
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: UkGO3kN6xn8VDg2KpBlqXY0hURiuDUxEaH+hEPzdtXU=
Subject key identifier: 4D:30:54:B3:25:CF:ED:38:94:CD:C2:1F:E1:F7:E7:44:36:35:E4:BF
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 0196C2A6FD38CC80038D75D38B95A7EAC215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0A12
Signing time: Mon 12 May 2025 04:00:45 +0000
Manifest this update: Mon 12 May 2025 04:00:45 +0000
Manifest next update: Tue 13 May 2025 04:00:45 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: Fc4lqnHqQo6KrNhTkS22uIGJgpYlLW0i2KkCaAxI9Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:fd:38:cc:80:03:8d:75:d3:8b:95:a7:ea:c2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: May 12 04:00:45 2025 GMT
Not After : May 13 04:00:45 2025 GMT
Subject: CN=4d3054b325cfed3894cdc21fe1f7e7443635e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:79:a2:5e:ae:48:e4:13:b2:b3:5c:8a:6a:
87:54:3f:57:d2:48:f1:38:3a:69:46:c9:a8:8c:b0:
54:7c:f8:0d:b1:b2:69:9a:6c:4c:4b:b7:82:8b:b8:
a6:ab:1e:90:db:01:4a:55:13:6f:8b:48:dd:ef:cc:
bc:fd:cc:b0:d2:38:b4:c5:43:b6:37:e3:57:27:5c:
d9:97:00:10:89:13:d9:8b:76:d5:3b:ea:70:1a:e3:
e8:61:29:5f:06:ab:6f:c3:5a:52:7c:c4:01:8c:85:
1f:c0:d4:bf:0f:d2:66:c5:39:5c:78:a6:f1:11:1d:
1b:e3:23:80:b6:99:9d:ae:07:79:cf:af:cf:7f:b7:
3a:a2:24:bb:96:a7:b4:6c:da:cf:1b:8a:93:51:c5:
c5:b6:ba:28:c4:80:76:05:41:fb:66:a8:de:59:18:
90:36:00:41:d6:52:1a:d3:fc:4a:db:ee:67:14:68:
51:76:8e:e2:76:56:4e:ae:57:57:a4:df:53:89:50:
54:1b:66:e3:f6:89:bf:66:06:e7:df:8d:41:dc:2d:
d6:f5:e2:c7:ec:4c:97:20:78:88:e7:8f:97:05:92:
8c:4f:2f:a7:9d:02:64:bb:38:fd:b8:35:2a:97:2e:
40:0c:90:35:db:72:d4:78:f7:2a:2d:4a:ba:2e:ae:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:54:B3:25:CF:ED:38:94:CD:C2:1F:E1:F7:E7:44:36:35:E4:BF
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:26:6a:c2:d5:d2:57:2f:6d:c0:46:ab:9c:12:2b:56:55:91:
81:ef:39:2b:5b:b3:e2:2c:f4:72:d3:95:e3:d4:df:80:af:a8:
49:3d:59:6e:4d:39:5a:b1:53:c1:58:7a:55:7c:2f:17:e6:98:
19:10:f0:22:42:51:26:5d:ae:76:ba:c7:95:e7:26:26:54:99:
53:bf:ee:49:f7:dc:d7:7b:c4:54:77:71:a4:0c:57:a3:5d:8c:
c2:40:b3:3a:dd:3b:ba:fb:a6:2f:38:74:34:ee:c8:9a:0f:93:
14:30:7d:e0:86:07:90:02:b8:5c:63:36:9e:92:51:30:bb:00:
71:76:d7:fd:4e:ba:08:97:e3:79:f3:8e:32:c4:7e:3f:0b:ca:
96:ae:57:88:ad:23:bd:25:5d:2d:cc:74:a4:70:b5:17:dd:11:
57:11:11:c5:21:e9:9f:a6:16:5e:9f:c3:a9:04:1b:32:cc:ff:
54:4a:bf:d5:57:df:c9:83:e0:72:1d:4c:cb:a3:6a:a9:da:59:
03:08:b2:b6:81:76:4d:b0:99:c4:3d:c5:17:64:8b:ab:1c:53:
86:3d:f8:b8:5a:46:60:8b:31:50:7d:6a:60:ea:92:f1:c5:73:
55:a9:dd:33:96:a4:00:da:00:02:fd:ac:dc:57:e6:d0:81:ce:
03:16:c8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:01:03 2025 by rpki-client