Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: 5U3Cx7CiprhdibRXNPiMxIo0a2XNtkXNkaqEwFrE3gc=
Subject key identifier: E2:3E:06:26:30:38:C1:E8:B1:C4:30:82:A9:10:89:04:E0:DF:95:62
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 0196BE9349A08BFFAB5527B1E1683411F421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 0288
Signing time: Sun 11 May 2025 09:00:45 +0000
Manifest this update: Sun 11 May 2025 09:00:45 +0000
Manifest next update: Mon 12 May 2025 09:00:45 +0000
Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=)
2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=)
3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: wr23XEPoeBMh2D8NvFQvzYrWLoHU/KIqEyPdkiFgEbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:49:a0:8b:ff:ab:55:27:b1:e1:68:34:11:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: May 11 09:00:45 2025 GMT
Not After : May 12 09:00:45 2025 GMT
Subject: CN=e23e06263038c1e8b1c43082a9108904e0df9562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:a1:2e:d0:bc:9b:61:b4:5c:8d:40:1a:ed:
79:91:b8:ad:4f:10:44:59:5b:6a:04:6e:f0:e9:e2:
8a:1f:f1:41:bd:5a:55:10:37:cd:2f:66:28:f1:82:
ff:3c:0f:b6:35:09:99:38:81:40:c1:06:16:bd:05:
a3:71:c5:48:03:8b:df:40:29:b4:68:74:3a:f0:d1:
ba:ef:5d:f2:8a:aa:8e:7f:47:98:32:f8:d6:5c:4e:
e8:3d:0b:78:1c:67:06:b9:1d:62:9e:64:7c:78:50:
2b:90:df:2e:87:a1:6f:ee:4b:98:b4:eb:71:82:61:
61:07:a8:25:d0:bc:cc:67:ae:58:a0:f6:b6:97:9b:
72:dd:22:5e:b2:03:46:4f:d0:27:f8:31:4b:6e:e6:
02:80:d3:9c:53:e6:f5:79:14:60:13:38:e4:6f:e0:
1a:9f:07:6e:ed:0c:7b:15:ca:6f:b8:a5:c7:15:b3:
65:bc:b3:be:89:ef:83:1b:ac:50:c5:56:fe:90:37:
39:c1:b7:27:dd:cc:56:50:0f:f7:34:4f:ba:53:4b:
49:9e:ba:aa:8f:ae:79:82:d6:ed:e3:3f:84:b0:80:
59:5b:7c:e8:d6:00:52:c0:ea:a2:30:12:53:39:e3:
9d:25:4d:d5:c8:8c:8d:59:62:6b:3c:85:bc:a8:38:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:06:26:30:38:C1:E8:B1:C4:30:82:A9:10:89:04:E0:DF:95:62
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:64:04:a3:18:09:b2:ec:74:c1:f7:76:95:79:20:b9:29:d3:
e2:70:6b:89:d5:72:e3:b1:14:53:f9:87:b0:b0:55:72:bf:2c:
8b:55:58:d7:b7:0c:7a:6d:91:60:18:06:53:ea:ba:76:0f:c1:
fa:00:69:9a:93:a1:cd:89:62:f3:f5:d3:f3:aa:bd:8c:28:2b:
c5:bb:4b:0c:49:11:2c:b3:47:40:9a:e9:c1:27:ea:c9:45:2d:
36:f9:9e:f7:6f:c0:87:f9:e6:79:ac:61:95:58:15:31:d5:f4:
44:ec:88:32:13:54:2a:56:95:8a:2f:db:b9:71:a0:24:27:ec:
a1:81:73:07:8e:a0:d9:4d:79:15:e5:dc:00:bc:cf:b3:a0:9f:
00:97:71:d8:6f:3a:a4:c2:49:f7:cd:f7:00:18:73:0b:9f:c4:
4b:d2:8f:6e:73:c7:9a:a9:cd:e3:b8:ba:05:c3:79:e6:97:03:
ea:70:b1:23:31:89:ad:50:21:52:a0:7d:e8:0b:72:3b:79:55:
7d:a4:71:72:bf:13:82:15:7f:ea:41:bd:62:a5:67:e0:e4:f7:
42:b0:6c:1d:36:2f:68:4c:a9:49:d1:91:42:1a:61:d9:26:2f:
56:02:4b:8c:1f:3a:32:12:12:8c:09:60:c9:50:ba:ab:5a:b6:
4b:54:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:16:50 2025 by rpki-client