Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: xgGuRFf/5HYGv7j0fjnsxt/njJ22NUoiUje232UiOYA=
Subject key identifier: F4:2E:42:4B:A1:79:60:FF:27:D1:B1:D7:29:56:F0:E6:79:D1:F6:F1
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0196BAED0A335F275F9152DB5775CF90DCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0945
Signing time: Sat 10 May 2025 16:00:18 +0000
Manifest this update: Sat 10 May 2025 16:00:18 +0000
Manifest next update: Sun 11 May 2025 16:00:18 +0000
Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: Wbt7aT+VcmtmeTZG8PqhoS5Y2IW4HHI8ZETAUtVKyZs=)
3: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=)
4: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=)
5: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=)
6: _8-3Qs_qZ1htreiN1JNh0Xfjgzw.roa (hash: vjBjNUyiud1IqRH6IpSBed0Ql8B7vtUZBKWlZlCokKM=)
7: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=)
8: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=)
9: pEFxP8vI0PKe_stqXUAdFiorUXQ.roa (hash: XJ7DBwkkSSwgly2JK+83gWkWa+T8sNrECn3yoE80Gos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:0a:33:5f:27:5f:91:52:db:57:75:cf:90:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 10 16:00:18 2025 GMT
Not After : May 11 16:00:18 2025 GMT
Subject: CN=f42e424ba17960ff27d1b1d72956f0e679d1f6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:56:32:bd:c9:98:5c:ec:6d:4e:41:7b:fb:
a6:6a:b4:82:2a:eb:55:e2:17:f5:da:77:46:1b:d1:
f6:5f:38:1b:a8:41:3b:4d:ed:db:af:bd:ed:ea:42:
f4:5b:c7:91:0a:15:57:64:8e:ab:50:79:d6:82:56:
97:32:fb:18:07:db:5e:03:56:b7:2a:4a:dc:5d:26:
3a:50:90:07:0e:09:1c:c9:40:8e:03:7b:c5:79:d3:
b7:ec:f1:5e:3b:45:75:9a:42:bc:cf:5c:76:1b:99:
b6:0a:2d:35:ca:f1:8a:a8:5a:05:93:a4:9e:c3:01:
62:4d:f0:f8:d8:0d:e8:33:af:7d:b7:94:24:68:85:
f7:c9:09:2e:cc:19:b8:ad:0e:55:84:ab:22:67:47:
57:9b:7c:1e:0d:be:75:68:bb:0a:ae:92:01:d0:e7:
dd:e0:f4:64:91:e9:93:d4:42:d0:d7:99:29:54:c4:
f1:e0:80:fc:c0:c5:09:78:66:ea:0c:fe:ce:f6:0e:
a7:cc:00:df:8c:53:7e:48:9c:57:96:7c:10:5e:55:
4f:cb:35:8d:c4:93:de:6e:7b:f7:c1:cd:a9:1b:68:
6c:2a:f6:9d:a5:63:5c:de:96:ca:20:c4:b7:e9:cb:
d8:70:f8:ce:27:b7:a4:ed:17:c5:c2:97:b9:86:60:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:42:4B:A1:79:60:FF:27:D1:B1:D7:29:56:F0:E6:79:D1:F6:F1
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:30:13:10:8e:b8:23:05:9b:fd:2b:3b:d0:92:9f:cb:c1:
94:9e:95:9e:52:99:21:37:90:b4:38:89:f3:14:35:26:ff:92:
cf:93:4f:81:88:4c:60:c9:8c:d8:48:22:14:6e:6d:e7:51:ec:
a9:2d:06:2f:09:ab:a7:c3:1c:bd:d3:81:2a:d0:56:fb:61:66:
3f:62:eb:4c:09:76:b2:96:08:f5:09:6c:e6:b5:15:4b:ea:96:
56:1d:0a:ea:56:47:31:eb:1f:ae:00:ca:cb:c5:b3:f1:00:8f:
d6:e2:f9:d1:aa:17:05:83:5c:67:26:77:ae:8a:df:3b:4a:ac:
32:37:ff:67:c0:eb:35:41:bd:dd:34:06:e8:38:d9:5a:39:33:
4f:e4:86:9b:89:0c:cd:64:79:2a:4b:36:4a:dc:f4:d7:f8:c1:
76:4a:ff:e9:54:af:df:a7:bd:26:25:91:3f:5f:00:60:f4:aa:
0e:74:6c:cd:9a:69:03:2e:74:25:22:da:93:22:f6:56:e9:b9:
10:41:23:8f:04:fd:d0:1f:da:1a:2a:10:e7:87:c4:5d:76:05:
ca:b3:92:42:2a:c4:1b:b9:67:76:0e:1e:e6:89:3b:46:02:27:
09:de:5c:69:96:ae:cf:4a:3f:5a:86:31:86:d0:c5:c2:7f:bb:
1b:55:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:54:23 2025 by rpki-client