Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: m97i17JZKe3eC8xgODwHKKBaAr6vUPAp5q057X8BJKU=
Subject key identifier: FD:E2:C7:C0:0D:79:89:73:3C:9A:68:07:AB:5D:46:E8:5A:91:43:2A
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 0196C83AD6ACF853D726B1508FA12EBE0B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0D95
Signing time: Tue 13 May 2025 06:00:21 +0000
Manifest this update: Tue 13 May 2025 06:00:21 +0000
Manifest next update: Wed 14 May 2025 06:00:21 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: No75+zaDe833LwJc4jnZ62U6sIRaJaCg7noItwpcycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:d6:ac:f8:53:d7:26:b1:50:8f:a1:2e:be:0b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: May 13 06:00:21 2025 GMT
Not After : May 14 06:00:21 2025 GMT
Subject: CN=fde2c7c00d7989733c9a6807ab5d46e85a91432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:1e:0e:9f:06:9e:69:86:25:d8:82:ed:7f:
24:d5:fc:5a:9b:db:a0:5b:2e:37:c6:55:d2:c6:d6:
79:45:31:ef:11:58:c6:b7:f6:a9:b9:91:c7:e4:89:
7f:9d:75:6f:ee:51:7a:d6:97:45:49:10:de:97:e3:
dc:ac:20:2d:55:a7:89:39:7a:fc:31:6f:ee:48:e8:
6b:6f:7f:b7:80:88:8b:f9:d3:95:7d:3d:85:ac:10:
1c:c6:e7:30:ee:c5:eb:5e:38:e8:db:56:2c:25:d1:
2c:b0:57:2a:5b:18:28:51:7a:0f:df:ff:7c:14:67:
b4:51:c9:8a:02:3c:52:b1:1b:68:88:b3:38:1d:29:
3d:0c:97:8d:84:b3:fd:84:59:15:bc:ab:14:04:78:
84:f3:2c:0c:e5:e5:2d:0e:53:6d:ee:33:70:d4:05:
e5:ba:7b:17:d8:8f:29:ef:73:63:16:0f:51:0c:8d:
cb:55:47:31:e3:bd:0b:76:d3:e8:e5:4a:5e:78:47:
4a:69:5b:81:5a:84:ea:6f:4e:28:7b:61:a0:4a:db:
6e:3c:e5:2e:f4:5d:1d:b4:44:ba:bc:09:27:86:0a:
65:24:d0:2e:48:49:eb:fd:36:67:b3:cd:10:31:85:
7c:d2:1a:60:dd:41:90:2f:f8:fe:08:4f:cf:cc:4c:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:C7:C0:0D:79:89:73:3C:9A:68:07:AB:5D:46:E8:5A:91:43:2A
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:3e:83:8c:01:63:dc:84:4c:3b:7d:92:e2:e9:63:d6:cd:
94:5e:de:95:52:52:de:d2:36:fd:af:4b:9a:8d:6e:db:eb:ad:
63:22:c1:12:dd:19:8f:70:0e:68:4b:85:b2:a4:72:8b:3f:5e:
2f:81:77:48:05:fb:fa:06:47:bc:ae:ad:94:cd:9d:8e:50:f2:
e2:f5:25:40:bd:d6:9e:bf:c8:c0:97:90:b4:a2:35:43:9d:79:
70:0c:af:65:0d:a9:a2:3d:6a:c1:1c:5d:1e:43:f3:48:7f:da:
8a:c9:e6:ce:23:32:4b:20:4f:b4:6d:23:cd:ba:02:06:f8:23:
a1:2d:47:54:09:6c:31:93:93:f5:36:95:6c:8d:4d:3d:02:86:
f7:57:5a:f2:dd:c1:a0:46:9b:66:ed:9e:28:bf:ab:c5:3e:02:
59:49:ba:91:07:09:16:0e:e0:82:04:19:fd:2d:f0:11:cd:e2:
5f:74:aa:8b:eb:1b:5c:17:f1:43:eb:55:46:b9:08:a5:33:7c:
62:ea:c0:1f:07:1b:41:47:0c:0b:6e:10:37:2a:ab:9f:e8:96:
53:08:b3:5d:fc:31:1d:b6:71:80:cc:e8:3f:38:7e:8e:04:62:
fa:7b:24:ec:ad:f2:7e:d2:73:10:42:5e:4f:78:21:1d:21:af:
2a:61:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:44:51 2025 by rpki-client