Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: LEv7S9kT9RH9EYWDIc25gTg0QZeheueGnGyqEozuSPw=
Subject key identifier: D6:AC:3B:45:02:89:7B:C4:61:F9:72:5F:3E:2D:41:B9:DF:D0:93:75
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 019642FA89C3C297970EC281F016F9C36C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 064C
Signing time: Thu 17 Apr 2025 09:00:37 +0000
Manifest this update: Thu 17 Apr 2025 09:00:37 +0000
Manifest next update: Fri 18 Apr 2025 09:00:37 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: IlR3RBFtsGEnKtA31DiKDbG9HI1DeJOTe0tUFQlDaqo=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:89:c3:c2:97:97:0e:c2:81:f0:16:f9:c3:6c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Apr 17 09:00:37 2025 GMT
Not After : Apr 18 09:00:37 2025 GMT
Subject: CN=d6ac3b4502897bc461f9725f3e2d41b9dfd09375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:dd:b4:0f:65:7d:c6:f8:d8:9f:26:2d:b6:
87:8d:26:00:e2:6e:95:76:cc:ad:02:49:89:65:0e:
54:06:41:a6:fc:17:ec:3d:78:bb:e2:ae:8a:f1:37:
6e:e0:c8:90:1f:f8:50:3f:d5:cb:d4:38:9d:1c:46:
f0:4b:8a:53:9c:75:d7:5a:0b:fc:30:49:f7:bc:58:
7d:87:12:a3:be:7c:07:80:d4:a7:14:cb:35:76:cb:
61:df:0f:22:2f:7f:1e:af:22:a0:75:98:0c:97:ba:
87:b1:02:c3:36:9e:82:f1:be:a4:df:9c:4d:0a:25:
3e:6c:53:1c:2c:fe:38:80:d2:ac:8e:53:4f:19:d4:
46:f8:7e:5a:81:cb:1d:04:06:9b:98:1b:cc:6d:db:
ae:15:fd:7d:84:cd:96:38:33:b4:36:a6:fa:db:55:
c3:ba:0d:a7:c9:55:c5:77:77:e1:68:ed:33:19:f2:
e8:a7:a4:8c:a0:c7:ce:cf:61:4b:83:87:74:2f:6c:
f9:a8:f9:3d:93:d9:6d:1e:b1:d0:fe:9f:34:78:de:
0c:fe:35:22:b8:8e:e0:92:01:ef:b2:e3:e1:11:c9:
30:23:59:0e:6a:d4:96:95:9b:4b:27:0f:9a:48:f6:
56:e1:9f:40:ca:1a:2d:6b:d0:db:6f:08:94:4d:17:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:3B:45:02:89:7B:C4:61:F9:72:5F:3E:2D:41:B9:DF:D0:93:75
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:8b:09:51:5c:7d:ac:92:87:69:1b:2e:53:84:8b:2a:a7:
65:3b:13:f7:50:34:7a:33:9b:86:3b:52:7c:f6:b6:04:3e:55:
c7:13:8e:70:e9:ec:16:a3:99:24:e0:b4:d1:f4:59:72:53:69:
a9:32:af:19:fb:6e:43:eb:d6:6e:b4:59:f5:8c:92:0f:f8:49:
69:74:b7:af:3a:a3:14:86:83:00:16:95:6d:8e:9c:bc:49:e3:
ad:71:48:80:ac:54:05:0e:18:7f:a1:aa:43:40:20:3c:bd:76:
67:e2:4d:f8:83:9c:4d:cf:13:6c:2d:a6:b8:1f:b5:f8:e0:48:
64:d9:1a:a2:d8:57:1b:a7:e8:e9:1e:4f:fd:87:09:58:98:04:
e6:b0:d4:90:90:a9:f8:ee:d8:98:f3:4d:7c:83:0a:d1:6d:29:
96:05:ae:ca:db:52:15:70:d8:4f:bf:d1:ab:c3:80:9b:ae:b1:
bb:0a:81:26:2a:c6:87:e3:81:37:41:04:9e:eb:19:a1:79:e7:
9d:15:41:05:9b:f9:6b:9a:74:c6:c1:20:23:3d:71:fd:57:8d:
73:d2:f3:ba:39:8f:5e:be:55:9f:f1:02:7c:28:da:21:6d:64:
10:25:83:ef:7e:eb:16:d5:dd:d6:b3:b4:6b:98:5d:74:9f:d5:
db:0d:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:31:41 2025 by rpki-client