Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: RRapyCdEJQmVH71OPtxF309Bt3iPNPIioplAhOxU9Qc=
Subject key identifier: 9D:A3:E6:7F:C8:4A:0B:E0:08:53:DA:B5:90:A0:CE:6A:CF:E8:EB:EC
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 0196BA11314354EC41EA1AD1B8F4E49A1CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 124C
Signing time: Sat 10 May 2025 12:00:10 +0000
Manifest this update: Sat 10 May 2025 12:00:10 +0000
Manifest next update: Sun 11 May 2025 12:00:10 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: oX+NvAvyURsh37RCVnhXAVLrscRzIB0pmHfEF5uS0YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:31:43:54:ec:41:ea:1a:d1:b8:f4:e4:9a:1c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: May 10 12:00:10 2025 GMT
Not After : May 11 12:00:10 2025 GMT
Subject: CN=9da3e67fc84a0be00853dab590a0ce6acfe8ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:b0:86:1a:0b:e6:30:a9:01:62:48:57:ff:
3d:6a:e1:af:4c:68:06:50:40:a8:6b:1a:d4:0f:2d:
f1:67:5c:f7:75:46:12:08:2e:01:34:64:82:e7:3d:
eb:b3:ca:34:63:f8:72:1f:97:82:dd:37:b9:1e:b6:
49:b9:f6:45:01:a8:93:f0:c9:c7:fd:82:01:70:5e:
57:30:b0:a2:45:97:d4:b1:78:5d:eb:c9:41:c0:e8:
c6:f4:bd:c6:3b:e2:08:df:2a:1a:12:13:8e:d2:c7:
37:8e:9a:34:b3:f1:7b:6f:1e:ef:e3:bd:94:ea:d5:
44:4f:03:5f:60:37:29:90:fa:eb:25:22:6c:c4:79:
dd:70:d8:3b:34:4f:47:70:04:36:c4:86:76:43:1e:
04:f1:75:c5:d3:7c:ee:10:57:8f:62:6b:41:68:08:
9e:c7:29:fe:1c:ea:dc:1b:0f:8e:15:d7:4b:07:6e:
3d:02:05:25:6d:21:b5:d2:f9:18:09:25:b1:60:45:
92:db:2c:71:2d:38:96:06:e5:1c:5f:e5:a0:06:26:
f3:2e:ae:18:d3:10:ad:d3:8f:31:35:b3:9f:3b:ca:
60:98:93:7d:5d:31:06:96:69:66:50:d3:93:8a:e7:
84:4c:18:2e:70:28:d7:68:be:c8:f5:42:31:dd:c8:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:E6:7F:C8:4A:0B:E0:08:53:DA:B5:90:A0:CE:6A:CF:E8:EB:EC
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d2:b7:40:4e:a6:61:78:7e:1b:51:92:cb:9c:e9:35:f6:ea:
68:d5:59:9b:11:4c:ac:cb:5c:41:aa:9e:3b:7e:d6:7d:d9:6c:
ae:b1:95:55:2c:28:23:12:5c:71:37:38:38:bf:f4:da:e0:3b:
db:3e:38:cb:28:ab:4b:56:3f:71:c7:6c:9b:c5:08:7f:64:a2:
ea:35:e2:39:72:5e:f4:3c:22:2f:00:39:12:10:1c:f4:9b:53:
ec:e5:5a:32:b6:9f:ee:b1:2f:08:6f:16:43:23:4d:05:ca:8b:
3a:3b:9d:e6:f4:06:1e:9c:7e:58:ed:57:a3:2d:2e:ba:40:fe:
09:1c:c6:0e:19:77:cf:a3:a3:52:f2:ab:db:4e:98:55:dc:09:
ea:80:45:e7:9a:73:86:24:0a:6c:a9:d6:c7:9f:ff:9a:a1:5f:
42:0d:89:ed:7b:c0:ea:ba:a1:a1:aa:b6:dd:09:9d:9d:b0:ec:
59:3e:f4:26:ec:af:2f:66:0d:a7:26:4b:fd:e0:f6:bf:d7:06:
3d:a5:e8:9a:ce:84:5b:8d:14:de:28:4b:e6:4e:ae:6f:6b:19:
9b:1d:73:f3:10:be:1b:e9:d4:dc:4a:99:97:e0:34:26:3a:0f:
09:d3:31:59:c6:c0:2a:96:d4:01:72:96:81:a5:cb:d2:9f:57:
aa:35:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:05:04 2025 by rpki-client