Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: OmltriTmXAh3tt+Qn4kS7iDbUlaaYoTsLtcpl91DDrU=
Subject key identifier: FC:B5:A0:A0:AB:5F:9C:CC:E7:67:F2:78:43:5E:2E:23:95:DF:8A:C8
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 0196A2E4A0B25BF282953415F6FCF20E3BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0A92
Signing time: Tue 06 May 2025 00:00:14 +0000
Manifest this update: Tue 06 May 2025 00:00:14 +0000
Manifest next update: Wed 07 May 2025 00:00:14 +0000
Files and hashes: 1: 1FhxmjQY59YAJAMVhG_T6zF5XSA.roa (hash: LhK5E0yQbIvlUPrgw8D5iXHjua3tvso8AKzY9lfo4J0=)
2: RNQvE2oEKPo_zVElIo7XyWY9pN4.roa (hash: cHPYWyTjBN1Ib/KsumMhkuYgXusEijJa/SgckNxXiqc=)
3: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: vj0qiKaMWM3FWmtgpV0td1vzmg9W3NaFkm+rTZ7eohI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:a0:b2:5b:f2:82:95:34:15:f6:fc:f2:0e:3b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: May 6 00:00:14 2025 GMT
Not After : May 7 00:00:14 2025 GMT
Subject: CN=fcb5a0a0ab5f9ccce767f278435e2e2395df8ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:59:be:00:1f:cc:4b:8a:dd:46:56:61:a9:
bc:ec:58:b4:e5:68:3a:75:3a:f9:d0:a7:0f:7f:4e:
0f:00:7f:35:87:2d:0e:3b:f4:93:1f:af:e4:61:dc:
f5:24:46:79:9f:fb:77:92:29:34:0f:9b:ba:30:6d:
62:06:c2:68:5e:f6:73:c8:e2:72:92:5d:b6:03:12:
4a:a4:e3:50:bb:e4:f7:67:62:45:52:9b:5d:c3:2c:
44:ca:96:01:cc:79:17:c5:f3:6a:3b:6e:a7:b8:e3:
d5:cf:3a:fa:7b:ac:19:65:d9:ce:31:f2:db:97:f4:
1b:a0:51:02:d5:cb:38:64:a3:04:e9:58:12:9b:52:
ab:ec:aa:db:85:9d:ee:28:b6:dc:9b:48:15:9d:d8:
60:48:a3:17:71:27:1d:00:10:8d:1a:41:48:42:0d:
33:8e:10:8c:36:00:ce:bb:5f:a1:ae:87:37:71:8d:
dd:2e:6b:02:45:72:a4:b9:e0:48:af:77:70:40:79:
3c:7e:11:ae:85:7d:f4:2d:58:34:f0:c7:b3:84:2a:
9c:60:2d:b9:54:98:95:d6:3c:4a:75:70:0b:fe:73:
dd:8d:c8:4d:ab:46:e6:02:2b:e5:3d:9f:48:ca:2a:
95:0e:36:8c:32:c0:40:27:e6:3b:38:90:55:45:52:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:A0:A0:AB:5F:9C:CC:E7:67:F2:78:43:5E:2E:23:95:DF:8A:C8
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:5b:8d:5f:a4:17:aa:f4:0c:f3:4c:db:2b:dd:8b:3b:4a:
21:7a:78:9b:73:6d:55:53:34:82:c9:07:4d:3c:a8:4b:61:d8:
4b:46:30:84:05:fb:d2:1d:ee:31:40:81:56:88:3e:a8:48:d9:
d7:7c:73:f7:f3:db:53:ed:ae:ec:39:16:f3:f7:c4:f9:65:ad:
15:d1:27:dc:93:68:64:54:c5:29:15:91:fb:f3:cb:81:0e:91:
5d:b5:04:ee:92:ea:e5:6e:52:39:16:89:64:42:ea:dd:0c:3f:
2f:d2:4f:fc:cd:2c:a7:a7:77:19:2a:65:e0:5e:a1:c5:7a:24:
bb:f4:c9:3e:df:22:46:6a:8b:0d:b4:df:ec:77:3c:fd:74:1c:
bf:dc:ca:6f:99:8b:8e:9f:47:3b:07:f4:4e:c7:2d:23:22:99:
96:52:ab:c8:32:a9:46:0a:b6:f4:05:7a:a9:bc:33:47:87:c5:
0e:12:84:b5:87:07:22:1e:8f:67:60:f7:61:ed:2f:cb:97:a2:
33:35:5d:9d:95:12:7a:4f:4f:6a:d6:65:6c:ae:53:eb:ff:ca:
91:97:07:47:f2:82:c6:43:f3:66:35:fc:cb:59:5c:8c:ef:54:
95:9e:a0:c8:91:17:6a:25:77:e2:3d:15:ae:1d:40:0f:3e:00:
52:ba:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:25:55 2025 by rpki-client