Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: dwWns1pU/VQf+p8i55ja3eENdWtIxKL43vYWDlV6fcI=
Subject key identifier: 84:AE:76:6F:09:0B:75:AD:49:78:E1:C2:9D:C9:B2:F9:0D:64:A6:20
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 0196553879F18753567C068077D29DF4DE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 10D5
Signing time: Sun 20 Apr 2025 22:01:26 +0000
Manifest this update: Sun 20 Apr 2025 22:01:26 +0000
Manifest next update: Mon 21 Apr 2025 22:01:26 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: QSlsRw4UlHiYI+AjCc148hT6TTGzEL54ec9M7gE6Wsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:79:f1:87:53:56:7c:06:80:77:d2:9d:f4:de:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Apr 20 22:01:26 2025 GMT
Not After : Apr 21 22:01:26 2025 GMT
Subject: CN=84ae766f090b75ad4978e1c29dc9b2f90d64a620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:52:3c:3b:5d:56:52:1f:f7:fb:35:b4:5d:
e3:f4:bb:6d:83:d6:4e:cc:a0:5d:ad:2e:d0:8f:e5:
47:c7:50:30:62:44:25:7e:f3:61:3b:69:a5:ec:c4:
96:a4:10:f5:81:b5:c3:90:0d:86:78:c8:01:13:f6:
9a:81:28:c2:36:03:81:e7:34:19:22:72:71:78:38:
b4:a0:f2:3e:42:cd:0d:69:9f:55:02:42:35:f3:29:
73:58:76:34:28:7b:b9:42:c7:63:45:c5:b4:a5:e4:
74:e8:81:02:6b:07:f9:a5:71:64:12:9a:61:cf:a0:
85:c7:16:09:21:62:de:89:7c:fb:73:40:6b:ae:49:
83:98:ca:ce:b0:15:06:a8:69:08:e1:ca:c7:82:8c:
a9:09:42:67:84:1a:63:39:24:07:b8:64:bd:32:49:
46:a4:82:ec:07:e1:af:5b:0d:31:c8:bf:59:1a:8d:
9b:d9:6f:d1:5c:79:c9:e6:1e:f5:0c:77:95:7e:58:
9f:99:41:de:27:36:3c:bf:06:2e:84:d8:1c:f3:65:
7a:28:5c:2e:ad:36:5a:01:7d:e5:f4:d9:c6:ad:ce:
d3:e1:7f:8f:6d:55:9a:05:c1:d5:b7:b2:e2:e5:d2:
1f:e5:0f:48:37:ef:80:67:e6:d2:f4:ea:db:e7:77:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:76:6F:09:0B:75:AD:49:78:E1:C2:9D:C9:B2:F9:0D:64:A6:20
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:45:9f:bd:2e:57:91:37:39:ec:db:ad:98:7a:1f:fe:51:
ba:eb:0d:8b:8c:b3:0c:62:ff:12:51:d5:7d:01:34:b6:21:90:
62:bc:2f:45:f8:5c:a4:c1:c7:01:ec:07:95:60:4b:75:1d:68:
e0:ab:fa:7c:31:a6:0f:ca:3e:2b:7f:15:63:e3:7b:e7:8e:eb:
6d:8a:4f:6d:4f:c1:09:1a:ce:ea:95:c9:cf:c3:80:bf:18:fd:
cf:ab:37:d9:36:ec:b1:08:14:d1:09:da:e1:59:90:a6:9f:f7:
5d:3d:7b:c1:62:07:6b:33:88:cf:c0:21:20:ca:05:3f:f3:2f:
f7:a8:63:74:3c:8d:51:4e:33:16:f2:2d:cf:1b:06:75:14:e6:
d0:d4:f5:b5:d1:a0:3f:8a:cf:18:d8:25:1f:3f:09:b3:c7:74:
dc:70:7a:e2:21:19:6d:be:86:c8:5e:ad:ee:d6:6a:e3:03:cc:
18:47:7e:3c:56:c9:74:30:fa:d2:9a:07:82:f4:89:6a:d9:73:
fc:59:46:0d:6c:2b:27:ed:f7:f9:f8:3b:34:24:00:44:f0:ec:
29:bd:b1:6c:f7:e9:12:93:1b:51:00:64:22:f3:99:ca:97:cd:
f9:10:73:d1:a4:87:f9:01:5e:f3:5a:dc:6a:3f:af:2a:69:39:
4c:29:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:45 2025 by rpki-client