Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: 9RCtN10IoH2MGIJO6siqldWAAA7q8uid5YXFjAgGIHA=
Subject key identifier: 72:30:F7:8A:37:AA:44:18:BE:96:8E:F2:21:33:96:9D:79:A3:A2:08
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0196CC858754E5351C33F58DF19A5A38F89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 0FD9
Signing time: Wed 14 May 2025 02:00:24 +0000
Manifest this update: Wed 14 May 2025 02:00:24 +0000
Manifest next update: Thu 15 May 2025 02:00:24 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: WYP0nmBynkWgsBJaUjB4mwHfDXc0lLd/N23eWq1TRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:87:54:e5:35:1c:33:f5:8d:f1:9a:5a:38:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: May 14 02:00:24 2025 GMT
Not After : May 15 02:00:24 2025 GMT
Subject: CN=7230f78a37aa4418be968ef22133969d79a3a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:5d:29:b6:e0:82:68:d6:86:d4:db:1d:04:
9a:26:6c:8a:54:fa:0e:f7:11:33:24:2f:29:38:89:
21:73:27:11:d7:85:1c:36:ca:7c:57:78:60:34:b2:
83:85:5e:f7:c4:82:f2:65:8a:41:dd:6e:91:98:be:
69:ad:46:39:59:c2:08:84:80:4a:95:5f:3e:dd:ba:
c8:ea:ae:75:00:3f:89:0b:fe:5d:ec:f5:25:9e:17:
51:de:b4:a7:b4:08:24:2f:22:80:16:6d:f4:66:b8:
51:fe:52:b3:5a:6a:89:42:b0:71:8e:2c:2b:ff:86:
d3:f2:52:3f:74:1c:e5:85:75:3b:56:6d:cf:74:c9:
56:98:13:70:00:2f:c6:c8:c0:6c:57:4c:e5:14:6f:
ee:ef:bb:3f:21:c7:f9:6f:3c:49:81:bd:ba:1a:ba:
26:f2:1f:09:25:37:57:fd:15:7a:13:5e:26:3e:56:
b7:bc:34:33:66:2a:74:b8:70:a0:04:9a:c2:64:93:
d9:ae:9f:e1:dc:01:14:e6:10:52:3a:1f:e4:fd:e5:
82:b5:b0:ef:8b:0d:c6:54:02:aa:14:16:f4:5f:9e:
0e:a8:33:c2:1b:d1:22:9c:be:e9:84:c1:1c:a1:28:
5d:c9:71:33:9e:94:3d:12:1a:e2:60:f1:c9:27:a8:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:F7:8A:37:AA:44:18:BE:96:8E:F2:21:33:96:9D:79:A3:A2:08
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a6:69:0d:bf:31:95:41:bb:68:1c:96:73:9e:ca:a1:04:38:
10:13:66:62:06:8d:92:e6:c5:0d:3e:4f:c4:d3:4f:c7:6a:68:
a3:78:49:84:4e:91:86:b5:44:d6:f3:02:03:2c:ee:79:d5:3a:
4a:a8:45:8a:45:98:58:d4:09:14:3f:f4:d6:28:9a:8f:c3:2b:
73:9a:a6:62:a7:83:d1:a4:08:20:aa:67:7c:a7:aa:f7:2f:50:
b7:c1:55:b3:ed:ee:bf:1b:16:b0:a9:93:1b:89:8e:04:ae:c6:
fe:22:b0:5c:2d:ff:9e:62:bc:ff:be:d1:f3:4b:20:3c:d4:fb:
56:86:b2:01:31:e5:ae:95:75:f5:09:55:3a:72:75:bf:71:45:
70:7d:6d:bb:0a:16:57:22:99:c7:5a:20:3e:83:49:dc:34:de:
0b:e9:17:af:ed:ae:88:17:ea:57:8a:6c:61:c9:cc:30:14:d9:
09:59:9f:1f:22:94:51:95:3b:a1:80:eb:0b:5c:67:75:66:ae:
6d:13:1e:99:5c:42:52:2a:71:75:49:e5:0f:d7:18:56:52:3c:
c6:69:95:73:d7:2d:a7:4e:36:1c:81:64:24:2c:2e:3d:98:10:
d1:9c:15:1d:82:bc:ea:93:ea:5c:2e:e3:69:7b:36:7f:a9:b4:
0f:5e:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:16:18 2025 by rpki-client