Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: 9HonTBjynK9Gg862E8TB1lgNlCj0Wt8VcXB3sOpl0gY=
Subject key identifier: 1F:18:16:84:1A:DB:08:8B:1F:71:D7:81:E6:C2:C2:BC:03:0B:B4:D3
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 0196C27004E35AE2378DD442D60AA34BA2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 05B2
Signing time: Mon 12 May 2025 03:00:43 +0000
Manifest this update: Mon 12 May 2025 03:00:43 +0000
Manifest next update: Tue 13 May 2025 03:00:43 +0000
Files and hashes: 1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: kF5WPBjuusG3cmllwMR4Wvo8NqwYv13irEoQpG6uAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:04:e3:5a:e2:37:8d:d4:42:d6:0a:a3:4b:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: May 12 03:00:43 2025 GMT
Not After : May 13 03:00:43 2025 GMT
Subject: CN=1f1816841adb088b1f71d781e6c2c2bc030bb4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:f1:7b:c8:04:f4:14:53:40:8b:7c:cb:0c:
1f:f4:cd:1e:dc:0c:e2:e0:2b:0d:9e:20:62:0f:66:
5c:65:25:0d:f6:f7:08:52:cd:34:e8:3c:2d:50:ef:
50:8a:84:79:35:1c:3c:5a:88:43:29:88:ca:02:79:
e7:82:89:fb:29:aa:0f:b4:89:a1:4f:4d:24:8e:f9:
e3:97:18:4b:cc:3b:da:e1:e8:63:86:87:50:5e:c3:
4f:c4:54:20:b9:b2:2c:82:11:85:2c:fe:84:a9:8f:
5f:6b:b1:ef:fd:41:3e:f8:5c:3f:86:28:e0:70:f5:
80:9f:00:9d:2f:27:75:16:dd:19:47:ee:05:b7:9f:
5c:74:90:67:d4:2a:02:7a:ab:fa:07:76:95:17:c0:
9f:83:cb:0e:12:03:2f:1f:69:40:c5:b7:ff:43:0e:
9d:51:d1:5c:d5:66:d5:11:76:a1:54:ae:2a:8c:55:
06:48:d7:67:67:12:a2:8c:b8:78:d6:23:80:95:26:
96:09:24:1f:47:d3:2f:89:d7:67:cc:95:69:fb:bb:
73:a6:a7:59:d0:e2:44:ae:5e:5f:c0:1f:a3:6f:4e:
d7:dc:0c:85:ef:6a:82:b1:fe:06:d3:c8:89:09:75:
ab:08:eb:b0:e1:d8:55:d6:c7:ad:b9:7a:cc:3e:74:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:16:84:1A:DB:08:8B:1F:71:D7:81:E6:C2:C2:BC:03:0B:B4:D3
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:93:fd:bf:2b:a8:e3:9c:c5:ce:73:66:e6:87:00:9b:74:9c:
24:30:9c:ca:5d:0f:dc:c4:c3:b8:db:3e:90:57:a1:3d:c6:a2:
22:27:9d:63:08:0c:a1:82:ed:e9:22:ea:37:a1:b7:60:a6:99:
7f:61:b9:63:c3:76:a7:f1:df:f6:c0:84:d8:8c:d2:cb:8c:7d:
f4:63:5a:c2:37:6f:5d:71:8f:57:41:ac:8e:32:08:6c:3d:4d:
17:9a:26:6c:85:8f:96:29:5d:52:a0:ab:b5:5d:1a:b7:56:6f:
ac:9f:a8:30:74:63:af:59:9a:70:bf:ad:4c:80:fa:48:0b:94:
4f:29:86:0e:26:1b:ea:8f:c2:4b:56:d3:6c:a0:c2:59:d3:67:
d3:18:cb:fe:bd:89:b8:ff:59:06:fd:9d:f2:b3:96:47:32:0a:
af:c3:1a:38:ff:f3:ea:93:c8:7d:1a:78:8b:ac:10:46:f6:2b:
21:c9:8d:d0:dc:bd:b1:e0:9c:33:8a:07:07:ba:4e:45:38:a8:
93:11:1a:2f:0a:fd:e0:cd:83:74:12:79:73:50:05:56:bc:d9:
67:a1:e1:72:bf:b2:29:22:c6:80:04:7b:76:a8:37:32:05:ce:
04:2f:3a:a4:e5:4c:8d:08:ef:e5:74:27:9f:bc:71:6d:7f:9b:
56:30:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:36:35 2025 by rpki-client