Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
File: y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json)
Hash identifier: I4MeoPNpF532j+LIGNXt17ZLsN19eMEbCfonZHVTLeE=
Subject key identifier: 9C:76:C1:4D:82:CA:16:79:9D:AB:F0:B6:E1:50:B3:00:E6:10:04:89
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial: 0196BAED2DC995313D4A7509440AA7BEB457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
Manifest number: 0BA1
Signing time: Sat 10 May 2025 16:00:27 +0000
Manifest this update: Sat 10 May 2025 16:00:27 +0000
Manifest next update: Sun 11 May 2025 16:00:27 +0000
Files and hashes: 1: OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa (hash: af8mlEBnTxkbr73XYFoiiYy6suBahBU1dHobCDHfy/U=)
2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: C20jRUX78WeL7XfoGaFeEp6sf6MIyMLwgyR3jv7IAas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:2d:c9:95:31:3d:4a:75:09:44:0a:a7:be:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Validity
Not Before: May 10 16:00:27 2025 GMT
Not After : May 11 16:00:27 2025 GMT
Subject: CN=9c76c14d82ca16799dabf0b6e150b300e6100489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6b:68:1d:63:58:c7:f4:dd:11:11:6f:47:89:
8f:9a:11:c0:ee:da:e1:43:ee:2a:2c:f3:a2:21:65:
df:88:a6:83:5f:8e:c4:25:91:7e:d7:43:37:6a:53:
0e:e8:fd:f8:ea:b6:9e:eb:61:0b:38:81:e0:eb:50:
0a:ac:89:49:b0:8a:a9:47:a7:80:ad:5f:60:9e:9f:
51:0d:ad:c8:85:f1:0e:c0:e2:75:9f:04:dc:e3:14:
75:29:75:10:31:28:c7:28:ad:3d:d3:19:14:05:5e:
b0:f2:89:65:85:e1:24:c8:7e:54:5e:25:39:d8:d7:
2c:db:37:b2:ff:91:0b:f5:3e:d0:38:e7:92:34:32:
f5:17:18:ce:4e:65:d3:75:9e:6a:e4:05:5f:00:9d:
6a:b5:93:c8:5b:6b:20:92:9e:32:fb:0d:68:6a:fa:
37:8e:76:9a:c9:6c:e4:58:7e:f8:40:d6:69:ff:bd:
85:ca:9e:e1:31:0d:9d:98:e5:d1:52:f6:34:4d:fd:
d3:f8:34:11:49:55:fd:53:93:d7:3b:f0:3a:bb:96:
8d:66:f7:e6:e6:c8:91:74:d2:59:02:5c:dd:fb:34:
05:2f:c1:4e:0b:25:1d:ef:3b:ed:5f:83:e7:d0:24:
f1:3b:a6:1c:f1:a6:10:cb:38:f3:ff:4e:38:29:22:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:C1:4D:82:CA:16:79:9D:AB:F0:B6:E1:50:B3:00:E6:10:04:89
X509v3 Authority Key Identifier:
keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:c2:b9:15:cb:76:08:e5:cf:7a:91:44:90:04:7e:fc:b1:
cc:21:3d:de:79:b6:7a:9c:38:3e:31:46:c4:99:8a:68:0d:7b:
60:3f:8f:bd:92:7a:36:4c:f0:68:55:f1:1f:cb:2f:63:6e:63:
d1:55:d1:f6:32:16:3a:46:a2:c4:79:3f:32:07:19:a1:6b:1b:
da:f8:2b:e8:f0:a6:f5:68:01:70:21:f6:6f:62:6c:98:f8:f2:
02:b6:e1:c6:39:35:98:15:48:4f:28:75:93:ee:89:2e:ae:4f:
9d:2f:9f:25:78:79:90:58:7b:4b:a0:d0:84:a5:58:65:e6:64:
d1:10:1f:94:8a:4e:0c:bf:3c:0f:a8:ae:98:e1:2e:17:b7:7b:
39:ec:78:f7:94:2c:96:8e:ef:cf:b5:41:82:66:d5:80:f3:32:
95:71:b1:8d:5e:49:f3:eb:f3:70:60:c4:3c:2f:b1:e5:1f:b1:
eb:04:56:15:dd:8d:62:61:45:e7:3f:a7:96:c2:44:7b:91:17:
a0:8d:3c:d5:a7:36:a5:63:5f:3b:f9:9a:5b:0b:37:21:a0:5c:
38:5c:1e:10:35:b5:c1:9b:82:d1:6b:81:d8:f2:68:16:90:33:
d1:42:93:f2:0f:1a:62:ac:74:41:7d:e4:4c:ec:57:48:e5:87:
ab:75:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:55:03 2025 by rpki-client