Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: cjLH4DWZlSHDFeYVucFzwtrdjM+xYx4T7spqHo/9h4w=
Subject key identifier: F6:3A:2F:AF:E0:1D:E0:0F:47:9C:34:F2:B5:AB:24:B9:4E:23:0B:8F
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 0196B747991FB68756E0F711D78E2913EEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 027E
Signing time: Fri 09 May 2025 23:00:44 +0000
Manifest this update: Fri 09 May 2025 23:00:44 +0000
Manifest next update: Sat 10 May 2025 23:00:44 +0000
Files and hashes: 1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: PeXUumjoc+a81yX5V1zTXur97qODyR7h0cjJu4Y5T3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:99:1f:b6:87:56:e0:f7:11:d7:8e:29:13:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: May 9 23:00:44 2025 GMT
Not After : May 10 23:00:44 2025 GMT
Subject: CN=f63a2fafe01de00f479c34f2b5ab24b94e230b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:19:fb:88:ac:56:ad:ae:4b:f3:cc:b6:92:
03:85:2d:d9:04:33:3e:65:56:21:2b:29:30:d9:ba:
36:60:9d:66:c4:3e:ff:5a:9d:e0:eb:40:c5:fe:69:
fd:49:e6:63:22:80:32:1b:36:8f:21:74:a2:16:6b:
c3:47:3c:4a:c9:d4:f7:83:6e:bb:ad:19:a4:c9:9f:
a7:32:f9:96:d6:a3:df:0b:9d:82:4a:57:56:6c:06:
6e:5f:ab:18:36:94:d8:53:1a:24:7b:84:f6:40:a3:
5f:7b:aa:b9:3b:f8:03:2e:f1:80:67:bc:7e:6b:8f:
a6:89:f4:a4:c8:e4:93:61:0d:c4:76:f2:b4:a2:a6:
7e:f8:0b:54:47:38:a3:ff:d0:8e:28:15:7c:b4:65:
06:d8:43:45:b1:ea:25:f6:cc:ef:47:b2:23:03:b6:
1c:b5:b5:d4:f5:2d:2b:2f:cd:28:ec:e5:d5:31:38:
de:de:8b:5d:90:ec:71:ea:4e:05:e2:e9:22:93:3a:
b6:0d:28:3b:3a:7b:98:9a:c0:bb:1b:2a:a4:1b:ce:
98:a9:2d:a4:b1:e0:d4:e8:6e:00:6a:bf:37:93:52:
4a:b9:5e:0a:02:8c:3c:c0:aa:7c:79:7d:2b:6e:34:
a3:d5:26:32:8f:12:af:0d:51:cb:ea:39:97:c3:ac:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:2F:AF:E0:1D:E0:0F:47:9C:34:F2:B5:AB:24:B9:4E:23:0B:8F
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:8c:c4:10:9a:d4:0a:65:4d:90:52:fd:d6:ba:4e:f0:4b:
84:13:30:34:65:fb:00:be:ce:15:f9:68:3e:24:ff:be:da:b0:
6f:fe:ac:41:53:38:5a:95:f7:2c:f1:9e:7e:b3:69:d5:50:53:
68:ea:ad:e5:07:6b:0e:5f:ca:47:20:55:07:73:b7:6a:22:92:
e2:31:0c:90:4a:41:dc:e5:10:a2:36:ce:4e:a5:a2:dc:92:4c:
3b:ea:22:f9:9e:54:68:16:b9:93:56:09:94:ea:63:87:f2:7f:
6f:9a:12:87:d3:c8:e0:69:ba:ee:d4:bc:cc:67:d9:33:16:77:
38:66:a1:fa:25:0c:34:fe:e9:3d:66:4e:28:41:9d:51:4d:61:
8d:7b:e8:3c:8e:38:5b:6c:72:d4:3b:1a:25:20:b7:be:cf:66:
27:63:e8:25:fc:f2:b7:7a:e4:f6:eb:0c:d6:d8:09:32:fb:7a:
0d:e9:0b:01:0f:0c:3f:df:d7:61:18:0d:7a:41:d6:a2:35:32:
e6:bc:8b:23:fe:9a:c6:dd:9a:36:cd:34:58:ba:e7:df:3a:5f:
7e:84:68:c5:4c:91:a9:b1:fb:16:b9:0f:87:d7:29:e9:77:a8:
c7:a9:74:ec:a5:09:5e:d9:9a:b7:fc:82:5d:fe:ba:58:18:bb:
ef:e4:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:11:07 2025 by rpki-client