Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: M9S00cr75xhJ6KgISJ8rkLV9rt6tBovzkXfjRuQHIos=
Subject key identifier: 5D:B7:19:4D:C5:A5:4B:F6:4A:CC:69:14:FC:F9:C4:31:DD:FE:01:F1
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 0196B9A3C9F5EF7EB2C33CD13C227D1ECEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 1142
Signing time: Sat 10 May 2025 10:00:41 +0000
Manifest this update: Sat 10 May 2025 10:00:41 +0000
Manifest next update: Sun 11 May 2025 10:00:41 +0000
Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: Cg/0jNu3HxBaPUwIVkeTyCBRHSIaJTwyuRSTd2HIlHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:c9:f5:ef:7e:b2:c3:3c:d1:3c:22:7d:1e:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: May 10 10:00:41 2025 GMT
Not After : May 11 10:00:41 2025 GMT
Subject: CN=5db7194dc5a54bf64acc6914fcf9c431ddfe01f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:52:73:81:b3:5a:9c:9e:b0:15:64:25:1a:
1d:4c:3a:29:cb:6b:84:03:8a:db:08:c4:8e:c5:e1:
0c:9a:1d:17:a3:b4:a2:f0:b5:35:0d:30:9c:22:26:
e2:90:37:d3:00:57:42:8f:b9:96:1c:34:fd:31:08:
4d:fb:6d:85:a0:24:9a:cc:e7:36:fc:52:6e:ab:b7:
8d:e4:c8:c1:29:12:20:da:5b:e9:bf:ea:48:6d:fa:
02:8e:19:56:f2:34:d2:7a:e9:9f:97:0f:93:4b:c5:
e6:d3:09:fc:8d:b9:62:c6:d2:0a:99:e8:e9:ff:7f:
d7:87:0e:bc:e7:1e:03:bc:4f:32:97:d8:c4:d0:cb:
59:14:8b:72:9f:9f:a9:39:f5:44:14:c7:d3:22:d1:
dd:9c:4f:4b:5a:13:2d:63:63:59:76:c1:e5:d1:d5:
75:9a:18:3b:4b:60:b9:77:1e:ee:0c:27:75:fe:96:
fb:a4:22:7f:86:5c:a3:7d:94:22:47:d2:01:4f:d3:
09:3a:ae:3b:62:44:53:47:ab:59:88:34:19:b0:89:
e4:16:97:64:30:e8:8c:ff:70:5f:d6:dd:95:ec:69:
aa:3b:e7:af:17:e9:7e:d7:22:64:b5:cc:97:88:dc:
7e:2d:25:44:8d:44:87:7b:16:5f:c0:b3:a0:3c:24:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:19:4D:C5:A5:4B:F6:4A:CC:69:14:FC:F9:C4:31:DD:FE:01:F1
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:02:0a:90:58:fc:03:2a:9a:b8:21:89:5d:71:3c:55:86:
a9:a9:aa:0d:fa:91:88:7a:c0:bc:77:4d:30:d8:2d:5a:36:fc:
42:5d:bb:ab:c6:7c:ce:2b:e6:86:41:d0:86:ef:a6:78:eb:c6:
9d:45:57:83:eb:a7:34:2c:23:52:7a:41:96:9b:ec:ff:fa:1b:
f5:d6:db:17:4f:91:ca:2f:cc:67:0e:f5:90:85:77:ce:e9:24:
14:44:d3:81:2d:6a:4a:6a:5a:d8:19:2e:89:f5:b1:35:ae:54:
e0:bb:20:2f:e3:2e:e0:aa:40:27:86:75:5d:ae:9a:11:e1:fc:
ba:55:2a:a6:df:28:80:52:76:3a:b8:5d:ce:b6:4f:05:36:6f:
e2:88:8d:9c:ed:17:af:93:cd:6d:ac:2a:21:97:6c:79:6e:b7:
4c:37:60:e1:7f:88:6b:c8:66:52:d3:8d:38:a9:66:38:d6:e1:
9a:13:b4:84:6a:3e:96:79:15:25:f1:56:5b:d6:64:c1:92:e9:
d9:72:1c:ce:89:65:08:1e:0a:f4:5b:90:12:42:f4:08:40:8c:
48:98:50:39:a3:98:95:f2:f3:fa:b1:3a:63:62:dd:1c:f5:2b:
59:84:16:a7:94:ca:f4:3f:81:26:59:78:0a:f4:e9:b1:2d:27:
0b:01:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:33:42 2025 by rpki-client