Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: Dr9Cl6PeHqDZN+SePlRG2HUxl8qUBT4AnAGjNAA+hZ8=
Subject key identifier: D1:08:58:C9:A5:A0:8E:11:3A:37:EE:47:74:59:AF:9C:3A:31:22:D6
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 0196C5A88AF9400633389E2E1CD22B28CB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 0CFD
Signing time: Mon 12 May 2025 18:01:19 +0000
Manifest this update: Mon 12 May 2025 18:01:19 +0000
Manifest next update: Tue 13 May 2025 18:01:19 +0000
Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: rZaFK56NivpGwZ4DpJoOLBI6+IeO4GMecnAK0iqaIAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:8a:f9:40:06:33:38:9e:2e:1c:d2:2b:28:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: May 12 18:01:19 2025 GMT
Not After : May 13 18:01:19 2025 GMT
Subject: CN=d10858c9a5a08e113a37ee477459af9c3a3122d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:18:46:26:e2:35:16:a5:bb:6b:7c:3a:0b:
99:19:b5:71:d6:f5:f7:7e:6e:0c:c0:0d:66:d1:01:
99:43:04:c5:71:22:8a:8e:8d:11:e1:73:26:7b:2c:
05:3b:b0:77:49:ec:cc:9f:76:68:81:45:21:7c:bb:
85:ba:94:ae:3d:c2:75:51:b2:ef:71:f6:bc:9a:f3:
82:16:d7:b4:dc:b6:23:ea:fa:20:e2:08:45:f4:44:
78:a3:33:ea:2d:4e:fd:58:17:85:99:8c:e1:23:e6:
30:1e:de:25:01:63:08:2b:32:13:62:0b:ef:b6:83:
10:77:ea:eb:8b:dd:ee:31:39:f5:22:e5:09:b6:f1:
5f:09:85:1c:6e:c7:5f:ef:54:a5:aa:4e:1c:00:00:
47:b2:80:42:cf:36:16:cf:a6:90:ee:9b:51:c0:d2:
a1:4e:3b:17:5c:d7:b9:33:e4:a8:a6:35:79:ab:d2:
31:fd:94:92:5d:6d:9d:cf:78:fa:86:8c:44:b6:d4:
f4:3c:01:a8:9c:e4:b3:2d:86:c9:60:3d:5e:eb:2a:
c0:ad:e5:c3:53:b0:f0:50:c4:81:72:5b:18:9a:78:
7e:10:c7:22:47:d9:39:9c:5b:d4:48:65:c8:85:4d:
40:c4:99:b9:64:48:ac:9a:2e:6a:9e:90:84:98:53:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:58:C9:A5:A0:8E:11:3A:37:EE:47:74:59:AF:9C:3A:31:22:D6
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e3:72:a0:e6:df:c0:a3:99:ee:45:a9:1d:8e:dd:90:2c:fd:
af:4a:98:8a:a8:ff:99:d4:1e:d6:3d:1b:e8:e5:98:33:62:84:
41:e1:2b:4a:84:ae:1e:05:36:1e:00:55:cd:c7:5c:ea:51:45:
54:35:13:ef:f2:6b:d8:d6:79:a7:b4:aa:8b:c0:6d:7b:61:ec:
9a:7b:1c:a0:aa:0b:47:35:3a:7a:8f:03:51:96:f3:43:73:91:
75:86:98:0d:95:0f:c8:19:cd:77:90:16:ed:d2:5f:1a:92:96:
ca:21:1c:1d:82:06:94:4b:55:84:88:74:01:04:e0:f0:92:aa:
0f:0f:b6:88:0d:9d:36:5a:23:2f:48:b7:be:04:4d:43:42:50:
28:bb:cb:46:06:ef:3c:24:ca:2e:dc:7c:be:d5:d6:bd:7e:a3:
33:f6:84:1c:0e:f1:74:33:bc:2b:9e:b1:eb:60:48:97:c0:dc:
0c:fb:9a:45:12:4f:3c:53:bc:23:54:24:27:33:c7:57:82:1b:
97:c7:a5:f5:3c:e0:2a:f5:6b:70:7b:f3:47:2a:6d:9b:c3:34:
bd:3d:8b:1a:86:3a:68:29:cb:9c:91:fa:8f:ab:9d:84:53:91:
dc:6a:af:2f:2b:8b:a7:fd:61:18:cb:cd:1e:01:78:ef:6a:85:
fb:ba:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:42:57 2025 by rpki-client