Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: zYOuoZVUXenZZCL6u0JTJ/RsLDhPf6dyiz0c2bNvEE4=
Subject key identifier: 58:58:AF:77:B3:56:D9:2D:3A:A0:C5:6C:47:CA:54:06:2D:C6:50:92
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0196AA30A04A00C8835085395ED72CEB2791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0545
Signing time: Wed 07 May 2025 10:00:35 +0000
Manifest this update: Wed 07 May 2025 10:00:35 +0000
Manifest next update: Thu 08 May 2025 10:00:35 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: +lcG9VIUZxVWV24ymEGh3here9goUWKVKPxe8WHF5jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:a0:4a:00:c8:83:50:85:39:5e:d7:2c:eb:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: May 7 10:00:35 2025 GMT
Not After : May 8 10:00:35 2025 GMT
Subject: CN=5858af77b356d92d3aa0c56c47ca54062dc65092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:07:40:4b:6b:7b:22:1c:b6:de:f2:a0:92:
94:73:dc:86:b7:f8:25:78:6b:48:2c:41:82:d5:fa:
f0:73:3f:fe:db:f6:90:dc:5d:f5:c3:87:47:27:ac:
f8:36:21:2c:d0:a1:af:db:e8:23:a9:5c:67:16:b0:
91:b0:3f:a7:2f:a3:57:7c:34:d4:10:38:e0:f4:72:
da:85:cd:9c:77:3a:d1:37:a8:32:0a:47:e7:37:f2:
28:40:b2:72:f2:fd:5a:a0:23:fe:a7:bc:f1:70:3a:
41:3f:5a:a2:07:cc:49:c8:9c:90:96:d6:f1:d4:44:
52:77:c0:46:9a:b1:aa:cd:30:b9:8d:49:04:07:d3:
18:a2:96:92:68:4c:e1:02:6f:5f:c4:80:7b:71:a7:
2b:e9:c4:3e:ed:de:7b:2a:44:11:b1:80:7e:c0:b2:
81:80:db:37:94:98:ac:a8:f4:c9:9f:e5:f8:8e:b6:
ca:4f:d0:cf:8a:5d:6e:e7:0a:ba:62:09:92:37:7c:
23:f9:1a:33:3f:b4:4f:11:64:fd:8d:3d:ae:ae:20:
7e:30:ee:2a:f3:bc:5b:ce:0f:a5:80:c7:cc:d8:92:
3d:22:48:cc:e9:24:5f:a5:7f:47:38:2b:c9:1a:93:
3b:d4:c0:bd:4a:ec:03:f9:7e:60:c9:34:4c:6e:8d:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:AF:77:B3:56:D9:2D:3A:A0:C5:6C:47:CA:54:06:2D:C6:50:92
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0b:d9:5d:08:5f:46:28:54:25:d0:63:ed:94:97:3d:75:c9:
d4:f4:aa:c8:5f:81:e8:4b:53:a1:31:5b:30:96:28:eb:3e:ac:
89:02:6d:85:88:44:7b:e8:8f:33:3d:0e:8d:77:92:2c:15:b6:
44:08:b0:91:a9:44:e5:5a:35:56:69:16:89:24:38:09:f6:ea:
94:3d:29:b6:04:c0:a9:24:c5:1e:38:c0:c6:7e:11:73:e7:9c:
b1:a3:75:d4:99:e0:9b:92:1f:82:3d:9b:fa:7e:d0:91:cb:88:
b0:4b:b5:36:f2:28:40:00:a6:2b:f0:dc:e7:e1:82:df:9e:ea:
12:87:b0:4c:63:1d:bc:83:f4:3c:a9:ab:e2:c3:3a:21:e8:8c:
da:db:a6:e9:7f:fd:71:cb:aa:58:46:cc:51:5c:3b:db:65:2d:
c6:40:b1:d5:a2:0e:0b:c9:47:01:30:e9:d5:07:0f:eb:38:10:
ed:37:b2:7b:d1:ba:9d:64:3d:a4:e9:fc:ea:b6:44:85:01:55:
05:fa:fb:24:a6:5a:5a:e2:b5:3b:20:db:9a:f8:6c:79:a5:32:
83:4a:9e:de:06:2a:f8:c9:15:1d:54:a5:05:81:47:84:a5:90:
d3:26:70:2c:a1:73:25:cb:73:d4:e3:d4:ea:bb:68:38:a4:af:
72:a4:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:05:42 2025 by rpki-client