Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: 8M0uiv+/XlVfEKHxquvWb/kFN266xEq7qInECjaEKY4=
Subject key identifier: C4:5E:AA:F5:EE:50:B2:62:EA:00:89:38:B5:3E:8D:88:D6:58:6E:73
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019656B80B05F74F465D1DCCD61FF15E4E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 05C3
Signing time: Mon 21 Apr 2025 05:00:24 +0000
Manifest this update: Mon 21 Apr 2025 05:00:24 +0000
Manifest next update: Tue 22 Apr 2025 05:00:24 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: GbGI4toLL2+03QINqc+x/L0+5g4X0273TRHccjb4de8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:0b:05:f7:4f:46:5d:1d:cc:d6:1f:f1:5e:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Apr 21 05:00:24 2025 GMT
Not After : Apr 22 05:00:24 2025 GMT
Subject: CN=c45eaaf5ee50b262ea008938b53e8d88d6586e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:4c:ec:1c:6e:c7:57:6f:82:e9:3e:23:39:
1b:de:5c:5c:34:6c:fb:3d:b7:53:97:53:56:3a:84:
fe:d0:5d:73:df:b2:2c:6f:3b:09:4f:88:41:75:e1:
e2:8c:7c:8a:7a:d0:e7:b3:87:56:0a:c9:b2:ff:fa:
c4:b7:51:0e:80:10:01:51:6f:02:b3:f1:bd:8d:05:
00:24:d0:16:c8:39:4f:f1:40:a1:d1:92:be:48:11:
f1:8b:43:d3:65:3f:8b:c2:b1:7e:d5:bf:8a:54:2b:
9e:c0:91:37:c1:cd:ed:87:f2:33:eb:c2:8e:73:6e:
a0:b7:7e:ed:90:b3:02:ff:04:72:6c:8f:c4:5d:73:
37:68:7c:27:24:9f:df:47:6e:6c:d9:c1:21:84:47:
91:ce:2b:78:8e:3b:5c:b7:5d:e0:26:14:c1:9b:ad:
6c:de:d6:4e:86:74:34:e6:aa:6c:9f:e5:96:c4:77:
97:ea:9b:b6:99:a6:07:4e:64:4c:82:39:45:d3:6d:
ad:95:d1:6f:0f:35:0c:bb:5b:07:52:35:3d:d1:b0:
d6:89:27:e8:c8:d4:5f:11:1b:ab:16:00:1d:f6:75:
23:78:18:90:c1:24:0d:76:8d:da:da:79:ba:d4:74:
13:f3:de:ea:ed:de:b6:87:c0:bc:6b:44:89:c2:70:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:AA:F5:EE:50:B2:62:EA:00:89:38:B5:3E:8D:88:D6:58:6E:73
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:51:4b:d5:06:f8:c2:92:36:0a:b8:17:60:2c:84:5e:0b:
87:ee:85:99:1e:78:84:f0:ce:d8:a4:d2:90:3d:7c:fd:c9:46:
1a:6c:56:dd:1a:1d:09:9d:76:1a:f6:d4:c3:10:f3:f6:c8:d4:
d5:02:3b:56:e5:83:22:d9:5b:d1:2d:a4:98:5f:32:e0:45:9a:
72:1b:1b:1d:70:48:d9:1c:bd:b5:43:4c:e9:fe:2d:ff:85:4e:
a8:4c:c0:d4:a2:6c:fc:46:24:78:08:cd:ea:56:35:3a:85:b1:
df:85:d5:c7:b9:52:6d:05:b5:56:9c:23:da:96:b7:cb:49:ef:
ef:8d:c1:28:d3:74:01:ca:f6:cf:eb:d3:44:7c:2d:94:15:48:
22:fb:0c:98:56:ae:10:a0:ce:19:d7:b8:9e:3f:53:b9:e1:c8:
c9:aa:75:7c:61:1a:a0:01:b6:99:e3:b8:a0:f8:69:5c:c6:cb:
f4:50:e2:5b:36:52:cb:01:86:b5:11:78:37:20:59:4f:fb:3e:
26:55:9c:03:35:be:6e:50:95:b1:f7:b0:00:e0:5c:e7:ae:26:
2c:91:e8:7a:00:26:5d:55:c4:60:1c:d7:46:6d:99:b8:af:19:
ef:d0:b9:2c:6f:1b:db:b9:8b:a7:dd:0e:70:ca:c3:a4:08:6e:
23:0c:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:52 2025 by rpki-client