Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: nQsiRe9UmZdivckXf2sUmOXyOyytC+Lw7xxTDrPaPv8=
Subject key identifier: 0E:71:9B:98:BC:21:E3:09:A7:2B:E9:3B:74:CF:DF:37:A3:61:95:52
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 019652DB8D46EDD63666C420068009204FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 11BE
Signing time: Sun 20 Apr 2025 11:00:42 +0000
Manifest this update: Sun 20 Apr 2025 11:00:42 +0000
Manifest next update: Mon 21 Apr 2025 11:00:42 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: c740ythXnIWU7Hn11tm6VGcyd+7E8QqgMJcjvam3QIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:8d:46:ed:d6:36:66:c4:20:06:80:09:20:4f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Apr 20 11:00:42 2025 GMT
Not After : Apr 21 11:00:42 2025 GMT
Subject: CN=0e719b98bc21e309a72be93b74cfdf37a3619552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:61:74:4c:e5:0b:1c:29:df:37:ae:84:de:
26:ef:05:f7:c8:d6:74:b3:33:0b:6d:c5:1e:f3:1d:
bc:42:49:c7:f7:18:fe:81:3a:f2:05:49:b5:fa:4a:
77:1e:bd:25:30:93:85:eb:ed:ec:c0:77:9f:4d:d9:
4c:c6:26:34:6b:56:f9:91:ee:c5:75:8d:11:c0:bf:
87:4a:77:61:aa:d2:24:0b:74:93:dc:83:e8:1c:a7:
69:00:9d:d0:5e:8f:be:e2:2f:ce:64:b5:90:a9:86:
8c:2d:e4:e6:7d:36:5a:a9:8b:09:b1:14:9d:d5:a2:
44:9b:56:89:85:b5:bf:c4:a1:6f:67:ea:44:32:ff:
70:ad:2a:17:9f:b5:20:cb:81:80:ad:12:fb:e5:12:
5f:3d:e7:0d:15:47:93:05:c7:1f:8d:d5:df:57:bd:
68:c8:c5:7e:6a:61:1e:c2:4f:51:40:ba:d6:5f:30:
6e:34:a9:b2:16:a1:e2:06:1b:d8:90:e7:c7:f3:b2:
bf:1f:c4:5b:4e:8a:eb:ea:3d:1a:40:f8:4d:d6:d4:
2e:72:db:fc:17:24:5d:a9:f9:0e:a9:0a:56:55:4d:
74:43:ce:a5:7c:9f:e5:12:af:83:1c:91:eb:43:3a:
85:6c:51:f9:44:c8:2a:0c:4c:33:19:16:5d:1e:0d:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:9B:98:BC:21:E3:09:A7:2B:E9:3B:74:CF:DF:37:A3:61:95:52
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:da:2c:6e:00:f9:2a:79:71:4e:79:7f:48:a5:f9:93:9b:
9b:8b:8e:8a:3d:2d:f4:76:c1:83:6b:6e:a7:ec:81:06:c6:65:
b9:f1:76:9d:0a:1b:75:84:f1:91:50:22:62:80:80:00:24:3d:
cc:17:ba:54:a3:8e:43:99:ad:1a:ff:77:3d:5f:4d:36:1a:1f:
dd:bb:e0:08:a9:e0:48:ab:c1:8d:a0:5b:b6:89:63:58:28:08:
25:15:71:a9:76:6b:ed:b1:e0:c5:44:e3:59:a3:10:26:42:7e:
62:4d:97:ac:7a:6c:5e:3a:ae:01:bd:61:f2:bb:34:8a:a7:71:
67:3e:b2:a7:fc:1c:5a:44:57:c1:93:88:3b:51:24:02:92:76:
41:ca:b0:7b:c0:43:53:e8:4b:e3:de:aa:7d:6d:82:3a:35:d2:
15:d1:e6:61:03:64:a6:5e:ab:7b:39:41:8f:ed:6b:b3:9d:d9:
ef:2e:f3:cd:04:03:9a:3e:19:f1:5b:82:63:c0:2e:c3:b7:3d:
3e:ea:76:af:c9:d5:b9:90:81:70:72:63:46:9a:e0:8e:fe:07:
5a:07:db:76:ab:82:95:b3:56:36:62:05:ec:70:7d:57:ef:3b:
81:95:ae:ab:20:c3:15:9a:1e:33:47:b6:d1:dc:e7:93:cf:5d:
3e:4f:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:57 2025 by rpki-client