Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: 2kLnCA8DKNj9J98KCTQpT03JNgF5UB2d25MvT/4KiZk=
Subject key identifier: 17:59:EB:65:8A:79:B9:49:C7:D3:7E:D4:09:E5:7B:E1:F6:94:97:02
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019629A9380E32244662D1E94F472807F6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0566
Signing time: Sat 12 Apr 2025 11:01:17 +0000
Manifest this update: Sat 12 Apr 2025 11:01:17 +0000
Manifest next update: Sun 13 Apr 2025 11:01:17 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: jOerQhbyFXgG5teiV76Aekx1mEEjOMJigaiQyhgaqJo=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:38:0e:32:24:46:62:d1:e9:4f:47:28:07:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Apr 12 11:01:17 2025 GMT
Not After : Apr 13 11:01:17 2025 GMT
Subject: CN=1759eb658a79b949c7d37ed409e57be1f6949702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:c3:bb:60:6e:0c:eb:2f:03:34:5b:d4:74:
67:3c:d6:be:f6:5b:78:dd:05:4e:67:25:f3:31:90:
cf:cf:f3:d5:0c:89:51:fa:c5:cc:90:5b:33:bd:08:
32:4f:7a:2a:5a:0a:2c:b9:d6:ca:1f:c2:e0:ec:70:
16:d0:3f:7b:1c:5e:ed:71:6e:e8:fb:94:e1:ff:70:
83:cd:4d:c6:37:b0:d9:52:d7:22:ac:f4:e3:9e:0d:
da:da:8b:e3:e2:e8:73:07:71:13:39:d3:83:79:b8:
22:41:c8:c2:b7:92:21:6e:60:8d:3c:87:65:39:cc:
16:a0:74:42:71:a7:11:ad:f7:10:6f:5a:d5:86:f3:
36:3c:0a:54:87:db:02:78:63:ea:5e:ad:fa:db:de:
3f:e0:d3:7a:dc:83:87:fc:8a:7a:30:6e:88:5e:64:
54:b3:27:d4:7d:27:bf:dd:8e:c8:96:5d:a1:a8:ac:
54:8f:e1:e6:70:89:25:ce:5e:ad:7c:5a:39:a7:a7:
1a:b8:27:1d:7c:de:4c:a6:83:df:d6:61:b1:38:8a:
04:d3:e0:d2:3c:c2:c5:6a:74:88:47:b3:d7:88:ce:
f3:e6:48:6a:0c:1b:88:8f:e2:35:3d:b8:1b:28:97:
74:c0:00:58:56:1d:05:28:47:45:14:38:c9:15:f4:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:EB:65:8A:79:B9:49:C7:D3:7E:D4:09:E5:7B:E1:F6:94:97:02
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c5:37:d9:8c:75:21:ab:b1:86:3b:68:c5:0f:15:fe:ce:03:
8b:57:5e:33:15:78:4e:1e:02:67:19:2a:99:a4:27:fa:c2:e5:
15:56:9b:3c:e8:b1:0a:31:26:d2:b7:1f:6e:b2:d4:e3:12:98:
9f:a4:16:44:d9:e9:db:90:dd:ed:70:3d:5f:c9:b8:48:79:87:
5f:fa:17:32:24:0d:53:35:07:60:30:9d:08:0c:41:3e:8d:f8:
d3:86:4b:6e:56:97:05:d5:81:49:0e:c6:6a:b7:b3:fa:ba:e3:
ad:0e:6a:33:86:97:eb:c6:6a:1f:69:f1:a0:66:b5:7f:6f:54:
31:23:7f:61:22:9a:54:1a:06:d4:bc:cc:04:23:f5:64:d7:e6:
9b:96:3a:03:69:aa:a7:4d:cf:90:af:34:3d:9d:e6:ce:e4:3d:
98:87:58:6d:e6:ad:10:4b:3d:48:f6:d7:e1:2c:18:84:32:62:
72:6c:e3:ba:86:2b:eb:57:4e:1f:83:91:3f:f6:5f:8f:c2:f0:
f5:d4:9f:59:eb:3e:11:7d:c4:3b:e8:36:2e:c8:d3:d9:be:03:
dc:d1:2f:c3:c3:aa:53:34:f3:33:82:a7:1b:a3:70:de:bd:4f:
fd:3f:73:5a:1f:d6:11:98:30:29:9a:45:ca:89:89:ea:fb:42:
e1:dd:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:29 2025 by rpki-client