Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: 7KngyRBgIBb6iCpWYTae90l4PRrR1+u9yaibRAyGHr0=
Subject key identifier: C9:92:10:0C:E6:54:5C:D2:C5:FE:99:52:12:97:9E:A1:07:04:8F:B2
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 0196BECA5DBE23F77A0446962091574052DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 117C
Signing time: Sun 11 May 2025 10:00:55 +0000
Manifest this update: Sun 11 May 2025 10:00:55 +0000
Manifest next update: Mon 12 May 2025 10:00:55 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: HCnzQvIYsbMrlqtciFRd9L/0YfvOix+kNgmRB0T8WE8=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:5d:be:23:f7:7a:04:46:96:20:91:57:40:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: May 11 10:00:55 2025 GMT
Not After : May 12 10:00:55 2025 GMT
Subject: CN=c992100ce6545cd2c5fe995212979ea107048fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:00:4d:e0:ff:e7:82:ef:b1:87:11:73:83:
c1:07:88:e2:f6:c1:9b:5c:49:c4:68:e5:63:25:9f:
90:b7:29:b5:0a:e3:69:72:ce:b0:c1:97:ed:c3:e2:
6a:6a:7d:4f:f1:45:72:c1:8b:18:1f:a3:6f:47:af:
9a:d4:73:39:e2:ea:c2:4b:25:20:ae:0d:9e:48:d5:
e5:ac:60:13:d8:bb:63:d0:ae:1f:6c:ac:dc:13:48:
a6:e0:97:54:1f:a1:92:92:b6:74:f8:9a:73:50:d5:
f9:5f:a8:b5:28:7d:db:a9:22:be:6b:6f:66:96:31:
ea:e7:70:d4:32:f5:e4:8f:24:24:c7:a9:d2:36:4e:
3f:c4:19:86:f4:19:76:aa:80:55:63:b2:98:ad:97:
76:bb:39:db:a8:d8:92:d8:17:da:bc:5b:96:51:a8:
f4:6b:fd:2c:79:cf:6f:4a:10:b7:a6:b4:f0:f4:63:
09:52:09:0a:2a:c3:30:8a:1a:f2:1d:77:01:92:9a:
ec:02:8e:41:a8:75:45:81:26:b2:9e:8c:e9:60:52:
69:5a:b2:e4:50:5e:79:6a:a1:9c:c1:75:fa:10:b9:
6e:5b:0b:98:ae:77:44:65:0c:04:88:95:eb:fa:3f:
01:42:7e:b5:94:3a:cd:47:ad:df:e0:22:88:6b:31:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:10:0C:E6:54:5C:D2:C5:FE:99:52:12:97:9E:A1:07:04:8F:B2
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5f:e6:86:f1:13:de:28:47:88:90:f0:b1:91:11:f2:0c:7e:
b1:e3:28:86:63:66:8f:39:84:5f:59:c3:f7:ea:93:a7:10:8f:
4a:ef:7c:2a:ff:4e:3b:1a:99:d8:d7:38:8a:4a:39:3a:93:6b:
d5:c8:31:75:63:ea:37:ef:17:97:fb:e6:aa:41:a9:dc:46:40:
6c:9c:12:4d:3a:15:53:79:1c:8f:19:8a:65:37:7a:42:c2:7d:
9e:fc:a5:06:f7:7d:9f:23:31:85:51:70:72:d8:58:32:bb:a3:
64:33:69:aa:88:9c:da:52:a1:3b:85:75:67:f5:94:ee:f6:09:
5d:81:33:ed:58:eb:25:f6:e9:a2:66:41:a8:7c:f1:77:34:3d:
76:31:eb:48:ff:02:43:fe:f8:53:b0:3b:4d:5b:03:75:ab:5d:
8c:72:63:b0:fc:ec:55:34:a0:b9:f2:28:db:15:d8:5c:4e:19:
f4:b6:cb:bb:79:ca:8b:f5:3e:33:cb:b9:c3:27:3d:ba:56:35:
be:d5:30:cf:34:42:d2:f6:f0:89:ce:94:4e:37:c2:1e:f9:05:
4a:cd:f4:93:df:cd:95:9c:a2:b2:1a:80:78:10:60:6b:aa:b6:
88:f1:90:98:3e:a1:2d:bb:cc:eb:c7:e0:83:69:6d:48:ff:07:
50:c3:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:55:11 2025 by rpki-client