Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: IjUZmcZJqhAG4YMkKURv+PIOd0+E9ioFVuJkpefbW9c=
Subject key identifier: 51:A5:9A:B6:9D:A7:7C:49:82:04:C7:7D:C6:D6:AA:F2:27:FE:AB:7F
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 0196B558C845835D56F473C869AC117FB46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 11A2
Signing time: Fri 09 May 2025 14:00:16 +0000
Manifest this update: Fri 09 May 2025 14:00:16 +0000
Manifest next update: Sat 10 May 2025 14:00:16 +0000
Files and hashes: 1: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
2: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
3: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: 0maUgVcGP7oik0Cux0WbDch8Qoeh4bj4/kopAovLqvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:c8:45:83:5d:56:f4:73:c8:69:ac:11:7f:b4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: May 9 14:00:16 2025 GMT
Not After : May 10 14:00:16 2025 GMT
Subject: CN=51a59ab69da77c498204c77dc6d6aaf227feab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:16:fc:5d:dc:34:de:76:94:a5:d8:00:3e:
4f:8f:6f:60:e8:c7:86:00:5c:95:07:0c:07:aa:a6:
54:0c:35:61:3a:aa:63:85:33:de:3e:c0:25:4a:00:
e3:49:1f:12:14:46:e2:5f:2e:1d:f6:bd:f7:91:d9:
08:b4:07:38:76:a5:bf:2e:58:f1:28:a1:f5:2d:13:
4b:fd:0f:79:32:6c:05:90:7a:35:c3:fe:6d:8c:5e:
5e:c3:3d:0d:d0:44:3c:43:62:5e:17:56:44:e9:d5:
76:1c:9f:23:73:c4:a9:86:01:5a:0d:67:53:6b:1a:
82:03:33:25:ab:1f:21:8b:5c:3c:6d:a0:9f:75:f6:
35:dd:1b:96:24:64:c8:0c:b8:2f:a2:e7:05:e7:d6:
23:13:4e:be:21:95:2b:23:ff:f7:45:6d:46:85:6d:
f6:c2:63:9f:20:24:0d:3d:4e:26:bd:a7:ba:1d:b7:
ca:cd:fc:3c:13:6c:5b:40:28:d2:71:9b:18:3a:21:
fd:6e:5b:c2:2c:1f:1d:0a:6c:c9:87:a9:16:df:e0:
40:e8:57:c2:3c:33:2a:5a:c8:22:8f:4f:f9:ac:c2:
da:fe:0e:3c:83:3a:9b:1f:8e:c4:f5:dc:67:90:49:
23:f4:1a:7f:32:4d:d1:de:04:31:67:cb:69:c4:ae:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:9A:B6:9D:A7:7C:49:82:04:C7:7D:C6:D6:AA:F2:27:FE:AB:7F
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:23:97:c1:c4:a1:ba:76:b0:38:77:c6:7d:dc:64:a0:3e:1a:
9e:9b:a0:34:f9:21:c0:4c:dc:a4:cc:62:22:8a:ca:46:58:e8:
d6:ab:ba:8e:5f:5d:59:df:0f:39:70:6b:b6:f5:02:75:aa:df:
d4:ea:e3:9c:29:12:28:d8:6d:7b:ee:21:43:54:d7:2b:e6:f0:
dd:c4:6c:f9:31:6a:8c:9a:d5:4f:ed:45:0b:2d:13:a8:f1:fd:
07:cc:59:00:8b:fe:65:98:6f:47:b2:b4:47:db:35:c0:8f:9b:
7c:43:5d:66:33:b9:2e:9a:ef:9c:2b:cb:f5:03:a1:95:8e:87:
34:40:f0:9d:03:55:5d:cb:87:f9:0b:69:f4:9c:30:79:ef:f2:
6d:5f:41:d9:52:50:c9:cd:06:14:9f:2e:f3:fe:50:0f:c9:fb:
be:e0:37:86:3b:d5:61:46:75:7a:fa:1a:66:e8:91:f0:3e:6b:
42:2e:b8:6e:65:4d:21:0a:4c:0e:4d:1f:60:53:c2:69:da:36:
06:4a:80:42:e2:ac:59:f7:99:64:40:43:ef:1a:9f:09:a5:e3:
6c:0e:bf:21:e3:f5:43:1c:72:42:ad:23:b5:93:36:47:8a:b8:
4d:bc:b0:fd:46:ac:23:09:a1:72:67:4e:04:36:f6:22:bd:76:
ba:32:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:44:36 2025 by rpki-client