Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: hvQ7FCtveiiRK7nXqcA3l2AqutsEZTYJFl+i63ZGaeI=
Subject key identifier: 76:BA:7F:8B:D0:8A:2E:22:F5:F3:87:A3:AC:71:1F:E7:1B:E4:69:B9
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0196BC36C0D9D3640AEE5AB65C857DF9B6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 22:00:26 +0000
Manifest this update: Sat 10 May 2025 22:00:26 +0000
Manifest next update: Sun 11 May 2025 22:00:26 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: FPbSJh2wGQS1ueJtsChuKXLqKg+f0X3EirGIC6GYDvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:c0:d9:d3:64:0a:ee:5a:b6:5c:85:7d:f9:b6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: May 10 22:00:26 2025 GMT
Not After : May 11 22:00:26 2025 GMT
Subject: CN=76ba7f8bd08a2e22f5f387a3ac711fe71be469b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:d6:4d:46:55:ab:07:f4:42:a1:13:61:95:
6f:ce:17:ca:e1:68:7b:25:ad:ba:9d:7e:db:e6:cf:
13:29:88:de:4d:ae:2a:e5:bd:ca:ba:bf:df:dd:0d:
b5:09:f7:e5:6d:d3:7e:9e:32:0b:17:5b:16:03:cc:
8e:26:8b:67:a8:22:31:59:88:56:5b:d5:c9:1f:85:
c2:6e:0a:67:ad:ea:4f:71:67:ab:f9:7b:6e:c2:06:
8d:0e:15:f1:56:60:6e:72:82:9a:15:9d:43:e2:2e:
7a:3a:03:b2:84:11:fd:58:25:db:60:09:e1:04:78:
29:73:41:8a:cc:3a:d2:0f:c5:99:f1:bc:c7:44:60:
63:b1:5c:eb:88:e2:7e:d6:6f:66:55:5f:30:41:a2:
b3:88:cd:ed:ef:d7:b3:2d:c6:00:78:68:64:92:3e:
a9:89:71:ff:09:37:8b:6d:d5:91:bd:91:e7:bf:d0:
21:70:76:b3:85:df:ea:f3:57:d9:7d:f7:41:2d:e2:
54:a5:b5:a3:e2:45:d9:4e:b5:fa:8e:49:6e:01:9c:
fe:e2:7a:f3:19:06:38:4a:22:9e:b5:8b:7b:ad:f5:
16:4a:c1:e2:c4:6c:82:c3:d1:47:c4:59:86:a4:3b:
71:9d:51:5b:11:7e:79:b1:dd:5d:d0:0c:88:49:54:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:7F:8B:D0:8A:2E:22:F5:F3:87:A3:AC:71:1F:E7:1B:E4:69:B9
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c1:63:e0:9d:2e:4c:6f:5b:1c:a6:0f:fb:d9:f3:e5:eb:d8:
cd:48:1b:6b:05:ee:0d:8f:49:dd:97:c4:30:e3:3b:11:7b:cf:
75:fe:d0:eb:36:87:b4:4c:04:ee:da:40:94:cc:e3:53:27:d3:
44:50:e1:c9:ff:0e:69:cd:da:4a:d4:49:f1:7f:77:7c:a5:9e:
ab:1c:27:5c:d2:e7:1b:e2:f3:cd:a3:9c:e8:29:90:13:02:4b:
1c:20:53:1e:b8:37:e9:a5:fd:04:f2:9e:0d:0d:a7:eb:4f:2e:
c1:d7:d3:7d:6e:39:ee:e4:af:b7:f6:22:e1:c5:da:12:3d:5a:
0b:9c:dc:11:92:82:7a:90:6b:42:2a:3b:28:a8:e6:2b:48:a9:
52:bc:20:ed:41:39:eb:6d:16:40:9c:cc:0c:7c:2c:32:65:94:
b6:69:b4:5d:2b:06:cb:f5:cf:44:15:3f:e3:08:60:01:82:d1:
77:e6:e1:76:21:04:3d:c9:79:10:9c:1d:11:02:be:06:34:28:
2b:de:0f:24:4d:a2:18:93:32:6e:f2:11:97:72:fb:84:89:1e:
bc:f0:7b:48:8e:e5:e5:9c:c5:b0:52:c0:b6:ea:44:35:14:06:
67:4e:27:8b:19:33:ee:9b:f7:c3:f2:56:f7:37:7d:df:17:bd:
e5:de:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:05:36 2025 by rpki-client