Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: 3MoMc72ec0kFhCaDBbZWeudTA+G549zr+F7lko7TpTI=
Subject key identifier: 9F:04:DF:86:0A:95:51:54:1C:65:F8:8D:D7:BD:0E:4B:E2:D9:23:0C
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0196A0BF4031EEEEC68A563B9103223D3B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 123B
Signing time: Mon 05 May 2025 14:00:10 +0000
Manifest this update: Mon 05 May 2025 14:00:10 +0000
Manifest next update: Tue 06 May 2025 14:00:10 +0000
Files and hashes: 1: 1S5NGl_9XzrIZlMPmsHgEW4H8RI.roa (hash: ZQeIY/xttmXPutXEtut0kcab8CenHX3mGEuBNFgJJJE=)
2: DW7jRSnbY34hE_RIyO6FIl_U_i4.roa (hash: Bs5rd92ASGZAZDzYbnXm9tO9ObUBPqRSYN5EMjrMJfE=)
3: OHCA3vQMxG1d25xR7UuiUEeJ818.roa (hash: O5s8l0cJjmVTzrkVW/B/tmzvvxU5Y9LtP5126UUkQZE=)
4: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=)
5: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=)
6: lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa (hash: 4aBF5aNmJAlF3RgZKlr2lhS8/MOTaZfHHnjAN6dRE6w=)
7: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: tWgiTsn3CtCeVUMGAfz/sIroyCRAdfeZxMFwi+o7Zdw=)
8: znIVaHKYkyKBEQBVptVbnSPMRT0.roa (hash: g4EHnnn85toCFef30TdaJ5KqFEtNZHscTK/ZYfzTE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:40:31:ee:ee:c6:8a:56:3b:91:03:22:3d:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: May 5 14:00:10 2025 GMT
Not After : May 6 14:00:10 2025 GMT
Subject: CN=9f04df860a9551541c65f88dd7bd0e4be2d9230c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:87:e7:72:9c:76:12:2b:d6:b9:41:be:45:
df:e8:30:b5:ff:97:8f:3a:94:bd:de:98:fe:0e:d2:
55:54:a9:e4:16:ec:a1:6d:ca:38:17:52:87:34:ce:
e7:3b:ea:e3:59:4c:2f:43:50:ee:e2:5f:40:dc:81:
ef:c2:76:fe:eb:e5:ed:c3:f1:2e:92:ae:7b:95:4b:
c2:09:2f:62:1c:0e:e5:d1:bc:39:34:ac:35:17:c9:
cb:54:8f:e4:9d:ef:6b:e3:d6:de:16:22:63:fd:b3:
66:15:2e:3f:a4:04:31:a0:3b:e8:92:4a:79:be:45:
f9:d3:7b:f2:60:34:79:3b:e8:5f:80:bc:e2:9d:4a:
5a:bd:54:a7:7a:17:f8:c7:74:9b:21:28:31:0d:08:
da:ea:28:83:a1:96:6a:e4:88:72:eb:07:12:1a:d4:
f9:7a:14:b3:a2:da:96:6f:6b:d3:16:39:89:70:46:
39:81:68:4e:1b:15:ab:dd:15:59:ee:6b:ed:4f:45:
0a:42:88:3b:19:59:b8:5b:dd:76:19:cc:ae:80:43:
1f:9c:0b:0c:db:3c:ae:d4:86:36:b9:92:42:87:6a:
99:e7:2d:5c:fe:a6:a7:20:2e:09:12:02:c2:e6:cc:
b2:b2:c9:2d:7e:3c:48:7e:18:9e:a9:af:6a:fc:13:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:DF:86:0A:95:51:54:1C:65:F8:8D:D7:BD:0E:4B:E2:D9:23:0C
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:57:17:99:bc:22:46:a9:c8:a4:f5:75:30:5b:da:e7:86:
9d:ed:6a:f4:cc:78:4b:78:ee:20:ab:c9:37:f4:32:5a:59:f0:
59:f8:91:bc:90:54:cd:44:59:f8:cf:52:25:31:52:99:5a:12:
85:45:e5:45:48:9e:50:cc:74:d6:96:93:15:62:96:3d:84:1d:
f6:db:20:33:22:68:47:32:a3:08:0a:02:f3:da:46:79:5f:6d:
a3:18:37:c1:df:fb:cd:de:83:92:36:70:ae:b1:9d:0a:87:d4:
ea:16:88:3b:a8:8d:ad:70:e0:53:c7:3e:40:5a:4a:cb:71:70:
1a:6e:60:17:2c:96:73:2d:e3:7b:22:ca:6c:53:f2:79:4e:16:
07:9e:3a:8e:e0:3a:1c:bb:13:10:68:0f:21:4d:9c:da:65:7c:
76:a9:87:7a:81:90:96:a8:1a:01:c3:e6:92:1b:e0:86:64:56:
d7:71:e4:1e:0f:c0:42:23:38:96:df:cc:80:fa:18:7d:b0:03:
a4:01:27:86:9d:09:ad:f4:43:6b:22:98:4a:af:47:1e:b9:ca:
73:e0:a9:4e:df:96:cb:c8:6f:de:da:b9:9a:55:b5:0c:f8:a0:
8c:00:08:da:69:74:72:2f:b3:68:d9:a2:c0:27:22:a0:a2:96:
49:41:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:38:22 2025 by rpki-client