Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: n+GP25EXHLkX0rsJEKWU5pdX8VOdKCnCOk8W1LJUGgk=
Subject key identifier: 26:CA:F7:CB:8E:2C:FB:28:8B:73:5A:1D:7E:05:B9:12:EF:78:E7:A9
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 0196C5A7C8A666666677A8F424221AC07B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 18:00:29 +0000
Manifest this update: Mon 12 May 2025 18:00:29 +0000
Manifest next update: Tue 13 May 2025 18:00:29 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: yhUxRhc1dVhdCFMeMH5LR4+G7h3PJdzmjnDYBDqF6s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:c8:a6:66:66:66:77:a8:f4:24:22:1a:c0:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: May 12 18:00:29 2025 GMT
Not After : May 13 18:00:29 2025 GMT
Subject: CN=26caf7cb8e2cfb288b735a1d7e05b912ef78e7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d8:8d:77:fd:9e:55:1b:1c:48:c7:87:7d:07:
a3:50:5b:38:fd:18:6e:64:73:65:79:36:46:ce:68:
69:20:9e:2c:38:32:26:e4:ab:22:68:9f:bd:a9:1a:
f1:d1:16:0e:03:ac:46:ea:ab:75:6c:94:0c:21:e2:
26:34:4b:d2:81:75:a7:cf:5e:4d:45:ce:1d:ef:48:
c4:9e:41:ff:db:31:23:45:37:37:26:af:68:31:e3:
32:b4:bb:0a:0c:dc:d9:dd:77:a5:75:0e:4f:a5:86:
50:2e:2f:ea:e5:57:fe:b8:2b:ca:f1:61:7e:63:72:
03:14:8c:78:64:b0:9c:6d:37:02:9d:62:84:28:e7:
b5:3c:d2:30:47:48:cf:07:41:fa:af:b3:6b:56:fd:
b6:62:69:36:d6:d1:1b:e4:a4:0a:13:01:65:4a:8e:
94:58:46:df:5f:ac:95:8e:3a:bd:cf:0b:91:9f:c7:
90:db:16:e4:76:d4:91:79:25:d9:b4:c0:1d:dc:6f:
8c:2f:f1:41:63:0f:55:02:aa:6e:fd:f7:d8:bc:d2:
7c:85:41:9c:87:fc:5f:39:c7:d6:fa:18:4c:e9:42:
6d:f2:91:7a:2f:4b:99:5b:6a:92:71:cd:b2:a9:9b:
d8:73:7e:13:89:b3:0a:b2:42:3d:31:31:92:31:de:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:F7:CB:8E:2C:FB:28:8B:73:5A:1D:7E:05:B9:12:EF:78:E7:A9
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:8f:66:04:cb:c6:da:5b:51:f4:2d:53:1b:51:85:17:3e:
e0:36:65:bb:90:65:c3:6a:15:3b:0f:e8:e8:0a:96:15:40:fb:
43:3e:c3:1e:6d:6f:1e:70:de:87:2c:a5:2a:a6:90:6f:60:23:
b0:ad:86:3d:96:52:9f:8b:3d:ac:6c:df:7a:a2:26:d2:13:aa:
81:fb:75:63:25:19:97:93:35:7e:de:e9:c6:4f:10:48:18:82:
2b:1a:bc:5f:2b:62:26:dd:e3:9c:75:7c:31:c5:7a:0d:f8:c7:
64:6f:58:75:77:cc:c7:b7:ba:29:fc:53:4b:d1:ca:20:0e:15:
64:6e:f5:8c:c8:61:60:44:f3:d3:ff:dd:7e:39:a7:af:5d:23:
13:c6:55:ce:f0:05:57:21:8e:e7:f6:7b:d3:da:64:31:a8:e8:
73:7a:65:84:df:05:2a:00:1e:b9:14:32:9f:99:8a:6f:4a:21:
1f:7d:d3:8f:e6:d9:77:2b:e8:b2:5a:a2:ac:b7:d7:1e:85:a0:
52:aa:84:76:7e:ee:0c:e2:bc:31:a2:b3:35:0b:c7:92:59:17:
63:cf:dd:61:14:8b:5f:63:55:0a:cb:5e:9e:7d:29:be:83:a2:
70:fa:6e:17:09:dc:73:48:4c:5b:88:05:7a:09:96:f8:ca:19:
b4:bf:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:48:03 2025 by rpki-client