Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: qwwlQUrIP7jBzLOHZcOZseG0EY7zMUj69UoU5o6wnBk=
Subject key identifier: E9:91:89:68:E5:7D:00:9C:08:03:4E:F0:AF:02:C3:C8:BA:D1:2C:B9
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0196C8724E067B3EF1E9A49C9565C8AEFE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 154A
Signing time: Tue 13 May 2025 07:00:56 +0000
Manifest this update: Tue 13 May 2025 07:00:56 +0000
Manifest next update: Wed 14 May 2025 07:00:56 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: iCLwS5qZr7NorxAj267ne5Rs7SrDCPXsvu5NZStZJGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:4e:06:7b:3e:f1:e9:a4:9c:95:65:c8:ae:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: May 13 07:00:56 2025 GMT
Not After : May 14 07:00:56 2025 GMT
Subject: CN=e9918968e57d009c08034ef0af02c3c8bad12cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:2a:68:44:05:ec:ab:c5:e7:fe:a3:f8:17:
ff:bc:d1:e9:76:3d:8e:f2:00:9d:9e:69:ba:88:63:
31:9d:f0:20:36:d5:8f:52:bb:ef:5f:27:56:da:30:
26:f2:70:97:b8:5f:37:fc:f6:ad:0c:63:0f:cc:2c:
c5:a3:76:0a:d6:e9:54:74:a8:87:d5:97:12:b1:ba:
1a:33:9b:99:0b:34:45:0e:04:45:21:57:8a:bb:db:
f5:62:83:a4:f1:7f:e8:1f:c6:f9:c3:d7:c4:06:22:
d6:e7:c4:41:53:27:3c:7f:c2:5a:56:ae:dd:14:24:
b9:65:c6:bd:3f:1c:42:4b:99:be:2d:22:f4:fe:c9:
2c:ed:38:81:8e:de:45:5c:df:79:28:2c:dd:d0:25:
36:96:91:c1:0f:cb:ad:48:36:a2:7d:f0:bf:4f:b8:
10:03:29:c9:d7:e2:da:30:e6:70:f8:69:c2:4f:c1:
7e:29:07:64:e2:3e:75:b9:6e:5c:5d:ad:0f:25:22:
7d:60:80:24:d2:a3:d8:9b:1d:ad:94:8a:4b:a7:d0:
da:6a:c8:9e:bd:84:0a:b1:7f:ae:47:7c:b0:b8:d5:
36:01:a3:cc:7f:11:38:b5:bb:20:fb:96:e9:39:74:
bc:a1:37:ff:23:ed:90:b3:1e:11:9c:2f:09:96:9c:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:91:89:68:E5:7D:00:9C:08:03:4E:F0:AF:02:C3:C8:BA:D1:2C:B9
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:04:f9:9a:8d:2c:88:43:63:a9:5d:ee:c2:04:e2:59:b5:fe:
3f:9f:41:c5:cb:9d:42:44:c9:5d:bf:32:44:bb:54:8d:10:35:
be:6a:4f:81:cd:94:6e:ba:cb:7b:61:da:2b:93:23:ac:01:7e:
e9:28:92:ec:b5:09:4d:aa:49:1e:89:37:af:9b:3b:f9:15:04:
a2:fd:62:1c:4b:bb:ac:55:6f:bf:77:a6:f4:9b:ce:79:10:ec:
c3:e6:73:c3:d6:3a:c4:af:db:00:9a:29:ec:15:57:e0:1b:5c:
c1:01:d6:82:64:0e:f6:f2:76:57:4c:82:6c:f9:78:5f:35:11:
f0:e3:5d:b1:18:3d:80:da:28:3e:39:71:7b:e3:05:44:eb:de:
47:8b:48:d3:b4:12:74:8c:06:f7:5c:cc:8c:a3:fc:dd:61:e1:
81:60:4b:07:79:d5:38:78:7e:ac:e6:cc:f1:ca:f4:d0:87:07:
6f:ce:6c:3c:2c:22:96:23:94:aa:dd:95:5b:d4:d3:89:43:f8:
d4:02:41:60:92:6f:f4:fc:32:79:b8:43:e7:8b:b2:27:ef:33:
3c:16:78:30:8b:16:f1:a5:32:49:04:c2:d1:c5:f5:f6:67:95:
df:7b:c1:b3:e0:c8:18:be:7d:c7:36:0c:e6:28:39:16:e1:b5:
9e:c9:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:23:40 2025 by rpki-client