Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: RYMxPti+T4GGvRIr4FnYybgEm5EDMZn/3U4rLLjuMPI=
Subject key identifier: AE:55:1A:C8:C0:73:85:6C:A3:DA:B7:3D:3F:F4:3F:F8:01:DD:58:70
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 0196CB05711157C9A3AD46CBA1A6F107C19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 19:00:53 +0000
Manifest this update: Tue 13 May 2025 19:00:53 +0000
Manifest next update: Wed 14 May 2025 19:00:53 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: QMfeVx1cYnHw0/uOTRZT/FW/Gwid9Q5dTNSrxV9BCSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:71:11:57:c9:a3:ad:46:cb:a1:a6:f1:07:c1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: May 13 19:00:53 2025 GMT
Not After : May 14 19:00:53 2025 GMT
Subject: CN=ae551ac8c073856ca3dab73d3ff43ff801dd5870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:0d:96:4a:79:89:24:3f:5e:23:2b:69:2c:
ce:ba:77:80:3d:60:d7:3b:a0:f4:0e:11:bb:a8:b6:
55:50:98:12:3f:7e:09:3e:63:b1:ed:b8:22:44:a5:
74:c6:ea:f5:48:4c:ee:85:e6:d8:db:ea:fb:19:bb:
e7:92:86:2b:db:d0:00:f3:74:1a:19:2c:90:27:ea:
9b:37:1d:10:aa:d9:5a:fc:d2:f4:44:0d:36:5e:f7:
7f:7a:54:03:0d:a9:e0:69:94:25:80:f8:ba:ea:7e:
dd:1d:3d:94:75:b1:dd:57:a0:0b:63:a3:5d:e2:8f:
c1:d9:ea:40:87:4d:2b:45:8e:ab:3b:6f:29:4e:3f:
61:ae:89:5d:18:a4:3f:60:1c:ce:2c:a3:50:84:dc:
b2:f9:b5:13:73:18:07:37:b0:50:d7:4c:bf:ae:14:
2f:49:7e:19:d0:93:52:52:8a:4a:b2:8e:e4:4c:0e:
35:db:fe:d3:cc:44:bd:dd:8c:87:21:c6:25:86:80:
11:f3:f7:5e:63:47:4b:13:20:1a:cd:48:41:42:39:
b5:c6:38:8e:09:ac:64:72:c4:53:56:04:2e:b6:36:
f6:b9:6b:7f:ff:02:90:10:e2:bd:6b:ce:e6:f6:a5:
7b:44:ff:15:87:4f:87:56:b8:33:ea:47:36:0f:8f:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:55:1A:C8:C0:73:85:6C:A3:DA:B7:3D:3F:F4:3F:F8:01:DD:58:70
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:7d:cf:fb:89:f8:78:f6:bd:d1:48:bb:ac:19:a8:7d:df:81:
f3:eb:90:81:9d:29:74:97:10:91:f6:b1:8b:0c:6d:85:a7:40:
ae:17:ca:7f:aa:46:b3:e6:1e:c8:30:32:ca:c9:e2:43:aa:42:
45:0d:98:f5:74:36:43:08:2d:b6:89:21:da:60:a1:e2:a0:3a:
af:79:e0:f9:ab:db:6f:18:35:6d:9e:bd:4f:42:1b:48:15:ec:
64:36:9c:22:49:36:bc:c4:9d:3b:f4:9d:94:e9:98:37:2a:aa:
5d:20:e2:3e:0c:5c:8f:d7:49:df:e1:cf:ca:db:ae:7d:d9:91:
d9:27:19:c0:b5:df:40:00:0b:2a:62:ae:0d:fb:44:8b:b0:c4:
c4:20:9e:d1:46:b4:f6:3e:27:ae:45:1b:72:ce:26:e6:cb:75:
a7:60:b0:bd:19:cd:42:1e:97:08:c8:6b:b0:cb:ad:7b:6d:90:
80:75:9b:58:97:15:ca:e1:e7:6e:5d:66:d1:cd:2b:f7:60:c0:
95:19:9b:3e:7c:39:b8:fa:70:fd:bd:88:8d:e9:b8:e4:3d:c5:
88:de:b7:df:21:89:49:6f:6a:04:28:70:ea:a8:1f:6d:3e:02:
c6:a7:b7:df:db:c1:21:6f:6f:a9:d6:71:f8:f3:70:cd:53:33:
0a:e7:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:39:54 2025 by rpki-client