Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: 9/3zraScvB+KHqHKxXve/lxgAoMXkzaOphtB+JtBBU4=
Subject key identifier: 8C:A8:F6:22:7B:F9:54:81:41:17:D8:32:65:F3:28:F5:3F:14:7E:AE
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 0196A509F51F499194E4138DF7B8CF23C3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0C5C
Signing time: Tue 06 May 2025 10:00:15 +0000
Manifest this update: Tue 06 May 2025 10:00:15 +0000
Manifest next update: Wed 07 May 2025 10:00:15 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: YtiyXkFy4YlF+0gXu1g6YFawr7tc696bIDVyqyKf0Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:09:f5:1f:49:91:94:e4:13:8d:f7:b8:cf:23:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: May 6 10:00:15 2025 GMT
Not After : May 7 10:00:15 2025 GMT
Subject: CN=8ca8f6227bf954814117d83265f328f53f147eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:9b:e4:07:c2:3b:f9:bf:ac:ac:42:b2:0c:
f7:66:6f:50:fb:34:f5:20:9d:36:19:9f:0e:2c:8a:
12:c2:df:3a:d5:24:c3:4f:1f:0b:a3:d0:e9:a4:08:
ee:e0:39:d9:8a:73:fc:f5:d3:78:bd:70:00:46:40:
10:1c:ec:d8:80:d1:a0:a5:ef:fb:7b:0e:a0:2d:a5:
cd:e7:3d:fe:78:65:44:85:e3:54:19:a7:ed:cc:74:
0a:4e:2c:7a:18:ac:0b:ce:e6:7c:dc:0f:cf:f3:04:
2f:f6:52:57:fc:8c:c8:2b:48:da:c7:bf:1f:6b:84:
c4:09:a3:0c:cf:23:eb:f8:d9:98:d8:30:7f:d3:a5:
98:6b:c2:84:66:39:c2:55:4c:a6:6c:c1:23:8a:ff:
0c:29:8f:d9:42:b0:40:f6:4f:32:a1:47:c2:02:5d:
eb:fa:88:59:a2:65:64:11:52:95:7b:b8:1c:39:e9:
0b:db:d1:e2:48:da:82:ea:fa:be:6b:7d:ed:db:69:
22:cc:5a:43:ef:d4:cd:c6:0e:d1:60:00:65:3f:34:
5d:5f:08:7a:2b:f4:f9:12:ed:70:8a:ba:30:c8:85:
20:74:fe:a8:0f:4f:92:3b:1d:b1:1c:b7:76:1e:f5:
cd:c8:87:93:23:78:8b:3f:ad:44:b6:3e:b9:78:ba:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:F6:22:7B:F9:54:81:41:17:D8:32:65:F3:28:F5:3F:14:7E:AE
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:14:10:2c:16:73:7d:50:d8:cc:e6:f3:a0:0a:41:74:cd:
87:8e:1f:0e:9c:cb:1b:c7:11:e8:10:56:68:5d:f2:e4:9a:f8:
b8:69:9a:28:b9:5a:4a:c3:5c:ea:ec:2b:19:47:72:83:78:53:
51:07:6f:9a:53:2b:b8:8b:37:e8:5e:45:ab:64:e5:ea:a9:37:
49:98:9a:8f:66:22:64:d7:f6:b9:09:6f:46:4f:8c:0a:85:a4:
00:cd:f1:0b:f0:38:86:92:05:0b:f1:60:07:6b:35:cd:fe:97:
aa:4b:6f:f6:e9:1e:7b:f4:3a:78:fd:4f:60:e2:19:08:ad:4d:
92:5f:e8:eb:58:78:6c:ce:a5:80:c2:9a:1f:f9:8f:81:d3:cd:
bb:33:61:17:72:05:ae:f0:e6:90:16:ae:8a:ae:04:0c:d5:e9:
63:82:1a:1b:88:1f:7e:0c:dd:5a:2a:39:d3:c7:b3:9a:e6:a9:
f9:a4:61:80:e9:ab:f5:d6:c8:63:04:8a:69:a8:ac:9d:31:0c:
dc:1c:d9:f8:8d:ff:6a:d2:c1:79:af:e9:16:c4:fb:98:f6:bb:
7e:61:ce:3b:7f:d0:be:07:89:93:e4:3c:67:11:6e:0e:03:8e:
2e:f8:aa:03:0c:fa:93:7a:49:ee:3c:2e:7d:c0:5f:6d:9c:1d:
66:fb:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:32:28 2025 by rpki-client