Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: 2zDlfKw+vo7lRqjSX5R19y2WrFuzyPhIFE7HVSeqwqw=
Subject key identifier: D1:4A:9E:F1:13:CC:92:DD:3E:C0:9E:00:09:F5:DD:F1:F4:70:43:01
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 0196BC6E6484DC263038407FD8A5DAD782D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0BC9
Signing time: Sat 10 May 2025 23:01:13 +0000
Manifest this update: Sat 10 May 2025 23:01:13 +0000
Manifest next update: Sun 11 May 2025 23:01:13 +0000
Files and hashes: 1: 3DeOifSeLxMUCM20VxHQS5cXQE4.roa (hash: 783WmkyHs/Bvag8AxFOjFyrEJCCbAmS83HXavAaPMKY=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: JgmzsHIVXZbuqmMl8fzeMEWS20wweeoM4pObQ1Z0xG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:64:84:dc:26:30:38:40:7f:d8:a5:da:d7:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: May 10 23:01:13 2025 GMT
Not After : May 11 23:01:13 2025 GMT
Subject: CN=d14a9ef113cc92dd3ec09e0009f5ddf1f4704301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:b5:31:77:2d:b5:bd:32:82:5c:ab:5c:e7:
f8:c2:32:c6:a1:28:f2:8b:96:dd:0e:01:ff:9a:b3:
b6:ff:df:fb:38:df:95:2b:e0:4e:46:eb:ea:48:94:
4f:eb:05:0a:4a:fb:7b:7e:23:5b:3e:76:81:f3:71:
96:6e:d4:1d:83:6d:76:80:54:11:4a:1c:46:54:00:
28:52:9f:af:7f:41:73:89:1d:91:e3:e7:96:bd:87:
c0:49:98:35:7a:c8:05:ab:c2:e7:a3:22:a8:11:3d:
58:10:5a:06:7b:47:04:08:1f:10:bb:f7:62:61:55:
87:bf:bb:35:7e:c2:b3:26:8f:25:65:8c:0f:80:9e:
57:b1:5f:f2:1f:7c:f4:83:65:f1:52:fe:72:37:ec:
fa:56:d2:c8:de:ab:97:86:25:21:0a:06:fc:a1:2c:
26:b8:92:84:94:6a:e6:35:b1:16:b3:cd:9d:91:51:
ad:4f:d4:d5:d2:0f:5c:6b:41:d7:06:94:ca:51:97:
50:c9:b9:1c:68:95:62:da:98:ce:e5:27:b9:1a:6d:
9a:f0:5a:25:12:3b:fd:41:50:66:ca:21:60:c7:18:
8c:5d:0d:3a:cd:94:0b:89:6e:ac:bd:58:a6:12:64:
8d:92:c3:9b:61:ca:12:f3:11:3c:2d:46:50:8d:ba:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:9E:F1:13:CC:92:DD:3E:C0:9E:00:09:F5:DD:F1:F4:70:43:01
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:f6:51:ec:f8:9a:09:84:5e:4b:46:f1:0c:91:83:fb:ce:
67:3d:ee:99:2c:65:e0:01:a7:b2:44:33:16:08:da:ae:1a:2d:
45:5a:46:68:18:62:cf:71:3b:06:e7:35:32:61:3a:88:42:ce:
61:d6:4a:0a:94:52:06:8b:6b:15:fc:59:a0:65:ba:ca:e1:b3:
c5:c3:52:80:9d:74:cc:50:e5:a7:0e:91:56:5b:6c:fc:7e:fe:
5f:74:d9:46:67:af:ae:8b:3a:cd:88:3f:e1:bc:1f:83:4a:97:
49:96:7e:87:79:52:cb:60:ab:b5:ff:d8:a5:5b:33:8b:17:cc:
c7:b3:e6:06:db:05:ef:a5:fd:b8:09:b3:9e:9a:96:bf:e5:9d:
35:2b:b4:f7:eb:7d:51:7c:15:02:b5:da:03:03:7f:64:ec:a7:
27:e6:b2:1f:1f:f0:97:48:28:84:32:cc:4c:c0:9e:f8:86:55:
b2:19:89:55:c0:36:0b:0e:7c:e4:31:84:97:95:7d:70:e3:4c:
b5:f4:97:c2:23:48:bb:4c:72:89:24:11:3d:f2:76:c8:85:a5:
34:d4:78:24:e9:2f:a1:ab:60:97:b9:32:b9:01:85:79:9e:ca:
f2:00:b0:e5:8b:53:de:69:cd:91:4e:35:85:e5:29:08:3a:89:
aa:64:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:53:11 2025 by rpki-client