Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: bRdQyGOXpj+HI9p0qApMBPWeBH4XfhfTqC9eiGqp8V4=
Subject key identifier: 0D:AD:D4:9E:54:34:53:03:73:00:D8:08:DE:A8:54:AC:FF:27:DC:4C
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0196B47DB264189C082829CE822413600AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 10:00:58 +0000
Manifest this update: Fri 09 May 2025 10:00:58 +0000
Manifest next update: Sat 10 May 2025 10:00:58 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: 6JG7xIZgkmx4mMJ/VtiJJwCAd05o8NJr0HpzDq9RBG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:b2:64:18:9c:08:28:29:ce:82:24:13:60:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: May 9 10:00:58 2025 GMT
Not After : May 10 10:00:58 2025 GMT
Subject: CN=0dadd49e543453037300d808dea854acff27dc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:e5:c4:38:c7:fc:9f:ad:2c:da:fa:8b:41:
9b:cf:60:c0:4d:82:10:f4:32:2d:73:7e:be:ae:87:
c8:16:8c:3b:6e:46:5a:86:74:20:4c:9e:b5:6e:9f:
c7:9a:2b:11:18:d3:4d:b2:fc:7f:e0:6e:0b:52:c7:
e8:45:b2:c4:ef:c5:b0:8a:36:6f:de:4e:8d:5d:a7:
9d:b4:17:ea:fc:f9:04:d8:13:56:a1:86:14:32:20:
87:3d:bf:8b:c0:12:d9:a1:14:18:cb:54:9d:8c:9d:
57:29:f8:0f:d7:31:48:ee:c2:2c:17:b9:14:cc:4c:
4e:14:79:e1:cb:e5:a3:f0:72:e1:61:bb:4f:06:28:
c3:79:ca:05:7c:cd:57:51:34:01:88:a8:3d:9c:f3:
2e:67:4b:75:90:80:87:8c:4f:17:f8:bd:85:0b:c1:
41:fd:41:f3:fd:3e:ec:a6:d6:fd:cf:57:88:99:28:
9a:b5:03:58:5b:56:80:2c:3c:db:46:bd:ca:1b:1b:
e9:d4:a5:34:35:10:89:16:1f:95:a3:e0:4e:5f:dc:
a2:1f:c6:3d:e8:55:c1:4d:56:48:82:aa:69:14:b0:
ba:c1:04:65:a7:e9:64:4d:c8:52:2b:cd:96:b1:57:
84:a0:83:d0:8d:f4:0f:c6:17:18:ad:75:11:d7:74:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:D4:9E:54:34:53:03:73:00:D8:08:DE:A8:54:AC:FF:27:DC:4C
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3d:d6:48:f8:4b:e1:6b:d4:b4:f7:34:1d:11:e3:25:3e:78:
d7:e9:f7:10:1e:80:1c:76:bb:ee:e4:49:f8:83:a0:ca:df:ac:
7e:a2:03:c9:77:1f:96:d4:bf:78:ec:74:69:2f:99:a1:ab:f6:
b6:50:4d:b1:35:ef:b4:d8:46:ee:bb:8f:da:48:3a:05:cd:99:
bc:69:92:f6:3c:df:c5:6a:3b:41:3c:b1:e7:c0:eb:14:6e:9e:
bf:42:41:ea:23:9c:10:89:fa:6c:18:76:52:41:84:ed:30:46:
63:8a:25:f0:3f:6c:54:23:b1:c5:ba:ae:e8:f1:4b:34:54:3a:
cc:99:f3:21:fd:36:67:d4:62:77:96:4a:9c:af:1b:a5:db:bb:
6e:0e:22:a4:73:56:c8:10:60:62:7c:b1:c3:96:2a:2b:3c:d8:
a5:4c:97:e6:52:00:8d:02:f2:ec:c8:9a:d3:ca:d8:4e:50:ef:
06:f8:ab:99:96:c0:6f:df:e5:f6:b2:58:e3:c8:a5:61:f4:e7:
dd:ea:b5:5d:09:e1:f9:5c:8b:9e:96:52:ff:92:50:bb:c7:c1:
00:20:0a:a9:84:de:fd:a0:03:36:8c:4d:de:57:84:b2:2f:f1:
25:de:e5:8e:6d:50:47:17:87:aa:39:25:46:0a:52:06:57:f5:
7a:80:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:26:59 2025 by rpki-client