Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: KHEVM9MJEOzSCKhMsY7c3FATKzCMeM+6Ex+lhNc+89Y=
Subject key identifier: 15:EF:00:2D:F1:97:BA:14:34:35:E6:CC:52:5F:C8:71:85:5D:61:EC
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 0196B06A276F4D6540879DB444D6774D1728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 15:01:08 +0000
Manifest this update: Thu 08 May 2025 15:01:08 +0000
Manifest next update: Fri 09 May 2025 15:01:08 +0000
Files and hashes: 1: __KLjvjgMO1LuKrx6zZXZJBcRtk.roa (hash: kZSjdOtgx956Q9WcOxsnl5QBMbkPJAPdg2gED1ZbQy4=)
2: xmOvbRNpbfTNvGRi0NGmoChwF8k.roa (hash: 7oU4y3FJaTZ6zlZMUwxbLqzJR9lqEVzJSwfHVW5xI4s=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: pjz33QzsYMh4q3IE+3tilZi1pc+6IxKMIo+cDU/Jbo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6a:27:6f:4d:65:40:87:9d:b4:44:d6:77:4d:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: May 8 15:01:08 2025 GMT
Not After : May 9 15:01:08 2025 GMT
Subject: CN=15ef002df197ba143435e6cc525fc871855d61ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:af:fa:81:79:ef:ae:4f:1f:88:83:b8:1d:
3e:ac:af:5a:46:06:2b:89:3f:9c:14:39:6b:d9:02:
bc:a3:e5:c4:9e:c0:76:c9:0f:4e:4d:44:25:f0:bb:
7d:39:f5:e2:47:c1:a9:72:d4:84:c9:e7:8d:13:4a:
3d:5a:c1:1a:59:f7:27:5c:78:d0:7b:be:2d:47:7c:
9d:26:46:8d:e1:1c:77:7b:a5:96:69:d2:88:e6:22:
b4:3c:a4:c5:45:11:98:3f:df:f0:3b:d6:df:c6:88:
4a:97:f8:9b:a7:b0:ae:01:fa:b8:56:40:7f:0c:9c:
12:b5:f0:47:71:78:ce:7f:9b:58:be:59:79:21:fa:
4c:1c:15:75:f8:15:da:4d:81:fc:ad:cb:db:11:25:
dd:48:71:08:af:b4:91:c8:41:4b:02:57:8f:82:63:
16:79:ed:b8:0c:9b:35:4c:8b:6c:8a:b5:4d:27:87:
8d:06:fc:bf:0d:ad:2f:90:6e:a6:0b:3e:5c:87:a9:
e0:b6:8a:16:9e:3f:8e:76:11:62:26:8a:d6:87:1b:
36:32:68:8c:15:0a:1b:ae:ac:c0:91:41:f7:39:fe:
de:c4:10:6e:e4:4a:05:8c:80:87:f6:9d:2e:0e:59:
2b:4b:fe:f1:ec:c5:e4:d6:75:b8:00:4d:7d:73:7f:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:00:2D:F1:97:BA:14:34:35:E6:CC:52:5F:C8:71:85:5D:61:EC
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:a6:0b:a8:2d:16:dc:a0:62:dd:9c:b1:8a:5e:3e:de:ad:
50:6c:60:49:d4:33:8d:40:29:5f:9b:8b:54:82:bc:53:e9:8e:
31:3d:df:2d:cc:55:64:ee:53:11:54:80:2b:db:90:8a:0a:82:
4b:e7:42:40:d6:f8:52:73:e4:17:b9:3f:c8:f1:aa:14:3f:e4:
bd:e8:97:c8:bc:71:99:b6:a8:3f:00:90:8e:7a:14:e8:a4:65:
a8:99:cf:c6:39:ac:d6:d6:de:ab:6a:61:c8:4a:73:fa:45:c3:
92:fb:ea:15:10:74:b6:96:8d:f3:25:7b:d4:7a:ab:85:f1:1f:
f8:76:b3:91:02:b8:33:db:f0:e4:ec:10:f3:73:45:1a:4c:b0:
da:bc:b2:28:e6:a6:7d:21:3c:f0:74:86:c8:f2:65:b6:84:6f:
e9:88:87:a4:4b:d9:da:c1:71:7d:0b:2a:ed:be:fc:17:52:e2:
82:53:9f:f4:1a:31:1f:9c:78:95:f4:e3:65:75:9c:1c:9c:ef:
82:4a:7c:ab:40:78:c4:8e:62:47:77:f0:23:f3:b6:d9:aa:a1:
4c:4a:d1:95:71:37:f7:fd:77:dd:a8:3e:1c:9f:ef:40:ec:19:
be:8b:10:72:cf:51:c6:fb:cc:89:d1:95:1e:ef:d9:2a:d4:47:
3a:ec:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:28:55 2025 by rpki-client