Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: aXKahI9UsSf/4RVxRB2qsxYafWyU52w4jDqIZmmO0N4=
Subject key identifier: 14:8F:E1:C4:1F:84:02:DE:53:C9:12:D6:CA:A5:32:EF:98:79:84:48
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 01969FE441CE24C13D26C54C9CD7C8F8D239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 10:00:58 +0000
Manifest this update: Mon 05 May 2025 10:00:58 +0000
Manifest next update: Tue 06 May 2025 10:00:58 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: cPgZvB/BFNS5Qy/zu1xGekIRcr7UFZYCFj33pH7O4T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:41:ce:24:c1:3d:26:c5:4c:9c:d7:c8:f8:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: May 5 10:00:58 2025 GMT
Not After : May 6 10:00:58 2025 GMT
Subject: CN=148fe1c41f8402de53c912d6caa532ef98798448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:d5:8b:14:11:a5:dd:f9:08:1e:78:05:8b:
13:e5:db:f6:78:ad:90:8a:92:08:33:92:07:8c:51:
0f:ea:79:d2:96:3f:0a:6d:1d:74:22:d4:31:9a:bb:
ae:7a:d9:aa:ef:23:24:35:a9:b2:a1:a0:39:c6:db:
b8:6e:06:52:a2:d4:c8:65:0f:c6:3f:fb:5c:d8:e8:
c9:47:47:e0:13:1a:47:a8:80:0a:68:34:e5:c4:7d:
49:fa:c7:88:08:f6:6e:95:02:af:62:1b:c0:c5:27:
87:3e:49:83:33:e1:53:56:fc:e2:18:9a:e4:c4:64:
5a:d1:28:9d:6c:7c:6f:39:59:58:83:08:a1:e6:cd:
dc:67:f8:7a:8e:9c:8e:d4:af:23:b3:96:58:d8:68:
8c:5c:59:ec:cd:fd:8c:51:b9:cb:86:20:17:75:ee:
a7:ea:2a:1e:80:15:08:2c:84:8d:ac:02:22:24:2a:
5c:e8:11:8d:a3:f5:7e:49:2f:ab:8f:30:fc:b5:b5:
e0:3d:d4:1b:6a:f6:9d:22:82:e8:27:76:99:3c:97:
e5:68:3f:2b:9e:5b:a7:8d:e0:d1:67:ab:33:4c:da:
70:4c:71:13:72:eb:71:62:e1:d6:31:d7:07:dc:75:
19:63:83:7e:4a:4f:88:fd:00:b0:ee:aa:8d:25:2a:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:E1:C4:1F:84:02:DE:53:C9:12:D6:CA:A5:32:EF:98:79:84:48
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ad:21:8d:7d:17:93:f9:dc:4b:83:1e:68:61:18:fc:55:4f:
5f:20:c9:d4:93:e2:ce:00:f3:2f:b0:60:f5:49:79:5c:1e:b9:
13:2b:f5:80:b9:c3:9e:b4:1a:b3:14:32:e9:4a:4e:57:e7:af:
18:9f:8c:88:56:8e:14:3d:dd:ce:59:01:10:51:23:de:63:d0:
a1:46:17:27:73:ca:aa:f3:89:d5:76:d5:fe:fb:00:d9:5f:e0:
82:7f:47:3b:06:bf:af:4a:57:eb:6c:e0:c4:4f:3b:af:cd:c9:
66:28:ed:58:5b:e6:c4:c7:a6:5f:3f:4e:2b:91:d9:cd:65:61:
d9:6a:d2:19:1d:9f:b1:d3:49:e0:6f:f9:6e:64:33:c0:3a:01:
e2:d3:31:00:4b:20:2c:0a:9b:3b:a3:22:15:7a:16:2b:49:11:
a4:a7:20:9b:4d:9a:66:e2:5b:c0:f2:7f:8f:51:58:0a:01:26:
5a:c3:96:26:b4:b5:db:fc:88:93:85:22:c8:a2:82:44:7b:7b:
3b:c3:8e:bc:da:82:43:14:fc:65:45:13:68:72:29:11:93:eb:
ce:9e:2b:60:c5:80:af:a6:97:48:86:9b:12:44:cb:97:86:d8:
36:17:e0:80:7f:23:5a:77:30:17:cf:0c:af:34:1a:1a:65:8f:
82:24:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:09:38 2025 by rpki-client