Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: Yb2t7bth2fOpnr1G9Ek0ph1olXrc+R+NeRnRbmdQLp0=
Subject key identifier: E7:C8:E8:FC:EC:8F:4B:07:5F:BD:EB:92:12:7E:9D:B1:1D:97:91:1C
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 0196C2DDA7523D42AF91F7514E8E1BEEF783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0A3C
Signing time: Mon 12 May 2025 05:00:28 +0000
Manifest this update: Mon 12 May 2025 05:00:28 +0000
Manifest next update: Tue 13 May 2025 05:00:28 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: yAvdyOP/qR0I2fd8zo043u1wItUymh/TtSo/po5lDug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:a7:52:3d:42:af:91:f7:51:4e:8e:1b:ee:f7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: May 12 05:00:28 2025 GMT
Not After : May 13 05:00:28 2025 GMT
Subject: CN=e7c8e8fcec8f4b075fbdeb92127e9db11d97911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:f4:43:2d:31:83:b6:77:fa:16:ed:7e:17:
9b:b0:b1:22:4b:4f:5c:72:e9:8d:b5:84:1a:f3:8c:
21:b2:08:b0:be:7c:13:ed:76:3e:17:f3:43:51:04:
6e:1b:bb:ec:7a:54:e9:1d:58:c4:0b:09:a4:4c:56:
02:92:cb:c7:60:d0:64:0c:83:65:be:89:ee:5c:82:
a2:29:d3:48:6a:d1:6e:58:3f:79:7d:e2:fa:3d:12:
f5:11:46:23:04:34:a2:e6:18:0f:a0:75:0c:be:4a:
40:12:b0:c6:2f:34:f7:dd:25:37:a6:c3:d1:93:31:
59:47:e1:0f:8d:32:de:6f:78:46:ed:8b:81:c2:0e:
32:51:1a:d0:d2:0c:7f:ec:c8:2d:de:99:df:d4:b3:
5b:14:5a:9b:63:e4:e4:5f:70:38:fe:d5:c8:4e:84:
f3:b5:31:1b:9c:b8:82:58:fa:82:f3:f1:f0:85:ab:
aa:e6:e3:32:62:ba:b8:46:42:0c:85:ee:a0:aa:02:
3a:a0:85:70:33:07:5f:3e:54:ce:dd:e9:26:4a:5b:
60:1c:23:1e:f6:2f:06:4f:bb:49:55:14:d7:bd:26:
fc:2b:82:cb:af:70:9a:fc:5f:4d:26:a0:fe:cd:12:
62:ab:44:8f:db:d8:50:6d:d2:66:15:ae:44:b1:aa:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:E8:FC:EC:8F:4B:07:5F:BD:EB:92:12:7E:9D:B1:1D:97:91:1C
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2a:67:d6:91:f0:d7:fe:69:b6:f5:ab:a4:5a:fa:6d:3b:9b:
7b:25:ed:65:b3:4d:6d:99:5e:8f:0d:8c:09:09:2c:f0:1d:b3:
3f:75:d5:3d:c6:7c:bf:23:f2:b3:9e:f0:36:03:ed:01:ca:c9:
9a:54:69:05:3c:e5:b6:a7:cc:33:41:57:fa:9c:d1:73:32:b7:
5a:00:4c:b6:68:d7:26:9c:fc:e2:35:ab:ab:63:0c:dd:f9:4d:
d4:39:65:b7:15:95:3f:e5:ad:a2:b5:a3:e0:9f:6b:91:f7:eb:
40:c8:ce:fe:8e:8e:b2:8a:2c:60:d2:72:e0:33:47:14:0f:06:
19:17:7c:f2:4e:30:0d:e2:72:4c:72:db:8b:fc:bd:68:ab:bb:
4e:69:f7:ee:43:4e:ae:75:54:64:05:f6:6f:d3:c6:21:69:4d:
8b:62:f8:84:99:e5:85:cb:bf:48:92:c6:45:74:9e:6a:19:49:
16:63:33:83:44:cd:90:3c:1f:20:e9:62:ba:c9:a8:fb:fc:11:
89:0b:5d:d1:fe:0b:46:97:cd:db:3d:c0:74:d1:a9:19:f3:cb:
3b:0c:ee:1f:92:cb:22:80:e9:84:d5:6d:2a:3e:ec:19:4d:a1:
e7:ad:06:56:22:c0:d3:8d:ee:aa:a9:dd:e0:19:5b:32:78:26:
71:59:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:17:13 2025 by rpki-client