Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: NC21kAiShTaBTzza+f+jnLRRGu3sszt/sNCxeWM/qfE=
Subject key identifier: E9:5A:CC:3E:B2:09:09:97:21:70:53:F0:2E:03:34:8E:09:49:6F:A0
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 0196D107A772CCD990B765465236ABC99399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 02E4
Signing time: Wed 14 May 2025 23:01:01 +0000
Manifest this update: Wed 14 May 2025 23:01:01 +0000
Manifest next update: Thu 15 May 2025 23:01:01 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: zLPIDpuW0MlIsJ1RfTgO4wTwPYuYsX+wpgDnhRdTtRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:a7:72:cc:d9:90:b7:65:46:52:36:ab:c9:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: May 14 23:01:01 2025 GMT
Not After : May 15 23:01:01 2025 GMT
Subject: CN=e95acc3eb2090997217053f02e03348e09496fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:f1:c8:7b:6f:d3:e9:cf:43:00:cd:93:3f:
2d:c9:a5:e3:74:2e:ca:5f:bf:03:e9:f1:07:9b:3e:
f2:b7:d3:b9:26:c3:7d:82:f1:88:d7:b2:62:ae:fd:
24:17:3e:b5:f3:34:43:0f:88:fd:95:c8:b1:27:bd:
f6:c3:8a:11:07:9c:d4:85:f3:7f:96:6a:21:51:29:
de:07:4b:98:cb:bf:d6:3e:78:8d:fd:10:ca:22:58:
15:3d:62:94:a9:2c:ce:24:65:e6:35:28:c5:f8:ee:
ad:18:db:68:58:4c:96:8a:8a:96:94:6b:ed:0d:eb:
66:45:30:e8:78:27:84:f9:3f:60:85:93:3d:e5:a9:
7f:84:7b:f9:a8:92:79:ff:d4:56:2a:1b:4d:f1:12:
4e:4c:70:da:2f:af:c7:ca:07:e8:40:8d:70:ce:43:
05:04:b6:85:69:b5:83:9a:55:3e:2b:3c:12:ce:7e:
30:03:38:22:f9:eb:37:05:90:07:09:dc:64:36:c9:
74:dc:d6:1e:65:0c:cd:c5:5e:d0:d7:c3:8b:da:32:
47:c4:33:a9:42:61:53:0f:20:db:16:e9:12:d0:ec:
7b:b4:03:27:8e:96:d4:3e:75:a3:0b:6d:3a:33:78:
9a:64:bb:c5:2a:5c:2a:b1:81:c9:da:2c:6e:88:95:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5A:CC:3E:B2:09:09:97:21:70:53:F0:2E:03:34:8E:09:49:6F:A0
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:9b:21:69:ac:d2:00:89:f5:f1:48:8f:e5:17:32:e7:9b:
78:88:d7:ed:30:fa:b4:62:52:60:8d:5b:00:4e:23:14:b7:e2:
1f:24:cf:dc:08:8c:f0:fd:db:b7:84:ce:13:28:89:cb:44:7b:
7b:81:e8:07:88:b8:59:8c:a9:c1:65:a5:15:69:3d:4c:e5:fe:
2a:f2:e0:d9:fb:a4:69:69:4c:c9:ad:51:bb:46:34:d8:df:08:
1d:75:d2:f4:41:26:c2:74:ec:9c:22:15:22:98:b9:7d:61:59:
40:6c:c0:19:13:28:6e:9a:68:d1:33:db:97:29:89:22:a7:57:
9f:5d:e0:0d:6d:19:89:d6:b7:7f:5b:4c:2d:77:32:a1:5c:fc:
d6:d7:69:82:64:88:7d:b6:09:f6:7e:1a:31:74:05:75:d1:2e:
38:8a:b8:15:ee:cf:43:cf:59:c8:b3:df:dd:04:11:8c:51:5d:
6b:a6:8c:f5:b8:e7:c0:d4:7c:1a:a2:ad:09:23:c8:12:49:53:
8d:69:35:d2:f7:49:bc:46:1d:05:ab:e8:dd:d9:e9:ce:95:ed:
8d:54:b1:38:8a:85:ed:50:6d:9d:29:63:a7:01:67:24:87:2a:
c1:b1:c3:37:95:1a:f7:65:0e:da:70:3b:3f:73:ac:07:b2:1d:
fa:cf:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:40:11 2025 by rpki-client