Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: aN8+eVu1DPDmjNdl1cWhVjZiuvdAtH03Wm1j6kDXEDM=
Subject key identifier: FF:9F:AD:A3:7A:85:BE:58:46:53:E6:F9:39:E1:F9:41:7A:C9:BE:9B
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 0196C917366D78C45B6BE0ECDA538E0C354B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 09C5
Signing time: Tue 13 May 2025 10:01:03 +0000
Manifest this update: Tue 13 May 2025 10:01:03 +0000
Manifest next update: Wed 14 May 2025 10:01:03 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: O3FxGD/SJ8AAfRgRWCA62A3OZIZkAM5zEyvyEwzMuMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:36:6d:78:c4:5b:6b:e0:ec:da:53:8e:0c:35:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: May 13 10:01:03 2025 GMT
Not After : May 14 10:01:03 2025 GMT
Subject: CN=ff9fada37a85be584653e6f939e1f9417ac9be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:e7:fe:9e:7f:2b:2d:38:1f:46:d4:b0:5a:
10:1c:3f:92:82:f5:d0:34:e7:63:01:b6:12:2f:86:
f6:36:d5:22:7d:be:2b:fe:f3:30:73:5d:e4:7f:ca:
23:df:00:81:b3:f1:27:9f:6e:c9:24:22:8a:b1:d8:
59:d4:0c:07:61:dc:36:72:d3:d4:4f:18:35:da:b8:
f9:35:a4:01:bb:b5:47:00:f7:1d:4c:78:69:e5:60:
9b:52:f0:9f:23:13:7a:0f:39:5a:13:85:5c:5f:bb:
3b:3c:21:42:e9:c2:c8:99:89:d2:51:09:76:52:63:
fa:e4:3e:8f:0c:12:54:78:d1:eb:6d:21:f7:2f:c4:
54:52:ca:40:b4:bf:34:1e:a5:cd:f3:97:dd:59:1d:
42:b3:3d:42:17:d9:05:4e:d5:97:3a:d5:37:c8:6a:
57:a3:fd:2b:6c:33:88:c4:a9:9d:d3:3b:4f:71:0b:
e1:78:2e:cc:4b:95:29:ad:46:b1:d5:c9:00:80:eb:
aa:1e:b2:ee:85:e2:63:30:c6:d3:53:b4:c8:1c:8a:
74:e8:2b:42:f7:e5:67:a4:15:1f:9e:70:7a:34:d5:
cf:5d:6d:59:28:ab:3a:0f:76:fa:40:d1:37:fa:8b:
83:e3:65:f8:fc:c3:61:28:6c:66:4d:bd:f4:82:c1:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:AD:A3:7A:85:BE:58:46:53:E6:F9:39:E1:F9:41:7A:C9:BE:9B
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:76:53:28:db:bb:b5:ee:98:0f:d0:7c:ba:f1:84:bd:66:
18:a4:e2:31:9e:a7:3d:1a:16:82:3e:0e:6a:26:46:4c:b1:78:
a5:c6:78:48:6d:e7:99:51:df:58:1d:43:3e:84:58:ce:7a:62:
45:59:a3:b7:49:ef:b7:8f:d6:d5:af:d7:e4:b1:d8:a9:54:62:
36:0b:ac:1f:8c:13:fe:c8:09:12:42:ae:49:6a:2c:aa:df:da:
f3:48:45:74:e8:e9:10:3e:fc:35:53:0a:10:b3:be:99:fd:2e:
88:cd:77:4c:69:c8:19:83:6f:1d:b3:f3:48:bc:0f:10:78:5f:
3c:46:02:42:4f:25:46:d9:7b:b6:cf:7b:06:12:03:2e:a9:49:
50:35:75:c9:e4:0f:fc:be:f9:d3:66:72:62:1b:77:f7:07:5f:
01:b0:81:ee:8b:75:13:fa:ff:03:9c:08:04:16:31:ac:a1:a0:
45:80:cf:d8:d6:5d:f2:cf:cb:5f:b5:ec:58:94:af:aa:6d:ad:
2e:d7:ec:ec:7c:11:2d:bd:7e:c3:de:ad:09:a7:68:ed:33:15:
9a:60:d7:fa:b9:de:bf:ab:d5:86:ae:c4:22:4d:02:f4:77:35:
aa:e6:c2:8b:6c:78:01:2e:e9:61:56:6d:b3:6f:32:e0:40:1c:
eb:97:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:40:38 2025 by rpki-client