85:3b:d3:5a:54:22:8b:21:7d:17:57:d2:2f:a5:36:
42:dc:ef:6c:75:7c:69:3e:dc:83:db:b5:4e:64:25:aa:72:c0:
37:5a:8b:23:33:2e:aa:b3:07:5f:37:32:ee:59:66:df:a4:08:
3f:88:18:08:de:86:52:ae:1e:25:23:b1:08:aa:7a:96:d8:dc:
0e:19:fd:ea:e3:d7:c3:b3:c7:76:a2:48:d5:34:24:2e:9e:17:
18:fe:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:30 2025 by rpki-client