Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: LK9YKcvLke7GMZ9YwmuTFOIoLEtj5WUgAGe/RW+6FP8=
Subject key identifier: 7F:A5:85:50:D0:B4:2F:A4:A7:01:6D:AD:D1:2C:BD:C6:20:4E:E3:4B
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 01969E9A24BAAE63331468E9BFC306F526E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0A45
Signing time: Mon 05 May 2025 04:00:24 +0000
Manifest this update: Mon 05 May 2025 04:00:24 +0000
Manifest next update: Tue 06 May 2025 04:00:24 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: 1dS5LfXWTUTIWL0AqrGF62fiCL/Mh4CELyOvjTV4jLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:24:ba:ae:63:33:14:68:e9:bf:c3:06:f5:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: May 5 04:00:24 2025 GMT
Not After : May 6 04:00:24 2025 GMT
Subject: CN=7fa58550d0b42fa4a7016dadd12cbdc6204ee34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:2e:a2:8b:1c:ce:28:d6:c5:6d:31:25:20:
9b:d7:b5:66:d5:13:c9:0d:02:57:57:5f:be:f3:22:
bf:f8:6d:57:bf:28:5e:4a:af:b0:ac:93:40:4e:ae:
4b:b0:8f:5d:06:1a:1a:e9:c5:28:e8:ed:64:a0:f7:
65:61:6a:3c:4f:b7:87:83:85:15:3a:8a:14:ad:83:
9d:29:35:94:cc:37:63:91:9f:b8:1b:98:67:b3:12:
0c:6c:bd:ea:4f:b7:e9:33:cd:96:74:3e:b9:70:5b:
15:cf:32:8e:d8:0a:46:0c:2d:6a:b5:aa:eb:2c:3f:
7c:ad:0c:d1:ae:5d:ac:20:50:5f:61:3a:9e:cc:de:
73:d6:99:d3:61:d7:76:98:1e:4b:37:02:38:84:8e:
55:ab:39:9b:33:c1:19:4c:b6:df:41:f7:35:f2:2b:
c2:a8:92:34:5f:a7:35:bc:cb:35:ce:ed:1f:bc:47:
1d:a7:f9:c2:21:9b:c9:ab:64:5c:cb:f1:28:d3:a3:
7a:20:34:4e:cd:eb:fa:b7:ce:5f:98:20:94:35:b9:
01:14:95:ca:d4:d1:a6:b0:3d:09:7a:ee:38:f6:62:
30:c8:17:0e:57:16:2d:16:9f:9d:67:40:c9:94:cc:
a4:01:45:3d:79:95:ad:74:d2:4b:4c:bb:00:6b:27:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:85:50:D0:B4:2F:A4:A7:01:6D:AD:D1:2C:BD:C6:20:4E:E3:4B
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e0:0a:99:c5:34:c1:f5:3a:e0:58:ad:41:5b:d5:5c:5c:c3:
b0:6f:dc:16:c4:09:1e:5e:2b:fb:5c:2a:ea:5e:df:28:00:07:
03:33:6b:e8:3f:f6:c7:62:cf:3d:5a:a6:71:5b:33:54:e9:52:
d7:a4:8e:eb:73:78:64:87:2a:6d:13:63:86:bb:a6:60:76:65:
1b:5d:e5:e5:cb:3f:4b:c8:e5:1c:be:9b:3d:fb:e6:eb:aa:c6:
2c:61:14:81:3b:4c:32:4f:9b:74:de:05:02:f8:50:eb:92:a3:
8f:a9:98:ee:e9:fb:cb:af:43:cf:f4:92:16:f2:90:28:7e:c5:
71:65:10:28:0f:99:72:2e:d3:77:da:1e:48:60:11:3f:3d:2b:
c3:2b:ba:63:62:bf:22:35:f6:22:71:c7:d6:5a:c5:53:bb:07:
bb:22:98:39:72:b6:f2:c9:b5:53:34:e0:57:74:6c:fa:92:3c:
2d:db:7c:4e:ff:76:c4:d7:a5:64:1d:62:95:1c:31:c4:6b:b8:
ff:6b:ff:b8:85:9b:a0:54:c6:cd:9a:9b:cd:12:c5:46:4a:ff:
4d:42:ae:3f:21:23:3c:a7:c3:75:0e:b3:84:59:05:22:16:31:
49:c2:dc:b5:9d:f9:53:36:47:a1:f9:96:30:eb:7c:a5:7e:11:
6c:f4:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:15:44 2025 by rpki-client