
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File: yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier: VukmpbQmMcfiLvDnO1kCIvbpWN1r/CVDMoqjZWGdwIA=
Subject key identifier: 40:D2:F0:DF:59:16:10:C2:95:93:67:CE:6B:D7:E8:D0:20:2F:03:63
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 0196D0D008B3F087B76211B093FDB4C368A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 22:00:16 +0000
Manifest this update: Wed 14 May 2025 22:00:16 +0000
Manifest next update: Thu 15 May 2025 22:00:16 +0000
Files and hashes: 1: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (hash: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=)
2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: xxpBMNkUaQeFJ5XKsjGHmBUHP6AoGH/WdbUUVtzfJgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:08:b3:f0:87:b7:62:11:b0:93:fd:b4:c3:68:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: May 14 22:00:16 2025 GMT
Not After : May 15 22:00:16 2025 GMT
Subject: CN=40d2f0df591610c2959367ce6bd7e8d0202f0363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:b0:b8:fa:ab:8c:b1:ea:1c:4b:b2:ea:e6:
d9:4d:12:35:f0:9e:55:60:3f:38:f9:29:b2:c8:75:
47:65:b3:ae:fa:e7:70:a0:c8:1b:22:db:ac:73:14:
cd:f7:69:fa:db:f8:2d:cb:99:4f:3e:77:54:fa:6b:
bb:fc:6a:8c:f8:73:6a:01:71:af:4f:a6:9d:5b:91:
ab:33:60:62:88:2b:ff:84:33:e2:d5:45:78:3b:cb:
ee:31:51:f3:21:47:7a:9f:68:9b:e3:52:b6:0d:4a:
95:ec:50:11:55:e7:1c:b7:e3:6e:e2:7c:9a:cf:d0:
b0:27:74:df:33:4d:ef:21:0d:86:9a:cb:c7:8f:c3:
bb:33:80:8b:16:c9:e8:08:47:aa:55:e7:65:2a:71:
9c:f7:be:66:db:40:ab:14:30:d9:d1:01:f5:2e:b4:
3e:c6:a7:ce:6e:1b:72:ce:5c:ae:af:d1:29:03:cf:
60:fc:b4:28:e5:7a:0b:81:46:b1:84:02:0d:81:df:
c0:f2:00:ad:be:c9:21:f1:e3:10:36:6b:dc:8a:81:
ad:9d:42:af:92:cf:b2:78:70:25:56:3b:16:1b:75:
9e:bf:35:11:43:2a:32:c9:83:39:fc:77:09:aa:30:
b9:13:15:9d:c9:72:24:55:1c:2d:6d:17:93:c9:91:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:F0:DF:59:16:10:C2:95:93:67:CE:6B:D7:E8:D0:20:2F:03:63
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:13:f4:28:89:72:5f:b2:3a:3c:d3:35:3d:e7:e3:00:c0:
00:4e:b6:a2:18:20:81:a6:60:26:6b:ee:a7:75:45:0c:fd:08:
7b:61:b6:c3:7b:59:cd:f4:fe:6d:3e:88:79:14:6d:0a:7e:c5:
90:d4:cf:f7:cb:b4:fb:2c:c1:20:72:2a:3f:ea:8c:46:fa:be:
fa:53:d8:c4:d2:34:21:f9:1c:ae:9e:02:ee:2a:78:d0:35:e9:
81:e3:b9:d2:97:6f:12:0c:e0:11:a0:74:70:e1:09:d1:70:ba:
cc:32:14:94:23:75:88:ff:a6:20:eb:cf:36:4b:53:f2:5e:45:
d5:7c:54:50:a9:33:61:97:d0:5d:c8:97:de:6c:07:ab:e1:90:
53:9d:60:f8:79:32:23:82:e7:e7:18:e8:35:55:2b:50:45:eb:
47:d9:ab:fa:25:33:99:3d:1e:80:de:0e:3d:72:f3:d7:76:8c:
4a:f8:89:bf:54:42:43:d4:bc:22:ed:de:a7:ec:45:b4:c7:99:
a7:0e:d2:0d:b6:83:15:71:79:e0:68:f5:7e:85:a2:fc:96:cb:
ab:84:38:0b:83:09:5f:f0:94:36:09:3e:5e:43:2a:f7:30:9e:
2a:1f:c5:77:43:c9:f4:f6:be:09:8e:e0:ef:a8:d3:b7:ef:f2:
c5:08:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:21:17 2025 by rpki-client