Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: yQWyyvIbkjNroC99k9d/83G1fiVetGrzuNsXRTiPcuQ=
Subject key identifier: CC:4D:4A:54:4A:6A:4B:5C:84:7C:A4:AB:11:24:66:43:B8:B2:49:73
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 0196DAAF3B50B0617321B3066F1A9DADCE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 029C
Signing time: Fri 16 May 2025 20:00:39 +0000
Manifest this update: Fri 16 May 2025 20:00:39 +0000
Manifest next update: Sat 17 May 2025 20:00:39 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: r179mJRL+JuZjYIqhaQRCZCAuUps2WLA7GD7JE/nXgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:af:3b:50:b0:61:73:21:b3:06:6f:1a:9d:ad:ce:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: May 16 20:00:39 2025 GMT
Not After : May 17 20:00:39 2025 GMT
Subject: CN=cc4d4a544a6a4b5c847ca4ab11246643b8b24973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:4d:7f:d2:a7:d6:2a:93:2a:8b:d3:57:04:
2f:0f:c8:c0:be:ce:f8:4d:c8:c7:49:32:f5:ed:52:
9f:11:5b:50:a0:08:e6:13:c3:ed:c2:76:d1:6a:74:
a8:34:7a:32:ca:c4:aa:36:d3:4a:41:b3:89:a9:77:
cc:3c:c9:2e:3c:cd:d1:3d:91:c1:ef:08:90:63:20:
e5:48:35:ac:fa:bf:c6:29:d3:98:cd:99:57:31:ad:
5d:97:34:2d:3f:f6:3e:48:d0:00:09:86:a5:56:a0:
af:94:87:07:aa:ce:ea:fb:d9:01:f7:67:bf:13:f7:
69:a0:2c:b7:cf:fd:8d:99:a6:a9:18:7a:64:03:6c:
35:d4:98:74:75:b4:05:cf:e3:e9:68:f7:f6:67:2f:
15:ca:4b:6a:0d:06:77:c5:5c:c5:7f:de:f0:85:2e:
12:25:8e:c7:2d:e5:c9:a0:9a:63:97:bd:e5:89:09:
19:ad:ba:ec:20:67:77:02:15:6f:77:83:ee:2d:ef:
6a:30:ed:2e:3a:3a:b6:0d:9a:82:9b:21:13:7a:51:
27:96:65:39:6f:5d:8d:26:53:6d:e9:c2:a4:6e:3f:
36:d9:1c:ba:2e:07:47:48:cb:d3:e3:3d:5b:fc:48:
ff:77:d2:78:75:99:e9:41:e5:da:01:85:f0:05:63:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:4A:54:4A:6A:4B:5C:84:7C:A4:AB:11:24:66:43:B8:B2:49:73
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:3d:9c:96:53:13:7d:df:cc:67:60:55:87:a7:ff:37:4c:
c7:3a:11:41:01:be:7c:02:fa:61:4d:e0:3f:69:7b:cb:0d:d9:
d5:55:18:11:34:0e:81:3a:00:77:f6:76:8b:55:25:fb:b9:eb:
5a:4c:02:31:bf:44:71:5e:8c:6b:3c:b1:c4:d5:bb:17:77:4a:
ad:e4:ed:00:6f:a9:58:fa:b9:e4:59:b3:4a:f9:74:6e:5c:99:
34:7c:51:71:3f:09:7c:46:5a:80:ad:08:38:e7:61:4e:db:cc:
3d:06:ed:9c:86:d9:48:d5:ab:ea:cb:25:81:ec:6b:8b:16:a4:
96:62:1a:6a:70:39:e6:42:c0:be:05:ed:ac:cf:c7:39:95:58:
2f:6e:da:ec:b9:9f:c4:9b:86:20:21:6e:36:46:69:2c:d5:b0:
d1:f5:8e:51:ee:5e:e9:89:fb:79:83:db:45:90:9f:ec:de:c4:
93:0b:40:1f:5e:29:45:a3:e0:cb:0b:e6:0b:d2:5f:08:cd:9a:
17:a1:80:0e:a6:91:ea:29:a6:64:47:fe:cb:d1:c0:8c:7e:1f:
e8:58:d0:da:a7:39:f7:dd:78:1d:7e:37:d4:fa:8d:aa:5b:1b:
7a:00:57:7b:03:b3:ff:5b:7b:42:75:dd:13:2a:e9:86:9c:c5:
34:b5:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:32:44 2025 by rpki-client