Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: 79NW/utEwiuVcLC/pUjzOLu1hsmm+iibuJN5Pd5DMvs=
Subject key identifier: 64:D1:98:69:DE:39:A9:FA:38:DD:51:61:83:83:F4:33:62:08:91:F8
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 0196A0BFC3138A3F19977C75B3AA7B5F9175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0C05
Signing time: Mon 05 May 2025 14:00:43 +0000
Manifest this update: Mon 05 May 2025 14:00:43 +0000
Manifest next update: Tue 06 May 2025 14:00:43 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: cAHhEgLvLCGQcIgS4R4zbClcyaXazX5OycdO4tJYGGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:c3:13:8a:3f:19:97:7c:75:b3:aa:7b:5f:91:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: May 5 14:00:43 2025 GMT
Not After : May 6 14:00:43 2025 GMT
Subject: CN=64d19869de39a9fa38dd51618383f433620891f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:f8:8d:5c:55:13:ba:87:9e:05:04:46:44:
95:e6:ec:6d:77:71:44:bc:26:10:22:b7:09:9c:b3:
ff:1b:45:ec:ab:7f:45:eb:29:4f:75:ea:26:35:5d:
5e:46:b0:8e:9d:0f:b4:c0:fd:f5:57:9c:6a:87:db:
c5:c1:9d:b5:30:cf:6c:8b:24:e9:af:31:a5:65:28:
9a:e4:49:43:5b:76:5b:29:f9:a0:3d:73:cd:8a:47:
87:f9:b0:60:4b:d7:1c:55:79:c1:f1:de:99:f1:ba:
97:e7:a6:32:c8:11:31:bb:f7:0f:80:db:c8:6a:a1:
5c:a5:45:e0:fc:61:c3:51:1e:22:05:b8:f8:a3:1a:
df:77:af:f8:5d:b6:e1:61:3c:17:dc:5f:76:30:b2:
0c:25:c7:ee:20:72:55:99:ee:ac:84:31:97:91:99:
c0:5a:02:8b:aa:24:df:90:59:47:87:5a:60:41:2d:
cd:1e:4e:7f:14:8c:55:7b:46:5d:75:e9:16:ed:5a:
a1:9e:9f:9a:27:5b:6d:15:72:4d:29:3b:db:cf:b8:
8d:28:e8:99:e8:9c:65:f2:c5:7c:8f:66:0c:db:e0:
aa:48:c8:60:c8:7d:12:09:a6:53:b9:54:f6:f9:dd:
30:eb:48:15:6a:a9:7e:4c:cc:d6:df:91:92:7e:cd:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:98:69:DE:39:A9:FA:38:DD:51:61:83:83:F4:33:62:08:91:F8
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:6e:8d:50:53:e1:89:8d:94:38:0b:1b:50:bc:ac:8c:b6:
81:a5:60:80:76:73:d4:a4:9f:c6:fe:fa:bd:99:ba:9e:ee:67:
07:7a:65:82:2a:fc:da:ce:d9:4f:54:1c:a2:a8:8a:6d:bf:c5:
04:77:20:fc:45:20:39:81:db:49:01:77:0f:cb:14:5d:4a:14:
af:f6:7d:e1:35:3c:86:b3:81:9e:7b:92:a9:05:da:66:34:fa:
c8:b6:c2:44:97:76:21:99:12:04:51:a5:3a:31:4d:bb:8f:c2:
8f:b0:4f:3a:dc:99:c4:3e:a2:d0:3a:b4:66:f4:3b:8d:03:d6:
c8:b9:1f:16:a6:78:e9:5b:1f:d2:4b:47:d8:c7:cd:6f:8f:b1:
69:55:26:fc:ad:61:78:38:b2:47:5b:a5:51:cd:30:40:88:22:
8b:41:c9:b0:a0:1e:f2:0f:b9:44:b1:5c:fb:33:85:cb:35:55:
ef:af:cb:09:2e:43:1a:6c:aa:bf:23:39:3d:cd:4a:a2:b0:79:
2a:cc:11:c6:74:a6:13:12:29:da:62:18:6e:c3:86:de:f0:30:
fe:52:2f:73:e3:53:ef:1a:ea:0e:f1:d6:a2:12:f9:ac:37:21:
6b:ca:38:f2:59:ec:57:4c:ac:a5:57:92:dd:6e:14:28:32:02:
56:e3:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:26:45 2025 by rpki-client