Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: w11aDcpXjih39N6MvLyfW9GyCtRiysyRkWIng83QOcs=
Subject key identifier: 52:AC:10:DF:A8:E0:D4:44:92:C6:06:9C:73:1F:87:E4:4A:51:39:15
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0196BDEE982A0AAF6E1D45F49B1BAB6F009C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 06:00:52 +0000
Manifest this update: Sun 11 May 2025 06:00:52 +0000
Manifest next update: Mon 12 May 2025 06:00:52 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: Np6X+OuJk8Jlk7XzuALa+vlGXYPqmS09BWPHfw0Cfec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:98:2a:0a:af:6e:1d:45:f4:9b:1b:ab:6f:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: May 11 06:00:52 2025 GMT
Not After : May 12 06:00:52 2025 GMT
Subject: CN=52ac10dfa8e0d44492c6069c731f87e44a513915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:67:f5:55:8f:35:93:a6:93:bf:a4:46:6c:
5a:c6:8f:f1:13:65:95:77:e8:78:7f:46:49:2c:65:
41:76:fc:9e:aa:0f:bf:3b:c1:db:e6:3b:0a:d5:87:
37:1f:41:e7:6a:6e:75:ac:dd:bb:e9:75:1e:60:42:
0d:84:bb:b9:b1:7e:d9:ad:74:fe:ec:61:5c:4d:7d:
ec:76:2d:d5:16:ed:cc:eb:08:d6:6b:23:f5:85:26:
7e:ae:30:b6:c7:4e:3a:3a:7c:3e:f4:23:31:28:a8:
9a:a1:39:00:9b:e4:35:3a:23:36:04:5c:1d:08:38:
52:dd:19:1c:bf:27:40:d1:ef:46:68:15:f5:95:39:
6e:cb:29:09:03:bf:95:25:e6:04:fd:1e:e7:e2:3d:
d8:e1:a6:f5:66:48:ce:80:4e:ca:a0:1a:4d:23:6f:
8a:ff:ce:29:c6:dc:ed:cf:c0:a5:3e:b6:c2:fa:00:
6e:68:75:4f:5d:0e:0a:d9:6a:12:15:10:4d:5b:6a:
fc:88:b9:de:65:54:a2:4a:83:cf:0f:73:bc:2c:fe:
8e:9a:bc:60:aa:41:4c:44:76:8c:64:bb:6d:66:06:
94:99:36:60:48:b3:8c:2f:6e:d9:29:ce:9a:64:5b:
14:a0:c3:30:bf:84:37:4f:5c:0e:8f:83:e2:71:80:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:10:DF:A8:E0:D4:44:92:C6:06:9C:73:1F:87:E4:4A:51:39:15
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bf:fe:fe:1b:77:6c:0b:5c:be:a4:2d:b4:71:eb:14:37:7c:
8a:ec:a1:e9:12:7d:94:bf:7c:25:38:5f:bf:c2:7a:5f:ea:eb:
ff:d3:67:5f:c1:76:96:bb:9e:6d:2e:d9:be:ae:92:32:52:ce:
aa:b5:65:46:62:2c:3d:f9:e9:fe:19:29:26:90:6e:4a:45:21:
1a:15:cb:28:f8:ab:ae:71:12:2d:30:c1:ac:dd:bb:d6:e7:a6:
54:38:a0:cb:e4:68:0c:33:41:bf:be:44:74:e4:71:b7:24:28:
97:3c:27:d3:40:49:bc:45:51:34:b6:1a:88:89:b6:6a:05:a4:
a0:5b:ae:a6:c0:12:27:27:29:1b:39:d5:f7:46:04:06:29:e1:
49:38:8d:ff:b2:f0:e5:5f:19:d0:0d:06:f4:9f:8f:cf:e8:c5:
7c:17:84:f7:be:94:28:93:82:c9:48:79:f0:21:bc:31:54:c0:
2c:4b:cc:c9:3c:69:e2:42:67:5f:0b:1a:7e:f0:a1:9d:d2:74:
ed:61:f3:00:c2:a0:72:90:06:77:90:bc:5a:58:4d:f5:c4:38:
a4:77:54:aa:66:34:b0:5d:56:34:71:6e:25:6f:5c:2c:80:79:
09:15:ca:20:4b:0e:47:11:63:cc:a3:fc:b0:09:90:83:28:d5:
1a:90:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:55:54 2025 by rpki-client