Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: B/1a5COWR0gM5wvq1X/rGisx9TsHhY3jEiDyPtk0BhU=
Subject key identifier: 72:E2:8F:35:1E:F8:F1:74:28:20:54:D4:31:67:BF:D9:69:9F:95:D0
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 0196C5A838B1DD7EA6A69858ED0EDB870D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 04CE
Signing time: Mon 12 May 2025 18:00:58 +0000
Manifest this update: Mon 12 May 2025 18:00:58 +0000
Manifest next update: Tue 13 May 2025 18:00:58 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: 8a3HLWj5kzzU08TtHRlxpOu5D4HUe1Ols20uU1zh8Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:38:b1:dd:7e:a6:a6:98:58:ed:0e:db:87:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: May 12 18:00:58 2025 GMT
Not After : May 13 18:00:58 2025 GMT
Subject: CN=72e28f351ef8f174282054d43167bfd9699f95d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:f6:89:36:7b:a4:d1:b1:92:3f:93:ef:5e:
4d:03:ec:32:ac:79:c2:7c:dc:9f:78:6f:93:7b:ad:
f4:31:6e:18:fa:3f:e2:22:b4:18:f1:a9:1a:b7:f7:
e4:08:2f:63:2e:4f:de:5e:84:03:10:64:5e:51:d1:
57:85:81:a8:bf:d0:cb:fa:f7:c4:a7:0a:76:4a:e8:
3f:7d:9b:c4:8f:0e:f6:d5:1d:8c:83:8a:2c:28:8d:
ba:d7:09:0e:25:f4:b7:b4:5c:ac:e2:f3:2f:3b:f4:
d2:c7:8f:ac:69:52:56:e4:98:31:69:d3:83:e4:85:
f5:b8:b3:e5:74:4f:07:9a:bb:88:45:33:69:42:16:
9c:55:1f:d4:27:f2:0e:5c:29:61:2e:24:51:55:db:
ee:c2:54:9a:33:57:34:a7:b6:4a:11:aa:df:df:7c:
38:16:ee:7b:c3:ae:1e:d8:0c:a1:03:84:3d:76:bc:
45:ba:c2:d4:67:7e:fa:65:de:31:e8:06:3d:3d:56:
2d:a6:8c:07:53:21:d2:a2:ff:b2:88:6a:30:ba:d7:
7c:18:99:50:d0:11:c3:46:24:af:9b:26:6f:94:c2:
98:a9:7c:c9:f0:56:29:fe:14:93:f1:a5:28:0d:87:
ac:7f:cb:40:61:74:7f:3d:24:ee:c5:2d:a0:85:b6:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E2:8F:35:1E:F8:F1:74:28:20:54:D4:31:67:BF:D9:69:9F:95:D0
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:d5:3b:49:10:08:80:b1:3f:66:48:5a:89:8d:a4:0b:bd:
c8:aa:7c:d0:79:60:c6:c1:c5:ee:a7:0b:0b:df:02:29:03:6e:
b6:59:c3:84:93:c4:c5:ec:15:03:10:47:41:cb:51:62:91:a7:
66:8a:10:e0:2d:e3:8d:6d:cf:e2:ba:cf:1a:73:92:94:7b:2c:
fe:43:d3:18:a6:0c:61:b9:d2:aa:25:fd:5b:78:a4:96:cc:7b:
6e:a8:55:96:92:fe:80:cb:0e:f2:6a:31:be:3f:04:8e:8c:ad:
74:c1:cd:f9:26:32:79:1d:df:13:3d:12:fe:4f:15:cb:f8:6b:
22:e8:c8:bd:0c:fb:30:50:45:d1:60:25:65:96:1d:a3:89:fc:
43:6f:b2:ee:41:3f:5c:0c:78:44:87:c2:6d:19:69:9b:cb:c6:
22:cd:77:4b:22:ac:0e:55:90:7f:ce:72:ef:3e:5b:92:39:48:
bb:ab:bf:fd:96:5c:3d:09:f8:e0:f6:3e:d5:39:84:6c:fe:c6:
90:aa:fa:59:31:5d:cc:74:28:3c:77:bc:24:55:9f:bc:4c:c3:
b9:49:48:e6:7e:3d:f9:c0:58:ae:82:6f:7a:be:12:92:12:41:
ce:e0:07:ae:fa:41:72:09:2f:4c:d7:e7:92:65:d3:89:b3:f4:
c5:32:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:11:25 2025 by rpki-client