Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: mKfFN6kVjm0gpNAX6KZkXcSBfRLL9aNYKLulkL8ESXU=
Subject key identifier: 11:3A:CE:3C:9E:32:D0:8F:2A:36:22:DA:5D:F6:9A:FD:22:54:4F:C3
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019654C9BD83292DEB8198DD2F05E9129C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0F63
Signing time: Sun 20 Apr 2025 20:00:29 +0000
Manifest this update: Sun 20 Apr 2025 20:00:29 +0000
Manifest next update: Mon 21 Apr 2025 20:00:29 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: i66g22LcLwct09Mg/i7D68TdHga2TJuBpidQ05xzHqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:bd:83:29:2d:eb:81:98:dd:2f:05:e9:12:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Apr 20 20:00:29 2025 GMT
Not After : Apr 21 20:00:29 2025 GMT
Subject: CN=113ace3c9e32d08f2a3622da5df69afd22544fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:84:c4:c0:c8:4c:bc:32:a7:15:54:b6:29:
e6:87:79:df:dd:85:e0:e2:ff:ee:b8:44:3f:fa:1f:
2a:56:52:77:10:ad:03:7c:79:d3:0d:de:23:08:a6:
d7:e0:5a:3c:c1:79:5f:6b:49:de:1d:00:90:c2:d9:
97:7a:97:00:48:ed:87:59:ed:3b:bf:5a:b8:52:35:
1e:6b:ed:1a:04:c0:8a:f7:71:d9:8d:34:da:fd:e6:
f3:c2:bd:44:85:49:d6:8c:8b:d5:19:ae:8a:3e:d8:
02:dc:73:5d:ba:b6:a7:d6:29:9e:0a:a2:2f:22:b2:
d8:83:d5:0a:cf:5f:0a:81:90:16:51:3d:45:21:93:
06:ad:1f:7c:e7:ad:8b:af:a7:d9:14:2c:0d:02:f2:
0e:4e:6e:fd:49:14:e0:c5:eb:f2:09:c9:98:2f:94:
9c:33:e7:de:d4:b8:1f:f4:7c:61:65:ba:b8:3e:b0:
fb:f7:89:c1:3f:19:03:90:cb:f8:57:73:0b:26:8b:
34:c2:b0:31:47:13:68:a8:da:5a:f5:0d:ba:4c:1f:
e8:5f:69:ff:b2:34:28:1b:67:c7:31:6c:25:3b:f6:
ee:05:b9:73:3b:63:3a:29:d0:04:dd:5e:52:cd:7e:
47:99:1e:d2:f2:79:ae:6d:89:90:2d:81:71:b6:08:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:CE:3C:9E:32:D0:8F:2A:36:22:DA:5D:F6:9A:FD:22:54:4F:C3
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3f:98:6d:ad:31:72:21:1c:db:bf:c2:f5:8e:65:46:0d:23:
3c:3f:f7:ff:b5:fa:ef:d4:1a:02:96:6d:07:11:99:22:fd:f8:
cb:c8:f6:69:7c:45:d2:8b:c7:da:6b:8b:9f:73:af:67:f6:54:
49:19:d7:d3:09:ec:13:b0:b4:ae:08:ea:c3:13:ef:68:6b:00:
ea:e0:55:22:4e:78:86:be:e7:67:8e:1b:9a:d0:fd:85:4f:06:
0a:f1:f7:36:cc:76:0a:26:2a:0c:cd:34:af:24:76:df:77:7e:
b2:ef:a7:1a:48:ea:55:26:31:0b:76:ab:a8:65:b7:8c:b1:57:
37:48:12:78:50:11:ea:60:1f:ae:b1:fc:eb:c2:c0:75:5a:98:
2d:f6:0c:c6:83:79:43:43:e8:41:49:97:bc:17:eb:ac:7c:e5:
13:2a:4f:ee:8e:9e:a4:71:50:5d:a0:a7:52:b1:78:b1:e2:f1:
44:fa:0b:d7:49:ad:b7:0b:10:31:20:21:51:f4:10:8f:65:e1:
e8:42:2c:00:b5:15:90:c0:43:4b:30:98:73:2a:b9:9e:a9:d1:
bf:a0:f7:03:ef:7e:0e:3e:a0:b2:e6:47:27:6f:d8:18:81:21:
83:4f:49:93:31:ae:ab:14:45:27:86:6a:d8:b8:dc:0f:f9:03:
ee:d1:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:30 2025 by rpki-client