Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: GiuSQevEDHEbw5sCDUQA0Mvisae0ggOGaCMI4P852Qw=
Subject key identifier: 6C:56:A9:AD:42:B4:A5:FB:E0:3B:F3:83:D5:DB:75:4F:5E:AE:0B:09
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 0196CDCFA2CF1D1AE7DED83B7414FA6FF122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1403
Signing time: Wed 14 May 2025 08:00:59 +0000
Manifest this update: Wed 14 May 2025 08:00:59 +0000
Manifest next update: Thu 15 May 2025 08:00:59 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: TZSIGrrfwL6u5v4Lguzd5TmcXZhDobT2JiMG7p8WOmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:a2:cf:1d:1a:e7:de:d8:3b:74:14:fa:6f:f1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: May 14 08:00:59 2025 GMT
Not After : May 15 08:00:59 2025 GMT
Subject: CN=6c56a9ad42b4a5fbe03bf383d5db754f5eae0b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:a8:3f:6d:ec:05:4c:99:e1:e1:bd:80:31:
ee:24:72:f4:13:4d:61:a2:36:8e:e0:1e:47:34:ab:
34:36:74:86:b5:01:bc:b7:69:ec:02:c6:38:15:83:
d6:3c:84:96:c5:1e:9c:75:aa:de:ab:45:ae:1d:2d:
a2:ae:ad:a2:b0:45:3e:de:43:9f:6e:8c:3e:da:39:
fa:ed:cc:bc:98:af:46:85:77:84:3e:bc:95:dd:98:
89:2d:38:63:2b:6c:a5:6f:79:af:9f:af:be:4c:83:
29:0f:88:1e:1b:59:6d:56:01:a4:f6:c2:31:11:a3:
08:9c:0f:7f:4e:b5:3c:5a:97:99:a6:f0:f6:89:75:
bc:6b:56:27:97:57:4a:19:f6:8f:48:d2:a4:62:a6:
03:9c:21:8b:7e:33:bf:f5:5d:6e:94:56:ea:7b:22:
86:f8:0d:f0:3d:a9:b5:27:c5:ba:55:d5:84:87:1f:
bc:c7:c5:2c:20:7c:da:49:ce:52:97:41:6d:0b:6e:
ba:2f:94:3b:90:9a:b4:1c:1f:71:98:ff:30:c3:a4:
53:56:a8:5b:85:58:ca:a2:73:c2:3a:32:1e:2c:39:
b5:b4:ca:ab:b4:ff:01:30:3c:a5:48:62:bc:ad:3f:
2d:8a:cf:e0:2e:d7:c8:71:07:a2:57:b1:b1:31:9a:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:A9:AD:42:B4:A5:FB:E0:3B:F3:83:D5:DB:75:4F:5E:AE:0B:09
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:0b:3a:6b:9c:ec:0d:05:9b:77:62:31:88:45:ed:ff:d7:
2c:41:f4:09:a4:2c:22:c2:86:9d:5b:1b:39:b8:50:21:ad:44:
4d:e1:da:94:47:85:5e:eb:2c:b5:2b:55:9c:74:74:8f:b3:c3:
a9:eb:b3:a1:46:96:c8:31:09:2a:2a:df:e1:12:8c:ff:1a:70:
34:bf:18:69:34:d8:f7:27:41:14:0e:93:0e:b2:07:97:d0:0b:
a3:34:a6:e1:1a:30:5f:7c:f6:32:98:dd:d6:0c:73:b5:f2:d2:
f4:d3:05:ad:b3:ad:8c:a3:0d:43:d5:8c:d7:aa:1d:66:27:0c:
50:c9:0b:53:ef:0f:88:0c:05:e1:40:7e:fe:7f:ce:62:c2:94:
48:0c:c6:73:da:ac:f4:bd:e6:30:5b:98:90:1a:49:bc:08:9c:
d6:ea:f5:be:fc:54:79:dd:80:f8:d0:d4:5b:10:7e:17:fa:47:
21:27:a5:c4:54:65:4f:47:57:a9:c1:29:db:c4:4e:ba:06:76:
82:db:e2:7b:69:51:6e:ea:44:10:67:3c:c3:87:40:3c:91:dc:
69:67:7f:66:b4:a3:89:50:de:40:e5:ae:fb:45:27:fe:74:21:
7d:bf:a1:e1:7e:62:7c:f9:bd:cc:74:de:62:d9:7e:cd:b4:e4:
2f:22:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:33:57 2025 by rpki-client