Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: beMt2iwyM59eqQckwAJ0Ow/rJq+3nOccF9iwGjHw83w=
Subject key identifier: 4F:5A:D1:A5:7E:8D:AE:FD:57:25:0A:7D:A0:6B:AD:6B:C9:7E:E7:74
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 0196A19B3E79DDD562428B11166B54B2EB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 91
Signing time: Mon 05 May 2025 18:00:27 +0000
Manifest this update: Mon 05 May 2025 18:00:27 +0000
Manifest next update: Tue 06 May 2025 18:00:27 +0000
Files and hashes: 1: DIvBgZwS0Tso3aVf8EICkFleMLM.roa (hash: uFxBmENfxdwwVihL06QRGFulr8RLsRLP+PeZmW4yvHM=)
2: DwPkZR2Fk3XTPYVDkun2x24bTHQ.roa (hash: aeDwVoyUuAcFcTkf4BEFb0mmAMaQsJhzjIfzb6y7vIk=)
3: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=)
4: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: f8udEE4HoaK/wyUaxb8Ojm+aBytykQS/L34e/GPSWKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:3e:79:dd:d5:62:42:8b:11:16:6b:54:b2:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: May 5 18:00:27 2025 GMT
Not After : May 6 18:00:27 2025 GMT
Subject: CN=4f5ad1a57e8daefd57250a7da06bad6bc97ee774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:91:96:73:fe:aa:fa:84:14:55:bb:5d:e8:
00:87:ac:ec:d1:c9:28:6e:84:9e:03:27:86:5b:c3:
39:89:4d:fe:03:03:38:76:dd:2d:86:d7:12:18:75:
d5:cc:d5:97:20:dd:fb:c5:27:b1:6a:d7:0f:23:04:
5d:8f:3e:08:b1:65:f4:1b:98:29:7a:1a:90:8f:1a:
71:a0:dc:86:6a:34:4c:f6:91:f0:8d:da:c4:3f:cd:
0e:e8:1e:6a:10:48:97:6d:25:24:41:2b:1d:2c:cb:
8d:eb:76:d7:ef:36:21:ba:c1:f7:e4:68:47:2b:9a:
78:4a:e5:49:b8:ae:c4:0e:23:92:7f:6d:43:78:00:
78:3e:12:1a:18:4b:7f:e0:83:7c:a2:de:f6:b6:83:
d9:a3:e3:e9:b1:ac:eb:0f:45:be:22:2a:05:fa:00:
21:7e:55:fb:c7:4d:db:c3:72:f6:d6:33:7d:c3:f6:
54:4e:13:7a:30:4c:02:53:21:72:ea:40:1d:8c:0b:
73:b2:91:e0:66:fb:82:f3:79:52:15:13:b0:30:b5:
c7:f8:0c:df:11:b3:e3:73:99:39:c7:86:d3:d7:bf:
88:6e:32:1d:49:38:63:fb:79:39:d1:bf:1a:5a:47:
04:83:58:03:cb:8c:e0:93:77:84:23:57:23:6b:fe:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:D1:A5:7E:8D:AE:FD:57:25:0A:7D:A0:6B:AD:6B:C9:7E:E7:74
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:de:61:4b:d9:cb:0c:98:86:58:c1:b9:90:98:fd:32:60:3a:
bb:a6:f1:ed:d2:e5:65:e9:9b:40:55:e0:28:bf:4e:b9:72:4b:
18:b0:0b:d0:c3:e3:76:52:01:8e:e3:cd:07:a7:cb:f9:b7:87:
02:45:ad:a4:ae:a3:67:86:75:23:7b:30:1c:e5:67:21:37:c7:
e7:05:9d:89:81:af:8f:83:d0:4d:8a:17:b3:56:4b:2a:5d:83:
c1:32:d7:7e:5b:99:1e:97:b1:b1:37:a6:d5:de:0d:45:4a:29:
e4:ba:52:9e:b8:2f:06:5c:23:0d:d4:48:40:26:68:93:4a:7c:
c6:f0:89:c3:eb:74:ee:f3:ca:6f:82:7c:68:a2:17:7a:69:62:
a2:f3:05:69:6d:66:e2:d5:a0:50:48:18:1f:5a:21:3c:e5:40:
9d:ab:1c:70:ed:e1:d9:19:20:28:87:91:33:b0:ef:16:3d:30:
c0:42:72:ad:64:57:64:a5:24:00:26:16:d8:a2:a7:2d:f0:a9:
9c:70:19:23:90:ed:4c:78:7f:92:15:c5:56:59:f2:39:75:2d:
d6:fe:de:f6:9f:82:63:e5:24:53:da:a7:f9:01:c6:25:5c:75:
53:32:84:31:4f:09:b9:48:37:c2:2b:6f:e0:cf:cf:7e:b4:26:
f3:12:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:29:23 2025 by rpki-client