Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: aph7ncyiU/3/KpcbQPOTPzQBaMLv6VK82f/fBwFicHw=
Subject key identifier: BA:38:13:BB:46:7C:78:27:5B:C2:21:80:E8:1C:6C:AB:C7:4C:72:77
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 0196C34C3F67A814C7D189589677FA606AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: EA
Signing time: Mon 12 May 2025 07:01:16 +0000
Manifest this update: Mon 12 May 2025 07:01:16 +0000
Manifest next update: Tue 13 May 2025 07:01:16 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: NQuKzY5rtxSJpjJfWE5jo9t+Ksqfd9pX+nN6HA6dh6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:3f:67:a8:14:c7:d1:89:58:96:77:fa:60:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: May 12 07:01:16 2025 GMT
Not After : May 13 07:01:16 2025 GMT
Subject: CN=ba3813bb467c78275bc22180e81c6cabc74c7277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:03:8e:78:46:f6:4b:4a:bc:4e:17:a0:39:
01:0a:77:a6:c5:2d:9c:74:f1:08:9e:83:33:70:bb:
c6:c7:0e:91:aa:ee:53:2d:a2:26:23:da:fb:30:30:
76:7d:f9:32:08:c8:88:21:70:df:fc:e8:2e:5c:53:
03:a0:bd:98:05:dc:27:7a:54:e7:fc:b7:0a:a7:61:
19:29:4b:fa:72:16:a4:10:43:77:04:47:f0:86:a3:
dd:ea:e8:24:18:e4:7a:83:25:53:53:00:e7:ee:3c:
9e:b6:13:04:76:44:11:85:c8:c8:b7:35:b7:62:63:
14:07:54:6d:3f:10:81:72:1e:a6:c0:67:4f:49:eb:
00:b9:0f:e9:6e:c0:26:62:fd:f8:38:ce:4f:bd:35:
fa:6c:e3:53:f7:00:30:ae:a8:01:d0:de:56:0e:a8:
63:38:70:47:31:2d:14:2c:8f:68:14:63:f3:1a:b8:
84:e5:81:86:50:9d:25:3c:3b:79:47:55:a5:d8:07:
e1:1e:e7:24:ea:5b:16:3e:ba:d0:d9:6f:ad:4f:5d:
0e:1c:a6:9d:75:50:b2:20:86:98:e2:86:7d:2e:da:
8e:8f:c8:45:c6:77:5e:3e:c7:f6:31:c1:a4:a3:89:
fc:15:5d:63:9d:07:1c:72:93:67:be:07:fd:dd:10:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:13:BB:46:7C:78:27:5B:C2:21:80:E8:1C:6C:AB:C7:4C:72:77
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:fd:5a:7c:bd:98:f6:fc:61:09:88:71:04:41:fe:4e:ab:
1e:f9:83:73:5b:be:f7:53:07:b4:7a:6d:ea:8e:5b:a2:34:1e:
94:ee:4a:59:b5:ad:b3:5d:1f:a8:eb:bf:44:dd:7f:cf:16:c5:
4a:8c:cf:43:19:e2:9a:9c:06:cf:4a:fd:01:0f:3a:e7:4e:47:
03:f6:38:f3:1f:02:b2:aa:31:f7:bd:0b:64:86:9c:7d:60:4b:
f9:83:89:24:c4:15:74:5e:2c:a4:12:3a:e8:3c:9b:38:18:85:
a2:07:13:28:c1:1c:5d:91:c2:2b:ee:6c:ac:ab:b7:bc:b2:30:
de:d6:82:ea:0f:dc:7e:95:f8:8f:3a:7b:70:34:c4:3b:08:6b:
51:63:15:3f:92:32:8d:5e:22:5c:3c:2d:c0:0f:03:3d:11:09:
65:47:bb:9f:0f:74:f6:ca:8a:e2:9a:39:a2:14:e5:5c:49:15:
09:69:fa:4e:2a:2a:e2:c4:0d:9f:ea:64:69:b3:80:ee:1b:7e:
d5:a1:ca:a5:96:d2:2e:81:7a:d1:1f:1e:d7:03:20:d4:af:b4:
f9:7c:68:6b:95:98:cc:f9:fa:cf:a3:91:a6:a9:42:83:c2:ae:
40:a7:88:ea:88:01:fa:88:86:a3:d0:4f:37:8d:20:2e:25:2c:
ce:ae:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:20:45 2025 by rpki-client