Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File: yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier: BloBr30b1xBe8+vv5TQn0X5Fk1ui6X2AYPIyJBGBa5E=
Subject key identifier: 82:57:22:7E:58:E6:81:C7:9C:82:A1:CC:10:2A:0F:8F:0B:4D:0B:61
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 0196BDEED78AD061D9E031347D0A4B8A0D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 06:01:08 +0000
Manifest this update: Sun 11 May 2025 06:01:08 +0000
Manifest next update: Mon 12 May 2025 06:01:08 +0000
Files and hashes: 1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=)
3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: Zbu3R36Xr3DI7jC4QMQRjvaAKEmsX0ykg3O5oubk/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:d7:8a:d0:61:d9:e0:31:34:7d:0a:4b:8a:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: May 11 06:01:08 2025 GMT
Not After : May 12 06:01:08 2025 GMT
Subject: CN=8257227e58e681c79c82a1cc102a0f8f0b4d0b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:fc:fb:5e:bf:c3:f2:f1:8b:1a:de:f8:ec:
75:75:35:49:96:bd:b5:a3:25:ce:fc:f4:66:50:63:
14:4a:84:38:fb:99:39:4e:49:76:88:0f:db:ab:d4:
09:44:c9:16:02:67:b7:ae:c2:f3:11:90:d0:ca:73:
80:12:8e:4e:fd:26:38:6b:96:5e:9c:0c:79:03:f3:
2b:92:cd:46:a5:8c:18:e4:63:7e:b4:79:70:c6:98:
85:4c:8d:68:20:9c:98:6d:03:04:5f:26:27:4c:79:
3e:25:71:d5:2f:28:29:4b:17:63:09:0d:62:e5:ca:
1e:a9:10:81:79:ef:ec:fc:f1:af:d9:68:0d:49:28:
a6:dc:18:0a:55:0c:f4:8e:7d:e5:4d:55:79:86:4e:
b5:4f:a4:48:d1:88:05:90:20:8f:30:9d:29:43:fd:
c0:6a:77:db:6e:bb:f5:e7:81:77:5d:bb:31:ab:06:
67:68:37:bf:fb:0d:03:e7:48:43:72:ad:85:1d:48:
23:33:a3:15:27:ec:cc:b3:61:2c:4e:6e:3b:0f:4d:
44:cf:b2:37:17:1e:95:09:e4:93:5d:d0:18:13:46:
33:cb:82:ae:ef:4d:32:c8:9f:38:00:46:fe:fc:66:
d8:00:5c:c1:8e:4b:67:50:c8:14:3d:fb:49:85:87:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:22:7E:58:E6:81:C7:9C:82:A1:CC:10:2A:0F:8F:0B:4D:0B:61
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:89:24:8a:c7:1c:b8:17:11:0c:d8:b9:e9:0f:a7:5e:6f:
2e:5a:6b:d2:29:76:b2:d9:2b:e1:63:df:1a:a2:c0:cf:8a:90:
60:c5:34:7b:62:e4:56:73:fa:1b:49:5c:98:3e:5f:d5:52:a4:
d7:5a:24:3c:86:c8:8b:52:f5:67:13:07:95:0c:5b:13:d5:fc:
7f:5e:5d:e8:39:a2:0b:da:12:68:7f:b7:ac:20:ab:a4:6b:ec:
bb:67:22:14:13:92:74:db:cc:f8:c9:88:b2:a3:76:5c:5f:11:
b1:6d:0f:7c:66:1a:6f:9b:94:01:51:84:5d:13:b9:fb:1c:53:
d7:ae:59:b8:d2:db:68:c9:56:65:2a:5d:a5:b4:38:2d:c4:d3:
06:89:f4:50:13:54:70:78:1e:08:98:74:ee:2f:e6:2d:b1:44:
90:a7:00:58:5c:80:f3:b5:af:97:ac:1c:cb:f1:03:e4:c0:99:
37:4e:00:ca:c7:82:28:27:ac:af:79:d4:87:bb:c5:6d:c8:d2:
eb:a5:51:07:fc:40:8d:35:58:f5:80:ad:ee:d5:a3:21:8c:8a:
6e:ce:67:6d:6a:b6:52:f3:0b:79:fc:93:47:85:a9:ec:2a:fb:
aa:49:2d:24:87:2f:fe:27:aa:c3:44:b0:29:66:6f:01:3c:13:
38:ab:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:26:06 2025 by rpki-client