Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: y+TFcbBYwjmt0nYdn1Sq1xR2lzrrOUFOIIDN1gEmPO0=
Subject key identifier: 91:54:C5:22:27:33:C3:D5:BD:20:B2:EE:65:FD:9A:D3:8A:2F:6F:E6
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 0196B8C809873AC591662423E4FAE7187400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 05B8
Signing time: Sat 10 May 2025 06:00:39 +0000
Manifest this update: Sat 10 May 2025 06:00:39 +0000
Manifest next update: Sun 11 May 2025 06:00:39 +0000
Files and hashes: 1: TuQDQ8nJBbYLub1mzr6Exv_MEOE.roa (hash: mNd0eAJJzc4YIh0tYa+bIHu2wbr2Q6C9CMzRK0s5ooI=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: zxsg+O2Mttc+epYy+NbbQwXBSkJ8aXUpyYsN71JwfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:09:87:3a:c5:91:66:24:23:e4:fa:e7:18:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: May 10 06:00:39 2025 GMT
Not After : May 11 06:00:39 2025 GMT
Subject: CN=9154c5222733c3d5bd20b2ee65fd9ad38a2f6fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:45:fa:d9:f8:47:62:ee:59:12:97:d1:94:
b7:de:e2:74:0d:7f:d6:de:8c:6f:7e:bb:89:18:39:
62:07:58:3f:61:9a:48:ca:4b:c6:04:ad:95:d2:3f:
2e:ef:21:cd:b2:4c:11:07:6e:4b:63:9e:2f:3f:2b:
5a:46:55:d7:23:ca:2c:01:f4:1f:85:d1:db:70:40:
ad:b5:d9:e0:b8:23:15:2d:d7:dc:64:c3:23:b0:0e:
b9:ea:0d:ae:c7:0e:90:2b:17:0c:14:4b:4d:64:f8:
53:3a:ca:e6:97:cd:cd:99:3c:66:a8:41:d0:e4:c5:
d0:01:96:3c:7c:ab:76:e4:1e:bb:40:0e:0a:4c:6e:
b2:85:1c:c5:84:9f:43:3f:14:1d:34:6b:70:fa:8c:
dd:e4:36:a1:22:86:26:af:aa:82:7c:78:d2:3a:5e:
42:62:e1:3b:fe:5c:41:aa:db:1d:d8:1c:96:7d:da:
ef:2b:63:a1:a0:11:18:b8:f1:0f:82:71:ed:d2:e7:
0c:94:87:d5:d5:61:f5:7d:1a:5d:bf:41:8f:33:a2:
f7:4f:2e:ea:6a:fc:e5:75:0d:ae:da:d9:91:fe:6c:
6e:c2:08:70:ef:66:3a:7a:fe:cd:1a:5b:f2:e3:6a:
fd:0b:5b:27:1a:b4:b4:70:76:aa:e3:88:e7:c9:78:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:54:C5:22:27:33:C3:D5:BD:20:B2:EE:65:FD:9A:D3:8A:2F:6F:E6
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3a:5c:29:0a:47:41:c5:e6:77:d5:22:a8:ef:35:1c:a0:76:
6f:e3:f6:38:d8:ba:4d:74:b7:bc:a4:d5:af:d5:6f:0b:32:51:
a3:26:dd:fb:f0:48:a9:3c:f6:e1:a3:17:16:e7:af:84:88:bd:
d4:6b:a4:fc:a3:f7:10:67:44:1e:e4:88:5f:6f:be:8d:0e:91:
97:ce:33:3b:a7:40:e3:e0:3f:f9:e4:0a:c4:43:e2:68:d5:d2:
17:ae:38:e4:1c:11:f0:06:b7:38:cb:b1:61:ac:46:20:7f:a6:
99:9f:f8:4b:00:66:7e:04:e5:07:46:13:39:00:35:20:17:ec:
88:0a:1f:23:e2:04:95:41:03:92:aa:98:26:15:ea:ae:0b:b0:
7a:72:ce:91:df:13:91:f5:a2:7a:e3:d2:6f:84:f0:94:bf:f0:
a7:38:f5:d2:d0:24:a5:b4:e5:24:1b:5c:45:41:fd:15:8d:cc:
e7:31:96:f9:1b:86:ca:b9:5b:88:fb:a8:b1:7a:be:68:20:dd:
3d:22:61:c6:0e:6c:4d:d2:e1:f3:a9:ec:86:3a:46:ae:0c:9f:
84:88:78:2e:27:a7:60:21:45:e8:1f:51:47:e9:c3:39:22:8e:
e2:c7:34:5d:d1:a1:4a:9a:79:8a:ee:d9:4b:c8:31:25:72:c2:
6e:70:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:22:51 2025 by rpki-client