Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: wcQoahF4jsOs8SDB0pjEVVZpuHo0zolvBLAgABc3C2I=
Subject key identifier: D0:D2:56:BF:C4:43:72:EA:3D:FF:19:DB:0B:48:C3:8F:86:72:F5:34
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 0196B4B481EE8ECD7B9F770EF5321FD4A91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0958
Signing time: Fri 09 May 2025 11:00:50 +0000
Manifest this update: Fri 09 May 2025 11:00:50 +0000
Manifest next update: Sat 10 May 2025 11:00:50 +0000
Files and hashes: 1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: gs7lpQjPSb3qGGMFA22Ng7pTCXqLOU+eoW+fxp5v0kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:81:ee:8e:cd:7b:9f:77:0e:f5:32:1f:d4:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: May 9 11:00:50 2025 GMT
Not After : May 10 11:00:50 2025 GMT
Subject: CN=d0d256bfc44372ea3dff19db0b48c38f8672f534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:4e:94:38:68:59:a8:bd:18:ed:7e:a9:ce:
2b:a1:01:00:a7:57:c2:23:65:9e:ff:a9:42:2a:cd:
c0:48:e4:f8:59:d1:de:df:96:47:a9:63:1a:a1:2f:
dd:47:e5:f1:42:9e:23:1d:18:46:f0:fe:5d:16:6c:
36:3e:23:5c:0f:52:0d:c8:6c:b0:5e:c1:71:d8:1b:
09:61:7a:9b:fb:be:a3:9e:ec:92:c4:02:16:23:aa:
89:64:a4:92:2a:f5:ed:ad:c1:cb:0d:70:c6:94:3a:
77:24:62:fe:f1:37:98:7a:ec:2d:5e:c4:cc:05:c6:
e5:ec:be:e9:93:8e:7c:39:05:17:1e:ac:0c:2f:de:
81:4a:e5:14:36:64:62:49:dd:61:a4:a0:1a:84:6d:
0f:7d:b8:5e:4f:11:25:92:fb:53:b1:dd:22:fe:fd:
c8:69:36:f1:bc:55:58:1e:84:74:1c:da:33:1b:1e:
46:3d:a3:bf:db:23:2e:a4:2b:35:7e:32:65:76:c8:
6c:c4:a6:76:26:50:d2:b6:b2:ce:e2:69:da:7f:25:
a1:dd:c1:8e:87:9e:55:e8:34:c7:57:d5:9a:b5:66:
8f:d9:e2:8d:19:4e:32:69:23:c2:5c:b7:8e:dd:94:
d2:b7:0b:e7:fb:a8:d6:72:96:84:f2:b1:cc:f4:60:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:56:BF:C4:43:72:EA:3D:FF:19:DB:0B:48:C3:8F:86:72:F5:34
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:62:3b:27:de:dd:76:16:39:0b:34:cb:f9:96:d5:10:f7:8a:
b0:3e:6c:7c:8d:38:a0:58:b8:03:4f:be:3f:58:e8:44:c4:2d:
74:6e:bc:25:22:ef:65:79:78:d7:e0:62:70:3f:de:6a:b5:87:
bf:9c:b4:30:f1:d7:0a:16:f5:db:c3:61:72:e4:cf:bd:7c:c9:
45:31:10:6d:54:60:50:50:e9:98:f1:bc:03:4e:24:1d:86:c1:
0b:48:0b:e8:7b:5d:99:61:7d:29:6a:f6:98:ed:0d:aa:ff:1c:
15:53:0f:e5:fb:a4:7c:33:f1:fb:5d:18:17:f2:cd:d9:0e:17:
76:a2:80:ef:ed:2b:14:ac:9b:03:85:42:5d:00:0b:9f:45:4d:
6f:d7:72:53:01:49:a5:66:f2:39:ed:ab:ab:d8:6c:4d:76:3a:
b9:9e:ab:11:bc:81:ca:71:a0:10:16:de:0c:47:f7:f4:88:43:
40:88:2a:8f:a4:4e:0f:c0:4b:d3:c4:a3:7e:22:b9:08:b3:0f:
e7:51:b1:a0:1a:e5:ad:7d:20:95:d8:b5:52:89:08:73:a7:f7:
fa:a7:7f:e6:31:61:8e:c1:2f:e1:76:1f:da:e3:eb:47:96:10:
b0:26:45:c9:45:10:08:24:fa:0e:00:84:a6:ce:30:01:fe:03:
31:19:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:34:29 2025 by rpki-client