Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: A0+fJacd2neYDHWwMcmYWWtCMHdP3aVny3+ruKknwUo=
Subject key identifier: 7F:42:82:7D:0F:01:D0:8B:E0:67:BA:BB:55:07:20:DB:F0:4A:5A:75
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 0196B747A066643B8FF6C906A59D808FCD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0C18
Signing time: Fri 09 May 2025 23:00:46 +0000
Manifest this update: Fri 09 May 2025 23:00:46 +0000
Manifest next update: Sat 10 May 2025 23:00:46 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: zeyMvJtfdttt4Mz3nV+JHv1XdC3w4UjgWkbrfC+mK7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:a0:66:64:3b:8f:f6:c9:06:a5:9d:80:8f:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: May 9 23:00:46 2025 GMT
Not After : May 10 23:00:46 2025 GMT
Subject: CN=7f42827d0f01d08be067babb550720dbf04a5a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:af:42:a6:08:9f:33:92:e6:9e:af:80:fd:
d9:ea:20:c6:d6:0e:5a:6c:f8:55:6b:8f:b4:70:65:
ca:35:5c:4f:f5:07:41:68:2f:42:e1:80:e2:78:81:
ed:2a:c9:a4:3b:fb:d0:2d:b3:70:73:09:9e:c0:b5:
1f:c4:fb:26:a0:3b:6e:8a:44:90:a8:c1:44:92:77:
97:b1:38:40:2c:7e:b2:f7:a5:49:30:43:dd:6d:c2:
f9:0a:86:0e:6f:25:43:65:f0:c8:dd:08:7f:06:70:
06:55:ac:ea:42:73:2f:64:5a:3f:58:78:ca:65:37:
24:56:49:34:d0:f3:59:84:57:8b:93:17:28:ab:b4:
a9:48:20:e4:5d:f5:3c:7e:b0:3b:69:92:d0:f5:fd:
73:e1:2d:32:43:66:49:9f:64:e3:87:e8:0d:5e:cf:
68:4a:b4:3c:5a:f8:ff:4a:71:b7:85:0e:31:f8:a5:
27:32:66:a4:f3:63:36:c6:55:e3:c4:6a:d5:e6:77:
b5:04:30:59:83:8b:91:ed:95:bf:63:23:13:2a:8f:
92:d9:07:59:12:82:41:bf:02:30:ed:44:92:18:d2:
e0:3e:cf:18:60:5e:87:55:ca:ca:93:03:93:0e:62:
a0:56:61:5c:d0:19:6b:c4:0d:21:ba:ef:55:c5:99:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:82:7D:0F:01:D0:8B:E0:67:BA:BB:55:07:20:DB:F0:4A:5A:75
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:17:18:ae:8c:c3:4f:51:10:2d:c3:0d:24:e5:99:21:8e:
7f:4b:b3:26:e8:59:10:1f:d9:0b:95:10:60:69:25:15:25:f9:
dc:16:86:8e:aa:90:c1:29:1f:fb:06:33:69:e5:f7:8d:0d:55:
6c:66:0d:2d:c7:61:99:bd:19:a6:b0:9b:b6:cf:0d:86:32:f2:
8a:ac:80:3d:f6:02:b4:d9:55:07:17:a5:18:c9:54:8b:13:9c:
e6:c5:e9:7c:14:15:29:81:56:cd:c1:81:36:4f:ad:bb:a4:34:
45:9f:c7:0a:29:18:5d:b2:1d:ff:b0:72:70:d2:43:16:b8:ce:
c3:e0:39:c1:42:0f:ca:83:47:9f:a1:e0:4b:11:03:0c:77:b9:
d0:cf:59:00:2c:ed:1b:3e:4a:cb:25:d6:06:ab:f2:ea:2f:44:
42:e7:4b:d7:66:f2:7c:48:a1:08:82:f5:fc:a6:1c:46:a3:50:
32:88:24:cd:96:c1:b8:8a:74:72:a4:93:12:b9:a7:9b:33:82:
49:16:5f:22:61:0b:af:15:8c:11:c9:22:b0:25:f1:a9:1a:b1:
36:96:8b:c3:c0:25:a4:b1:43:76:1a:31:5e:bd:17:45:56:cb:
92:95:fe:08:e0:fa:61:19:15:22:f5:59:50:4c:3f:74:12:1b:
40:e5:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:22:23 2025 by rpki-client