Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: ZlH3/FQyUiYE8BDrhBLPpAM0TmZaflwZjD92qyD6WeA=
Subject key identifier: 9F:CB:E5:3D:C9:4D:C8:69:E0:85:80:9C:98:08:74:A2:F2:B5:B8:BB
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0196AC1F406BD8B778C565E6BC55CC5EAF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 01EB
Signing time: Wed 07 May 2025 19:00:51 +0000
Manifest this update: Wed 07 May 2025 19:00:51 +0000
Manifest next update: Thu 08 May 2025 19:00:51 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: dgwHceaUhRJgFDnyd67cZoI3W+INHjlNABPQ4maq5uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:40:6b:d8:b7:78:c5:65:e6:bc:55:cc:5e:af:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: May 7 19:00:51 2025 GMT
Not After : May 8 19:00:51 2025 GMT
Subject: CN=9fcbe53dc94dc869e085809c980874a2f2b5b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:b7:59:46:52:4d:2a:20:64:44:da:e9:df:
ed:c7:a1:5b:9a:08:bb:53:d8:c1:98:c3:e9:c4:bf:
14:24:03:8a:95:e2:c3:44:d5:58:18:19:ae:25:2c:
df:bb:e5:ed:75:7c:14:b6:62:15:16:a5:c2:d1:32:
0d:0a:41:6e:7f:7b:41:07:89:f4:ac:52:1d:81:0d:
23:90:07:20:4d:d4:0a:19:db:7c:7d:49:07:8c:56:
51:b7:a1:df:85:38:7a:68:e7:c8:80:71:d7:6c:a4:
03:44:e7:db:c1:83:7e:96:15:69:5a:6c:7c:70:58:
41:6a:cb:22:94:68:a1:41:8d:75:1c:97:dd:72:d7:
93:95:db:25:a0:78:5c:d0:ce:82:3e:38:f3:26:6f:
c7:36:43:ec:2d:fe:76:00:39:16:a9:e4:d8:c8:96:
16:1f:a6:47:6f:12:c4:ad:89:4a:e8:6d:ea:c4:ec:
a6:00:a5:90:79:0f:84:2a:ee:95:77:b8:fb:1a:0f:
be:4b:94:be:79:0e:d1:62:47:a4:11:6a:c2:ac:d0:
bd:ad:64:a7:b6:06:60:38:c0:64:b9:0b:66:75:00:
49:c5:cf:8c:4b:cc:f7:f4:7a:23:b3:b5:dd:a5:5a:
72:d8:2e:6f:76:54:53:1e:e5:86:c4:08:28:32:8b:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:E5:3D:C9:4D:C8:69:E0:85:80:9C:98:08:74:A2:F2:B5:B8:BB
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1d:70:a4:86:81:94:9b:95:be:77:b1:63:38:7c:01:c5:62:
6e:11:31:de:ec:9e:70:dd:a8:9c:c8:ab:bd:b0:09:12:e3:b4:
f5:71:79:73:61:46:6a:89:f3:f6:80:fc:ff:38:d0:b1:96:5e:
b1:8e:ca:84:ed:be:3d:bf:2b:c9:51:85:9f:01:2e:8a:72:76:
96:ef:fb:71:88:f6:a3:fa:96:6d:eb:f1:16:77:2c:dc:1a:bd:
3b:48:e6:39:c6:45:af:3f:0d:13:2b:08:44:9e:e9:1a:46:67:
43:f0:48:c3:06:6a:60:21:e7:be:79:bd:be:86:bf:34:bb:95:
68:9e:9e:19:5b:58:df:82:d4:63:b8:b6:5a:34:df:cb:30:32:
d6:21:bf:2b:7e:30:2a:b6:08:f0:3d:ee:f2:35:04:5f:0f:a0:
10:a1:83:27:56:80:db:3b:2d:c2:ae:2f:94:2a:7b:57:27:03:
74:17:48:c0:bb:1a:ac:c6:3b:4f:2b:c2:ec:a9:e5:af:bc:8d:
ab:8e:0f:eb:90:aa:53:ef:7d:55:78:0d:f2:cf:76:f5:05:13:
cb:97:d2:bd:0b:7c:28:b5:f4:16:69:19:12:9a:a4:23:c5:8d:
92:7d:68:78:e3:a3:03:b9:62:94:a9:da:f2:ba:7a:d9:54:fc:
4a:d1:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:05:44 2025 by rpki-client