Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: hnOJiVofLcbaQYH+DPAT+uYjfllgq5PRu2UH9AqL41E=
Subject key identifier: 8E:7D:3C:C3:32:DE:47:DC:9C:C3:4C:3F:29:78:B8:7F:31:63:48:2D
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 01969E9AB02A341B0520CB72A06E223D3F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 04:00:59 +0000
Manifest this update: Mon 05 May 2025 04:00:59 +0000
Manifest next update: Tue 06 May 2025 04:00:59 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: FppPUlyaEgO7emlfC9xIC4kneBGk7GnBzMpRf41I87Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:b0:2a:34:1b:05:20:cb:72:a0:6e:22:3d:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: May 5 04:00:59 2025 GMT
Not After : May 6 04:00:59 2025 GMT
Subject: CN=8e7d3cc332de47dc9cc34c3f2978b87f3163482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:36:72:05:22:33:83:57:43:2f:6c:8d:f9:
95:5c:dc:87:74:ae:b3:61:11:d8:57:5c:ea:d3:01:
94:91:58:da:41:5f:db:68:95:b3:66:f4:da:1b:55:
3b:1b:4e:ad:ab:b3:20:99:fc:47:50:6f:7b:23:9e:
5d:cd:54:91:53:e4:5f:e8:a8:16:7e:78:94:d8:47:
c7:89:bd:67:7f:a7:c5:7a:e0:c8:da:c5:f9:df:05:
db:b8:1d:53:a6:8a:bf:0b:df:3d:10:d7:05:a1:57:
a3:07:90:fc:58:a9:06:01:b0:b0:72:f8:7a:f2:66:
30:31:2e:89:96:ac:7c:ca:55:87:dc:8b:38:93:37:
02:cb:3d:f1:e1:9b:ea:49:5f:9e:5b:06:d9:e9:ec:
56:28:95:81:f9:e9:9e:99:88:a4:69:62:e0:0f:22:
56:0d:f2:10:2b:cb:27:48:27:b2:76:8a:41:b8:a4:
39:0b:bd:dd:d1:7e:23:c1:c8:a2:47:bd:28:8b:74:
86:83:eb:31:49:38:9e:36:13:b6:49:fc:9a:9c:99:
2a:66:81:af:30:c6:69:40:79:47:7e:ed:28:14:f5:
6e:bd:b7:0a:c2:ac:de:12:e6:c5:ed:fc:c4:ac:c1:
9a:5d:b7:42:d1:3a:3e:e5:9b:e3:65:ee:15:bc:fb:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:3C:C3:32:DE:47:DC:9C:C3:4C:3F:29:78:B8:7F:31:63:48:2D
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3a:ed:1c:f7:3e:12:ea:78:19:96:c3:73:29:be:42:c1:7b:
07:06:3e:e1:4b:c6:bb:87:5c:6c:a1:4f:08:98:12:6b:5e:35:
b6:10:71:77:bc:3d:ba:28:67:f2:33:97:65:01:8f:f5:f7:09:
06:06:44:bf:8b:50:9c:fb:1d:33:b7:8b:08:59:f1:53:12:ec:
44:cb:9c:d5:1d:33:c5:21:69:ad:9f:13:8f:21:14:e9:78:9b:
54:fa:9c:0e:5e:f0:f7:79:c8:ef:37:82:ea:eb:8b:4c:43:e1:
d5:a5:84:98:36:9a:10:3f:32:0e:a7:44:d3:d0:6b:e8:bf:17:
c0:b4:40:53:08:20:06:8c:07:8d:56:c4:28:25:bd:2f:a7:02:
76:e5:09:4f:96:f5:29:41:e4:b6:d4:0e:cc:6b:f7:a3:49:a3:
0a:fc:a7:c5:b9:be:70:3e:d3:53:bf:ea:0e:05:ac:2f:98:b9:
15:7b:03:e3:e4:fb:34:94:84:0c:33:8b:9a:39:cb:33:b1:1c:
46:51:44:e6:63:bc:99:5e:7a:c8:5a:e2:c4:0c:14:ea:cb:95:
f9:7e:78:9a:fc:a2:72:28:b3:92:a7:4c:ed:09:ea:6d:d3:ff:
07:02:38:b3:e9:a0:fe:75:f4:a9:c8:71:28:fc:e9:a2:ee:d6:
f0:7d:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:41 2025 by rpki-client