Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: /mEGSiYkO8dyzNzEkEcXG+zfPqepO/VW9qAWc9iuktA=
Subject key identifier: D1:60:ED:53:DB:58:DF:86:73:B8:26:9B:00:0E:88:C3:C5:3D:7E:E9
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0196C081A7460D5C3AC7F45EE43C8F3C2EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0D69
Signing time: Sun 11 May 2025 18:00:44 +0000
Manifest this update: Sun 11 May 2025 18:00:44 +0000
Manifest next update: Mon 12 May 2025 18:00:44 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: JBcC6do+evCNghO/UzEuLCQzUfj6jSRnaHoC/TG+r2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:a7:46:0d:5c:3a:c7:f4:5e:e4:3c:8f:3c:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: May 11 18:00:44 2025 GMT
Not After : May 12 18:00:44 2025 GMT
Subject: CN=d160ed53db58df8673b8269b000e88c3c53d7ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:56:6f:d8:fe:e1:20:ab:8a:ce:a0:ac:49:
23:73:05:48:23:b2:60:0b:03:d7:f9:8b:06:70:24:
9a:e1:86:ce:1c:9c:e7:05:99:54:bf:27:8f:9c:e5:
06:7e:bf:61:7e:6b:a5:aa:42:0e:56:d4:45:c3:e4:
33:9f:93:e5:9b:3e:f7:51:11:30:11:bd:18:b0:6b:
f3:5d:55:20:ea:3c:41:f3:44:c6:12:39:62:c9:22:
e0:0f:74:ff:c3:af:0a:4b:a1:fb:9b:a5:63:16:02:
5f:fd:c2:a6:cc:b1:b9:4b:85:f1:b9:aa:30:2a:ae:
f8:c8:ab:19:3a:86:5c:34:cc:90:7b:94:aa:d8:41:
60:b7:c0:d0:d7:39:fa:b8:88:2b:f1:f9:15:d1:18:
37:1b:0d:c9:3c:17:de:88:8e:8a:a1:94:31:73:f1:
d1:2c:2f:48:d7:35:34:23:84:b5:35:e8:09:db:a3:
73:4b:49:6b:42:9c:e6:b1:7b:9e:43:55:f3:c2:47:
70:a7:ef:b2:54:e7:60:cf:17:87:9a:2d:99:a5:0d:
62:d0:30:b3:81:05:51:50:a3:53:2b:8c:fc:b6:20:
be:7f:9e:7c:44:4d:c5:54:42:2c:66:d5:e9:e7:ff:
6a:64:a9:f8:c2:c0:58:30:f1:db:ba:ef:b2:71:14:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:ED:53:DB:58:DF:86:73:B8:26:9B:00:0E:88:C3:C5:3D:7E:E9
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:e5:f4:79:22:1b:69:8e:88:b4:7e:18:c5:79:76:3d:40:
3d:00:31:1f:10:79:8e:62:99:b2:b2:29:12:1e:22:a3:12:b6:
ac:22:f0:62:c6:30:41:f6:24:34:0e:b1:95:39:f0:aa:47:4b:
96:68:84:d2:82:47:f6:0e:85:86:25:59:db:f4:29:4b:b3:03:
ca:ee:e9:d0:ad:18:6f:3d:1b:30:f8:a2:ee:45:9b:0a:fa:37:
99:58:27:d6:8d:4c:a3:2f:a4:2b:92:df:1b:e0:bd:6c:ae:07:
6f:02:49:29:a0:12:c7:92:d2:5c:7b:c6:b8:c3:2a:33:3f:79:
bc:54:d0:37:31:57:cd:ee:18:ff:ef:c7:e6:87:8c:b9:7f:85:
8c:64:8a:8c:5e:1a:7f:05:30:19:d2:4f:15:73:7b:c9:d8:37:
a4:ed:7e:80:f8:c5:c9:28:ac:30:77:04:a7:71:52:35:15:eb:
cd:79:d6:c3:cc:8a:39:00:a0:28:7d:79:af:8c:ec:01:dc:b8:
af:d4:22:46:ef:2a:b6:db:74:e4:33:3a:80:45:49:c3:74:c2:
0f:44:f9:89:f0:70:fc:46:36:dc:2c:f7:53:f5:b0:01:69:5a:
3c:72:46:05:9d:98:7f:b2:26:60:91:e0:74:cb:8e:7d:d9:fc:
3b:93:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:13:43 2025 by rpki-client