Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier: ErKuF/aLJq7fWuDrRs9gmXEeA1Uez8pJOeR5hSNIN8I=
Subject key identifier: 94:B9:2B:C3:67:E9:F5:DD:E9:88:7B:89:01:30:BD:2A:C7:0E:11:E6
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 01969E9A150CBF8D5790DE4280E0591CFDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number: 097D
Signing time: Mon 05 May 2025 04:00:20 +0000
Manifest this update: Mon 05 May 2025 04:00:20 +0000
Manifest next update: Tue 06 May 2025 04:00:20 +0000
Files and hashes: 1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: I4cOMuvsWgI/Ou+Dy3u/YgmNfUaVolTKZCtgRr727U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:15:0c:bf:8d:57:90:de:42:80:e0:59:1c:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: May 5 04:00:20 2025 GMT
Not After : May 6 04:00:20 2025 GMT
Subject: CN=94b92bc367e9f5dde9887b890130bd2ac70e11e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:55:c3:4c:2b:ed:4f:f3:2c:47:1a:6d:a1:
7d:74:10:a7:8a:9d:ed:20:e5:ab:8a:d9:00:7d:ea:
a1:41:88:de:6d:af:60:04:58:2a:64:2f:9b:8d:bd:
94:51:f3:a0:49:51:70:5b:33:0c:b9:e3:45:59:e0:
5f:12:49:4b:55:38:5e:3c:f3:e5:04:e4:15:88:eb:
10:4b:78:6d:9c:c4:6c:54:e7:86:e1:aa:77:e5:5a:
7f:7b:0a:45:09:96:b2:2d:48:cd:e7:b0:53:1f:92:
bd:10:ab:14:fe:5d:2d:61:51:d6:a3:03:f3:8a:cc:
3d:10:7b:cc:30:f8:e3:85:1a:60:2c:9f:b0:1c:78:
29:02:3b:8f:8d:26:ad:32:4f:8b:de:ac:69:e1:6f:
62:35:42:b0:56:45:c3:f4:7b:06:7d:05:ff:87:95:
45:17:82:85:3a:d1:32:03:2c:60:6b:e5:3f:17:ac:
07:f7:37:6b:b6:27:e5:4b:af:5e:42:ea:7e:c4:2b:
b6:39:e7:f4:4d:89:4d:fe:14:a9:e6:e3:55:89:53:
84:86:0f:21:12:8e:ea:d3:29:62:da:ed:f5:44:49:
ef:98:92:d2:32:61:83:2f:8b:49:cd:2c:0a:ad:45:
da:f3:3c:3e:c7:57:be:8b:a2:5f:a2:58:63:a7:4f:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:2B:C3:67:E9:F5:DD:E9:88:7B:89:01:30:BD:2A:C7:0E:11:E6
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a0:fd:ad:9d:d2:00:0f:e7:b2:c9:8c:9d:61:42:08:32:f5:
7c:be:a9:0a:55:68:a1:19:bb:0e:1a:bc:6d:1c:fd:b8:dc:2a:
43:72:80:41:92:aa:21:2d:a3:68:d8:21:74:0f:a3:03:ff:3e:
dd:2c:a2:33:08:c7:36:66:e3:01:92:78:24:41:07:d0:a4:99:
3a:9f:cd:27:62:50:94:36:5c:7d:59:a8:d0:a6:c5:4a:57:78:
b4:fc:71:47:4e:bd:58:75:f8:48:1a:f5:03:71:ba:1d:7d:6d:
d1:2a:45:53:6b:36:22:58:3e:0d:86:bd:b1:1a:5c:da:e2:09:
f7:ff:80:d2:ee:c0:d4:f0:fe:7e:f9:dc:30:af:0e:f6:de:ea:
12:de:df:ee:d9:ef:7f:50:00:17:44:cd:03:05:b9:5c:5d:d7:
24:d1:67:7f:08:2c:fa:05:b9:81:1f:08:fe:6c:9d:74:a8:02:
ab:80:89:95:49:29:2b:a9:34:bc:8e:df:60:3b:0b:51:8d:e2:
da:90:4d:ab:d9:85:a4:28:45:51:cd:79:2f:50:40:01:4f:2e:
3f:34:33:47:cb:13:45:ef:9b:57:96:80:f1:a1:a7:a4:9d:7a:
13:15:75:25:53:40:67:87:8d:5c:cf:20:40:15:32:e1:30:8b:
17:ea:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:43:37 2025 by rpki-client