Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: FcqVLD4ota1+pBup9lMf7JIIUehPkU3VD7qWDOf1yK8=
Subject key identifier: A8:49:9C:F3:53:C9:E1:A0:85:45:0A:03:C5:E5:C9:90:A3:E8:9E:81
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 0196B10E1BE20A7C92341955A1C66CE42EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 05EF
Signing time: Thu 08 May 2025 18:00:13 +0000
Manifest this update: Thu 08 May 2025 18:00:13 +0000
Manifest next update: Fri 09 May 2025 18:00:13 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: qXAY9DebGLokfqqrMXvRzi0ad3/ng5MB2cML1E5d8yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:1b:e2:0a:7c:92:34:19:55:a1:c6:6c:e4:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: May 8 18:00:13 2025 GMT
Not After : May 9 18:00:13 2025 GMT
Subject: CN=a8499cf353c9e1a085450a03c5e5c990a3e89e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:05:a5:4e:7e:11:7d:39:6a:86:6b:db:f7:
dd:56:3d:09:1b:80:d4:38:14:1b:35:26:6b:64:79:
c6:87:b3:51:bc:42:6c:3b:ad:c2:16:b6:84:3b:be:
3e:0d:b3:6f:b3:7a:71:fe:ac:c4:fc:9a:a8:c8:cc:
09:5e:09:f0:ae:43:b0:7f:00:fe:f9:a4:40:f9:78:
1f:43:17:b1:7b:fa:65:da:08:d5:25:a7:56:c9:0a:
af:3c:7d:99:a6:8e:82:86:ee:22:f5:9d:0c:b9:0f:
2e:34:c4:3d:22:8d:00:63:fa:84:f9:f1:ec:b3:40:
9c:1e:82:eb:25:de:d7:a5:34:84:e1:2f:e7:f3:96:
33:b0:71:45:82:79:97:1f:c1:4c:6b:60:44:6e:48:
f8:82:4f:21:99:7a:5a:f7:fd:18:fe:3b:6c:2e:f1:
62:37:73:fb:84:a1:6f:d8:90:17:ef:46:cc:13:4e:
81:05:f7:b4:ba:dd:8f:5a:39:20:61:f2:27:0e:c2:
4e:30:99:3f:51:be:5b:6f:cb:6b:ef:38:35:dc:4d:
38:f9:c9:2d:5d:79:5d:f7:d9:32:39:82:0c:cb:b2:
e0:78:d5:b3:75:3c:50:d3:c9:93:38:be:57:fc:c2:
18:34:2f:eb:a3:d4:d2:1b:a3:dc:b0:c4:c3:ee:9a:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:9C:F3:53:C9:E1:A0:85:45:0A:03:C5:E5:C9:90:A3:E8:9E:81
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6c:f7:f2:39:e3:3e:32:21:2c:98:e7:b3:af:3f:9c:e8:04:
2a:98:15:ac:81:e7:7c:cd:15:50:38:75:33:6c:12:52:e4:6b:
a0:30:49:f0:af:f7:45:a5:ab:90:de:e2:f5:47:c8:c0:33:bd:
24:80:67:37:a4:44:d4:f5:89:89:3d:4f:96:4d:42:a4:73:dd:
4d:65:da:d8:7b:a3:8e:44:6a:99:a8:d1:ba:1e:d1:53:f6:4f:
5e:8e:bc:bf:50:21:61:bd:ac:98:af:7d:7d:04:63:2c:86:d5:
fa:68:37:0f:e1:72:8a:44:4e:2f:9f:42:ce:dd:55:8f:46:94:
64:a7:84:00:d5:aa:ce:d2:1f:ab:12:f8:1e:27:6b:dc:20:63:
d8:79:fa:fd:55:64:00:33:07:73:57:c6:94:2c:3f:b1:e1:15:
c9:79:1a:71:9a:c4:ca:5f:f5:44:b6:6e:11:c9:38:58:9c:7d:
32:2c:e7:f7:23:4f:17:3a:16:a8:6a:f6:6f:bd:15:54:ae:0c:
34:31:ee:9d:99:ab:40:9a:b3:5b:b9:0f:b3:aa:4c:eb:91:a9:
21:d6:fd:06:27:d9:83:f2:56:25:88:34:84:f0:f9:1b:cc:09:
7f:b2:73:7c:86:35:93:fa:0b:d1:9d:60:92:70:32:7e:c9:73:
95:7b:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:54:24 2025 by rpki-client