Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: e9K/4uxO9WPVE3EzGvtp+gbEzbQ6QmBfizgcFj07HaQ=
Subject key identifier: D7:FB:4B:EB:10:A9:61:89:0F:44:19:6C:E4:83:6D:82:85:4F:6B:2B
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0196BB5B4288D34C831BC0C9D0013C7295E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 18:00:42 +0000
Manifest this update: Sat 10 May 2025 18:00:42 +0000
Manifest next update: Sun 11 May 2025 18:00:42 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: TqEj7Cr+t0ZapOEUYFPx3p/QmclmszJXlA1QwfxAJs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:42:88:d3:4c:83:1b:c0:c9:d0:01:3c:72:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: May 10 18:00:42 2025 GMT
Not After : May 11 18:00:42 2025 GMT
Subject: CN=d7fb4beb10a961890f44196ce4836d82854f6b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:e7:c6:d2:54:c8:e3:34:e7:ff:11:a1:ff:
81:27:fb:38:a5:9e:bc:65:fb:8e:1f:60:00:9b:ef:
87:4f:ec:19:71:c6:40:49:6a:ed:4a:00:88:13:4c:
a3:6a:2d:b6:ea:c9:fc:7c:63:d3:4c:1d:84:88:ba:
44:c5:68:68:52:c2:7f:c8:89:73:55:77:0d:8c:37:
68:1f:c4:a0:4a:8a:be:2e:d1:eb:74:fc:a2:92:16:
a3:6c:69:21:0a:c9:f6:7b:8f:dd:16:6e:de:23:72:
aa:f2:db:a3:2e:a3:89:63:17:d9:dc:f3:71:83:ef:
78:fc:e3:a3:2d:45:eb:03:1e:f4:a8:c8:5d:a2:77:
2d:69:5c:14:e2:48:09:89:b5:55:50:dd:60:de:75:
2d:79:70:80:1d:3d:d8:9a:2d:9d:be:f5:a2:a2:18:
dc:36:98:ea:49:e7:b7:45:4d:88:4e:e3:ad:53:7b:
4c:22:d4:29:95:cc:b4:cb:15:b9:b5:f0:86:3a:6f:
ed:1a:5e:f6:1c:dc:e1:01:98:7d:23:6e:ae:f9:d3:
c8:26:1c:64:57:d6:f7:e5:41:c9:00:d7:87:68:8c:
bf:2d:8e:c4:af:9f:32:e0:3a:fc:61:45:e6:d3:cb:
23:c7:a6:40:d2:e0:dd:fb:e3:a2:26:e6:d2:52:a9:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:4B:EB:10:A9:61:89:0F:44:19:6C:E4:83:6D:82:85:4F:6B:2B
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:db:76:77:1d:06:70:60:47:15:a5:28:d5:ed:8c:78:d7:
35:4a:be:77:66:f7:63:de:a9:29:e0:5c:4a:f2:49:eb:f0:5f:
4a:c9:2a:62:26:39:04:6b:25:2e:3d:96:dd:e6:01:d3:9d:79:
b1:6f:16:83:b9:3e:bd:ae:e7:88:e9:d8:22:88:75:05:19:bc:
a0:99:08:c2:f5:20:a1:a6:73:74:3b:6a:aa:a4:43:5d:3b:be:
4e:df:e2:ab:0d:0e:e6:d2:e1:a8:11:42:19:64:93:35:4a:58:
c0:a1:ad:77:80:11:3c:74:4a:f3:b2:f3:a5:b9:73:b0:2b:a0:
66:f9:07:48:eb:57:9b:b4:1a:02:7c:23:5f:65:a9:34:34:d2:
77:4b:ec:7c:da:39:eb:f2:e8:2f:8c:a9:37:fa:c7:b7:38:60:
d7:cc:eb:f0:2e:94:27:ba:30:ee:ba:31:83:29:27:e0:ca:f6:
6e:e3:b6:9a:0d:04:76:40:fc:2c:55:72:89:9e:0a:44:f0:6e:
ef:b8:d9:1b:8b:22:88:63:81:f8:4e:99:ec:30:6b:2b:29:5e:
2e:e7:4a:f4:2f:59:41:62:a2:1f:74:3f:42:c3:d7:30:50:19:
49:2d:09:b5:a3:96:c9:ca:23:2f:9a:cc:91:64:a6:e0:7d:8f:
6b:ed:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:04:38 2025 by rpki-client