Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: 0qQnD4Pd5QH1/rWX4ZKCiAC8VO6gqYSg5WZwA3T8+iI=
Subject key identifier: 80:0C:08:2C:6E:05:2C:0D:A4:5D:C4:77:56:2D:02:7D:C2:18:17:D7
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 01964D0FF17393CB9C4BEF3BF383D9608AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 05A5
Signing time: Sat 19 Apr 2025 08:00:12 +0000
Manifest this update: Sat 19 Apr 2025 08:00:12 +0000
Manifest next update: Sun 20 Apr 2025 08:00:12 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: +ajniainp/HAaRGJMb3sGgyLSiFIJNIehuOgMgwmdBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:0f:f1:73:93:cb:9c:4b:ef:3b:f3:83:d9:60:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Apr 19 08:00:12 2025 GMT
Not After : Apr 20 08:00:12 2025 GMT
Subject: CN=800c082c6e052c0da45dc477562d027dc21817d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:dd:e9:3c:9c:9a:bf:78:c8:08:bb:9b:37:
be:72:86:5f:2e:f6:e6:64:6d:cf:2d:b3:39:78:66:
24:71:a2:e3:2a:8a:39:2c:8f:bb:41:6d:1c:0f:0c:
40:73:a3:b1:63:3e:cb:c9:c5:a7:b6:53:c0:ce:b0:
82:1f:fc:10:83:86:88:b7:e0:d1:f0:a4:d0:61:5d:
3a:e5:99:39:b9:e4:4d:cb:93:db:93:80:39:40:cd:
c6:a7:33:b8:75:82:45:15:78:39:4b:1b:0d:42:92:
a5:84:bf:57:87:6b:01:5e:97:44:68:0d:69:c5:61:
98:bc:cd:65:a1:dd:03:05:e4:93:5f:95:4c:dc:37:
0d:11:91:0c:e8:a3:05:0d:48:55:ef:b0:20:94:a1:
47:b8:45:c4:87:a0:3f:ce:02:6e:20:18:25:e1:81:
15:5a:9e:6d:03:72:52:ea:61:98:eb:a2:54:f0:09:
63:ef:00:ab:17:20:47:2a:e0:c3:6b:ce:f1:81:05:
17:31:29:0b:5a:58:00:d2:a1:9b:2f:2a:47:f0:ac:
6e:02:06:eb:f8:28:88:eb:16:83:f0:d5:74:11:99:
1b:e0:61:57:9a:43:bf:d8:fd:f8:99:8f:b7:95:2c:
dd:e4:2d:3c:6c:c5:0d:f9:28:a9:aa:ba:d2:e3:ce:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:08:2C:6E:05:2C:0D:A4:5D:C4:77:56:2D:02:7D:C2:18:17:D7
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9a:3e:13:f3:ad:3c:6e:85:19:10:e8:0d:13:3f:07:93:4e:
f2:4b:e0:35:b0:b1:2d:6d:0d:df:1e:46:eb:fb:ba:ee:86:b8:
53:d3:4f:93:8c:0b:ef:a6:ad:ca:dc:cb:16:71:77:f4:4e:4a:
ea:a9:e4:dc:6f:90:f9:97:67:a8:44:07:01:b4:a0:55:a7:63:
e7:8f:60:cc:26:db:8c:51:c9:a5:41:53:95:56:7b:88:f3:b4:
5a:65:e7:26:65:d3:58:fc:3b:1f:8f:f4:5d:12:db:9f:f9:3f:
d1:62:d0:64:b4:a4:11:17:47:41:ca:41:fa:fe:47:5c:bd:f7:
7c:be:43:8b:b9:fb:70:d8:d3:d6:82:01:58:f0:71:df:01:be:
73:92:69:9e:fa:24:5c:7f:29:fb:1f:a1:13:e1:09:74:95:d7:
1a:c7:af:30:00:4f:9d:6b:86:37:a2:6e:41:01:3d:46:8c:1c:
b5:9a:09:9b:9f:4d:cf:de:29:38:f2:8a:be:91:7e:ea:e7:cd:
9f:d2:64:5e:64:19:13:db:6a:d1:0b:c4:5e:37:b4:c3:9a:f3:
9c:4a:1e:8e:86:1b:74:16:01:16:4d:0c:eb:1a:3a:dc:ca:d8:
1a:70:2f:36:1a:ae:16:fd:38:8c:b8:79:bb:ca:74:6b:09:d6:
cd:1a:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:38 2025 by rpki-client