Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: z6I4gKHsWeugo/J3BwKlrZsCbuQQb5ZsPblLDs3mRM0=
Subject key identifier: 90:00:44:22:20:08:71:57:7A:5C:E6:9F:54:AF:64:2B:61:9C:3E:EB
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 0196C984F72FF49249035C1F1BE8A9F4B40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 12:00:56 +0000
Manifest this update: Tue 13 May 2025 12:00:56 +0000
Manifest next update: Wed 14 May 2025 12:00:56 +0000
Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: b0k3prNZtZtHheW5NRGsF23SbZwMoJPYVhNa61eSfgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:f7:2f:f4:92:49:03:5c:1f:1b:e8:a9:f4:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: May 13 12:00:56 2025 GMT
Not After : May 14 12:00:56 2025 GMT
Subject: CN=90004422200871577a5ce69f54af642b619c3eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:c2:76:ce:00:53:04:45:9b:01:e2:8b:d2:
86:34:ed:d9:64:6f:bf:49:4b:25:08:08:db:8d:cc:
c0:4b:60:bb:b5:2c:51:c2:75:b7:38:c0:14:64:f1:
6a:68:44:fe:5e:6f:ae:5c:c7:0a:4b:38:c6:53:f4:
ce:e6:38:6c:ec:9c:66:e2:1e:27:bb:86:68:ad:57:
2b:d2:5f:53:df:56:28:24:e8:ac:70:92:54:37:48:
9c:1c:4f:a7:3c:40:6c:be:fb:6e:20:1c:7d:b9:3c:
e9:d2:f0:94:04:98:22:81:1c:9a:4b:63:41:f9:50:
c7:3d:eb:8c:f1:03:8d:a8:d0:b8:00:35:77:16:23:
0f:a0:0a:62:05:78:ea:59:1d:c9:68:74:c6:d5:f2:
f9:0f:a1:90:88:23:30:f4:8a:c9:0b:2b:5c:53:4b:
96:20:42:ca:f8:5e:c0:0e:ff:46:45:7b:84:55:34:
99:e7:7e:6c:03:b6:9c:6c:e2:9b:cc:02:36:44:40:
05:51:63:6d:60:26:11:70:cf:c1:1e:57:5f:2f:5d:
db:f0:52:b5:df:60:e7:e1:57:ef:a1:11:fe:d1:85:
0a:e4:72:02:44:32:f2:49:90:74:19:ab:37:98:9e:
01:65:76:f7:67:ce:5d:38:c6:d3:b7:67:d2:9c:2e:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:44:22:20:08:71:57:7A:5C:E6:9F:54:AF:64:2B:61:9C:3E:EB
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:af:3f:09:59:28:c6:9e:02:8d:e9:24:4c:35:97:23:24:da:
d4:27:04:8b:be:cc:52:ca:91:b5:62:93:45:04:f8:1c:0b:0a:
f6:4a:c1:c6:a0:57:da:b9:b1:7d:97:89:ab:4f:61:b8:1d:5f:
72:12:49:46:c7:8c:22:9d:05:4e:aa:aa:15:ad:7e:fa:26:1b:
41:21:56:39:36:82:8f:7c:5d:9a:a7:78:80:2d:d9:b7:74:1b:
f1:77:ed:0a:d8:8d:5e:ad:23:13:d6:4a:b8:a2:12:90:b4:c7:
12:06:48:3e:c3:39:1e:d6:d5:9c:a3:47:00:ba:03:ea:08:d6:
50:b7:f3:40:1a:c7:4b:df:2d:2a:84:aa:95:79:43:a5:42:05:
99:47:5f:38:7c:3b:13:6d:8b:03:15:24:db:f1:69:fd:61:45:
10:0e:64:5f:d3:29:01:0b:c4:52:4e:dd:c8:36:69:92:83:f6:
0c:9c:f7:44:b3:59:b7:94:f1:b9:e4:ea:dd:df:84:0e:17:07:
e2:53:5b:5e:fa:39:01:b4:f9:46:67:40:ae:94:4c:cb:7f:a5:
d4:21:5f:00:81:93:c7:30:0f:55:8d:f1:3d:01:c9:87:12:b5:
9a:20:89:f9:53:23:7f:1c:d0:ff:ae:de:ea:4e:b0:47:5b:af:
5b:f0:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:23:36 2025 by rpki-client