Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: K7pay0srj/Lmti0wgVcKKfg9Gz6uv3zpxauZ3R9Awzo=
Subject key identifier: 73:6F:13:2C:F8:6B:E5:D6:E9:50:4C:46:DF:0C:C7:47:7B:E5:53:E8
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 0196BB92191424EECCE9040DEDD39C3867D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0C19
Signing time: Sat 10 May 2025 19:00:36 +0000
Manifest this update: Sat 10 May 2025 19:00:36 +0000
Manifest next update: Sun 11 May 2025 19:00:36 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: xdvyhJ6xUD++OvgOCUuT5PbVYqLABh14MyethdiyK5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:19:14:24:ee:cc:e9:04:0d:ed:d3:9c:38:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: May 10 19:00:36 2025 GMT
Not After : May 11 19:00:36 2025 GMT
Subject: CN=736f132cf86be5d6e9504c46df0cc7477be553e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:86:94:a8:74:e1:da:86:a0:01:64:29:dc:
e3:3c:f4:93:60:f6:c6:35:d8:0d:69:42:8d:e3:4b:
aa:ce:88:3b:e5:da:61:9e:8a:f8:c9:5a:d1:fd:53:
0e:3e:4c:52:36:fb:91:1e:7e:a7:c6:dc:1b:22:20:
31:d1:d4:b1:0a:b8:be:81:ed:09:0a:f8:c7:55:e2:
16:61:9c:ce:96:5f:de:e4:c2:01:7e:cb:99:01:1d:
d6:34:a6:bd:c3:12:4b:07:21:04:0c:8d:ab:b0:af:
48:fa:14:f8:c3:20:58:5b:13:1c:05:5d:9e:cf:5a:
80:d3:de:77:ac:24:f9:64:35:9a:d3:5d:16:9d:a8:
aa:53:6b:55:6e:14:2d:0f:ec:de:6c:2f:c2:ea:4e:
42:5a:cf:db:b4:d3:bc:c1:a2:55:09:b5:9f:c3:90:
57:26:50:98:a4:af:83:20:d3:a0:62:d9:70:51:07:
b7:1f:5e:2e:9b:4c:56:8e:0d:a9:54:96:a1:ec:61:
55:bd:de:c3:cd:c8:ff:b7:1b:c7:13:05:a8:e5:e4:
3d:8a:39:67:8a:3c:b5:32:43:7b:d4:0c:8c:99:33:
c4:63:db:c2:8a:ce:d5:a4:72:a3:36:46:09:0f:43:
b9:1b:89:40:13:67:48:e1:cd:a5:71:06:5d:c4:a9:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6F:13:2C:F8:6B:E5:D6:E9:50:4C:46:DF:0C:C7:47:7B:E5:53:E8
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3d:48:33:bb:cb:82:e7:07:cf:0f:a5:32:48:a7:aa:f9:73:
18:b0:e8:69:ca:7c:37:b5:96:56:0d:08:29:0a:51:60:4a:d4:
27:9a:28:2a:5c:1a:f0:d7:44:06:6c:45:3d:74:db:f9:5b:9f:
70:81:6e:63:50:08:01:f5:49:e6:2b:9a:7d:e6:ea:a2:a8:57:
2d:0d:17:f4:c7:d9:c6:3f:28:07:f8:8f:b8:91:ba:21:63:66:
49:e9:90:06:5f:2f:78:b0:85:a7:e6:fd:f9:24:3d:30:02:cc:
3c:2f:59:3d:ea:c4:8e:26:16:18:65:6e:cd:8b:2a:45:4c:8c:
67:86:9b:1b:13:6e:a5:02:40:7e:d2:7d:63:69:22:d5:f6:7e:
45:b2:fb:32:08:da:d3:2c:bc:ee:83:ab:73:c9:79:65:98:5c:
4a:20:41:32:b0:7e:d6:d1:a1:82:fe:a7:ad:a6:69:6f:16:3c:
f6:12:5b:5a:ef:cc:dc:24:55:b2:d0:52:b9:87:33:18:67:e4:
f5:9b:cf:71:78:a9:80:e5:9f:c4:be:65:6d:b8:b3:3b:e1:1c:
de:ab:5b:e9:7f:88:ce:f0:74:8f:4f:96:a9:e8:93:3a:eb:cd:
c0:67:5f:12:b1:04:a1:d9:17:4c:86:67:24:e5:9c:9b:bf:ea:
49:b8:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:03 2025 by rpki-client