Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: snasCHNxl51u0BzkH25cGyaUeRzSUh0m1QryXXwIBKQ=
Subject key identifier: 25:9B:78:B9:DE:E3:7C:20:54:C5:A6:8E:73:E6:8E:A8:3D:7A:3E:5F
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019653B79ADDEB8D67BEAECD7D91B41D768D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 072A
Signing time: Sun 20 Apr 2025 15:01:03 +0000
Manifest this update: Sun 20 Apr 2025 15:01:03 +0000
Manifest next update: Mon 21 Apr 2025 15:01:03 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: 91Xv5Roqn17Ck9n+9aLn8bxUbxIrmxcMCD8FbzthPXs=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:9a:dd:eb:8d:67:be:ae:cd:7d:91:b4:1d:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Apr 20 15:01:03 2025 GMT
Not After : Apr 21 15:01:03 2025 GMT
Subject: CN=259b78b9dee37c2054c5a68e73e68ea83d7a3e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:af:4d:fb:42:61:2b:16:2e:83:5c:48:4b:
3e:17:93:ba:0a:3f:04:03:15:c7:af:0c:e4:94:aa:
8d:66:c3:4d:46:68:6f:11:a1:a2:26:94:a4:5e:c0:
52:4d:06:36:46:fc:3d:93:14:ca:81:13:57:b3:88:
3c:6a:67:ec:f7:21:8b:13:3e:ac:23:4a:36:26:d3:
01:09:e8:f4:6e:f5:a9:b9:48:ef:87:86:80:c0:9c:
62:92:da:48:82:ba:9e:65:41:79:82:16:79:fd:6e:
df:a0:40:c2:e5:e8:c4:d2:10:76:54:95:eb:d5:d5:
a9:7a:41:4e:5d:12:5a:64:56:c1:f5:58:b5:83:ee:
31:4b:e5:ba:90:5f:c8:50:fd:ed:32:14:85:64:2f:
c5:7c:fc:ff:dc:ba:1b:bf:71:4f:96:b2:11:24:22:
57:b9:b8:18:cf:3a:10:bd:17:17:06:79:74:be:ce:
43:e3:51:1e:85:c5:d6:78:93:8e:a2:53:8f:ed:c8:
22:4e:02:1d:2f:e7:b7:d0:57:10:54:f8:a1:ef:4a:
3f:12:a9:9f:a8:06:ef:c3:7c:fc:d7:a5:04:42:96:
3e:75:cd:85:9f:7b:76:a2:a1:ae:21:f0:16:a5:24:
e0:32:22:8f:ba:28:c0:c9:7e:cd:ec:b5:0d:57:9f:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:78:B9:DE:E3:7C:20:54:C5:A6:8E:73:E6:8E:A8:3D:7A:3E:5F
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:55:c9:e5:bc:58:c5:db:68:f8:4e:7e:38:6d:f0:d2:6d:e3:
6b:7a:56:9b:41:98:fb:ae:56:c3:d9:28:91:85:3b:1a:21:96:
c6:c6:eb:c8:35:23:1b:8f:ad:08:07:ec:00:27:b8:ae:ee:f2:
7b:7b:03:aa:c2:1a:1a:f5:e8:0c:af:5d:20:75:b2:21:a8:a0:
6e:ab:47:da:8f:7f:e3:70:48:d9:d8:71:e8:0c:32:92:6e:57:
01:6f:50:d8:eb:1e:7a:0e:09:58:29:c3:e7:f5:f5:af:c4:27:
ca:e4:ec:08:7e:a2:28:c3:9c:19:69:a6:cf:44:af:3e:22:c0:
ea:0a:a4:35:c7:b9:58:77:d7:0e:6e:22:36:24:0d:46:31:a7:
bd:2e:b5:40:e4:c9:6c:43:93:13:5c:8b:d6:3b:0e:42:f2:25:
d5:b1:5c:9b:0f:d5:90:1b:ec:ce:6d:6f:41:57:0c:68:87:67:
cd:fc:eb:f6:e1:9e:4b:99:e2:fa:59:33:1f:37:7e:f6:3d:97:
b1:1b:fb:3b:5d:e9:0e:55:3b:7c:1a:ec:f9:07:af:d2:ba:f5:
cd:ec:1e:78:12:18:30:63:a5:77:0f:26:1e:c8:d9:98:d2:9f:
0e:78:73:76:b0:98:13:7d:36:9f:b5:f6:87:4d:3e:91:bd:28:
72:8c:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:28:53 2025 by rpki-client