Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: LoC7jutq0YXD9AoYusWwVPBZ8MeNuCfOf8CXdslrbws=
Subject key identifier: 29:C5:DE:44:B1:C7:96:F6:47:85:E5:81:82:94:EC:EA:30:DF:03:AF
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 0196B6350EC0E9C6E2715DD304AE6813FBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 03EB
Signing time: Fri 09 May 2025 18:00:52 +0000
Manifest this update: Fri 09 May 2025 18:00:52 +0000
Manifest next update: Sat 10 May 2025 18:00:52 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: RO1fVoUx238UHh6/ijwaa4Bbr4bqsrniegF+b75w+QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:0e:c0:e9:c6:e2:71:5d:d3:04:ae:68:13:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: May 9 18:00:52 2025 GMT
Not After : May 10 18:00:52 2025 GMT
Subject: CN=29c5de44b1c796f64785e5818294ecea30df03af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:96:f3:4d:46:58:12:35:9b:2c:c7:99:1d:
46:65:8c:15:dd:3a:ea:c9:18:83:4c:b0:8a:63:08:
79:1a:46:95:9f:a1:2e:de:31:2a:14:b3:94:b5:d2:
27:f8:b0:1c:a8:c1:07:e4:74:5f:b2:6d:44:53:0e:
90:77:31:43:8d:34:db:c4:5a:a6:51:e4:64:10:54:
23:a7:b8:4e:56:e6:62:bd:f6:fa:92:40:4d:46:b5:
ea:15:0c:2e:df:4b:96:98:48:dd:80:fb:e0:5c:c6:
9e:89:4d:4e:c2:dc:e9:79:99:c5:a5:07:04:2a:39:
28:a2:18:49:2d:11:e5:e0:16:ca:16:71:e4:58:f8:
9d:ee:85:7d:67:66:13:42:e6:99:25:53:f4:56:62:
45:7b:14:5d:02:b2:6f:74:33:54:f9:4f:d5:e5:18:
e3:68:2d:88:5a:2e:64:94:60:fe:62:2b:23:2b:0f:
5c:23:a1:86:a6:08:a1:6b:d7:9b:2c:f7:a5:13:15:
d4:5b:37:6e:22:cf:a2:93:bf:71:3c:ff:4d:2f:fa:
c1:08:86:68:b9:19:c4:42:ac:ad:40:d1:b1:39:6d:
4b:e1:f1:64:16:a9:75:99:9b:6d:91:3f:35:52:64:
83:64:d9:9b:c2:0b:24:0e:a2:11:74:50:25:1e:78:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C5:DE:44:B1:C7:96:F6:47:85:E5:81:82:94:EC:EA:30:DF:03:AF
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2d:f0:aa:32:26:4f:bc:38:70:a2:13:fd:81:85:49:cc:b9:
65:84:35:8a:8b:4f:3a:24:7f:bb:b3:51:26:ce:4e:cb:cc:21:
75:cc:22:07:57:f3:64:76:2c:22:07:83:26:a0:2e:53:96:f0:
91:72:ff:92:a9:44:c0:ca:8c:0f:af:71:1b:5b:bc:9e:5c:28:
fc:e2:b0:c9:48:a5:f1:e9:7b:e8:7f:ca:5a:2c:7b:e9:98:2f:
c2:17:8a:ab:df:ef:dc:16:87:b6:11:53:b8:31:b2:7d:34:db:
85:d9:22:6d:15:12:f7:f2:3e:db:dc:26:36:d0:0d:cd:a0:65:
37:47:ce:8e:f4:fd:b1:1f:c7:81:0d:91:f7:cd:99:08:07:4f:
b8:40:f9:8f:1b:c2:20:f0:ee:79:22:71:43:35:c6:5e:d5:51:
ee:18:13:82:ad:28:6c:3e:0b:fe:49:2f:25:d6:59:c6:d5:67:
96:7b:9b:30:83:b2:2a:6d:f7:43:96:51:e6:65:d9:35:52:7f:
ab:22:97:f0:00:ee:0b:ee:79:7d:42:35:d0:cb:c6:c9:4a:2b:
51:f2:61:45:db:c3:9b:c8:1e:0d:22:26:dd:4c:47:6b:9a:8b:
10:3b:c5:c2:8d:ef:bb:08:94:2a:f9:6f:0b:59:e9:b8:e2:6c:
3a:e2:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:53:52 2025 by rpki-client