Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: c0btmqXsx9Ja73BCY/qpzPO50V2O8yIQ5rCAlmUyVkQ=
Subject key identifier: F5:43:AE:4C:9F:2F:2F:BC:F9:89:70:13:CF:26:8F:A4:C5:6E:D5:4D
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 01969FAD0D3DD0BD386ACF4AD424A584B55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 0378
Signing time: Mon 05 May 2025 09:00:40 +0000
Manifest this update: Mon 05 May 2025 09:00:40 +0000
Manifest next update: Tue 06 May 2025 09:00:40 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: wQLUGxdgchRhrhJsC0s8QbBqPTuZ5l+S+q73BWH4HdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:0d:3d:d0:bd:38:6a:cf:4a:d4:24:a5:84:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: May 5 09:00:40 2025 GMT
Not After : May 6 09:00:40 2025 GMT
Subject: CN=f543ae4c9f2f2fbcf9897013cf268fa4c56ed54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:59:29:cc:94:ae:1e:95:cf:38:27:b3:70:
7c:58:cb:6d:24:86:f8:f4:bb:cf:4c:ee:5c:1a:1b:
1e:18:ca:41:6b:6f:ef:a3:f5:93:82:5a:b4:fc:df:
36:c4:41:ec:5b:f1:20:aa:3c:93:a9:87:a8:41:00:
dc:55:49:db:45:ec:c0:ef:19:2e:7a:84:d6:ef:54:
fc:61:84:b7:ba:8a:09:a8:cd:b1:c0:f3:03:ed:73:
0e:4f:54:05:01:80:09:e0:60:14:28:c3:c6:0d:d9:
f0:82:b8:75:85:2f:eb:29:55:7b:82:f2:e8:c1:d4:
98:af:df:9c:35:13:05:2d:af:2c:d4:4c:ff:3f:93:
7e:29:69:a6:4b:7c:38:65:40:ce:83:f8:57:dd:2f:
23:fd:09:fd:92:a5:9c:9e:b0:be:b7:cb:87:9a:18:
a7:22:fe:2b:21:74:8a:81:7f:a4:0e:c7:e7:63:4d:
c2:cc:50:47:d0:f7:d0:9f:14:7d:0a:46:de:81:e5:
44:75:1f:6e:a7:d8:c3:8d:bf:11:04:1a:60:a9:00:
9e:ed:9c:8e:1e:90:bd:98:01:1a:4d:e5:b6:7c:11:
de:bb:71:d1:ef:ae:dc:7f:33:66:27:f3:25:0f:66:
93:06:b0:fa:89:89:63:b5:d0:38:60:06:3f:71:10:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:AE:4C:9F:2F:2F:BC:F9:89:70:13:CF:26:8F:A4:C5:6E:D5:4D
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:28:a2:ef:2a:2b:31:01:6a:1b:ec:0b:98:72:e0:bc:31:0d:
72:1e:3f:78:d7:ff:a1:32:f7:b7:36:9d:1b:12:b1:64:e3:ed:
4e:ab:e3:0b:3e:e9:73:d1:d7:55:d8:4a:dd:27:6b:c6:04:ba:
21:55:df:d2:ef:45:37:58:d8:34:a5:39:da:7f:fd:f9:ee:65:
e5:dc:bf:40:e8:bd:a2:7d:79:73:02:68:71:99:1e:92:38:5e:
87:b5:60:be:5c:8a:6d:34:84:cd:e0:c8:85:06:77:78:46:0a:
30:2a:fa:cc:a0:6d:48:c5:3d:c3:18:5c:62:b0:dc:58:2b:d1:
ae:9d:df:82:08:a6:69:33:0c:05:7e:6d:19:35:f9:3d:ed:65:
c0:b8:a6:c6:38:c5:1e:a3:b0:ff:32:46:4f:fd:2b:41:9e:d5:
af:14:2e:4a:b5:d3:ee:c7:ac:cc:77:50:91:2c:4b:88:66:b0:
ff:7b:c3:e2:2a:3b:70:d1:da:97:08:6a:ce:e5:08:3c:49:6c:
72:cc:15:7d:eb:b8:d0:8c:c3:62:35:d1:5f:bb:9d:6b:e2:08:
11:69:16:94:c8:d8:8a:84:1e:7c:a7:d6:ab:46:57:f9:e7:5e:
c9:09:ee:62:e5:af:b6:51:24:0e:b1:ae:e0:4c:cc:35:32:2a:
61:8c:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:36:27 2025 by rpki-client