Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: 8/AN1f+nJXX1PPlxRtW4ifF7zJl8wy4kCcmXmSuDqJ4=
Subject key identifier: 2C:72:90:67:77:09:C2:91:C6:0E:CB:6C:38:2F:59:39:02:0A:08:F0
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0196BE253275A109FB479316FFEB59ED30E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 07:00:30 +0000
Manifest this update: Sun 11 May 2025 07:00:30 +0000
Manifest next update: Mon 12 May 2025 07:00:30 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: VpQfxeHWQWqO3p1vnah8SXWhmNnRRr8PQnufgJNl2o8=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:32:75:a1:09:fb:47:93:16:ff:eb:59:ed:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: May 11 07:00:30 2025 GMT
Not After : May 12 07:00:30 2025 GMT
Subject: CN=2c7290677709c291c60ecb6c382f5939020a08f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:7c:55:13:72:a8:62:45:cb:82:c9:9a:96:
7c:07:82:2b:bf:62:58:6d:68:5f:40:a7:e8:1b:43:
18:38:5e:67:16:71:18:6c:24:1d:96:b1:97:52:a5:
e0:f5:db:6f:af:56:8a:b4:90:c5:a2:5c:94:7f:21:
4e:35:2b:f2:98:f8:72:e6:45:13:f6:b2:d6:92:d0:
83:76:2d:3b:15:15:43:a9:6c:d8:42:b7:dd:56:09:
83:22:40:c8:d1:08:50:9b:a0:9c:8c:91:37:ef:e1:
fb:54:f9:13:46:03:39:01:b6:7e:cc:f5:0c:27:75:
39:31:10:81:3f:44:49:60:2d:d7:6c:1e:54:23:9a:
d6:00:67:a7:cf:98:2c:c8:92:f9:64:3f:55:0d:b0:
80:10:21:1b:7e:4c:80:ed:32:e8:08:8b:50:f2:c8:
0b:c6:ef:55:6c:72:11:ad:e8:73:db:b3:d3:a7:39:
00:da:87:16:05:e2:fc:b6:0a:24:a4:1b:98:cc:ac:
71:fc:d6:3f:50:a7:b2:c2:3c:34:ea:89:16:6f:82:
72:be:68:92:9c:6d:f1:c9:63:cf:86:8c:c0:e9:f0:
ee:e5:b6:89:81:5d:10:d7:86:9e:66:54:07:63:39:
f2:c0:37:8b:3f:54:61:ae:b8:d3:f6:9b:ec:39:6e:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:90:67:77:09:C2:91:C6:0E:CB:6C:38:2F:59:39:02:0A:08:F0
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:c4:dd:ad:07:ea:5c:0c:66:f7:64:97:de:73:5f:3e:80:
17:eb:b4:ac:70:27:14:b2:76:fb:30:5e:db:84:e5:64:6c:db:
7b:b4:c3:a2:83:01:c6:3b:9d:0d:52:97:d2:36:d2:99:c0:76:
27:67:77:63:06:b7:4a:1c:a5:c6:f8:2f:d4:fb:4e:eb:58:78:
c0:c0:c9:cc:67:68:4b:cc:06:17:a2:da:cd:22:b8:24:ea:c0:
1b:cf:96:da:2b:bb:27:60:cc:26:d5:2e:2a:ef:37:1d:ce:54:
cb:1e:3e:e3:9d:53:3d:5b:d8:ff:76:8a:a7:3c:47:0e:fb:bb:
2b:3d:b8:ed:fd:34:7e:86:b6:cc:c0:5a:bb:78:ac:d0:99:ee:
af:bd:9a:67:05:d2:37:55:6c:95:be:fb:c7:9f:cd:ef:d6:5f:
40:29:83:8c:81:2e:95:ba:2e:b6:40:f0:be:41:93:d3:3b:ac:
3e:fb:71:4e:c9:a0:3c:b0:0a:88:eb:6a:23:77:2b:34:1f:e5:
4f:1f:b9:76:4b:a7:7b:1d:ec:ff:92:db:05:1c:0a:84:5c:a4:
ad:39:bf:91:5f:dc:ea:37:9c:7b:3a:0e:46:ff:e7:cd:9f:c1:
aa:3d:d7:dd:85:ca:a2:c8:eb:58:2f:7f:a4:61:e7:06:8f:68:
ae:9d:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:27:58 2025 by rpki-client