Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
File: yWyebTIz4sJBILhdFxec-10zR4Q.mft (raw, json)
Hash identifier: 0yBp8JCZ630a9GWBU+GngpT/rnZjsL7Vmxumzc9moC0=
Subject key identifier: AE:3C:E7:A2:F6:E9:E4:6A:C1:16:7B:DA:D5:E0:47:D1:72:6E:2D:B6
Authority key identifier: C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
Certificate issuer: /CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Certificate serial: 0196C6835D8D74E39A7D754D1BEA15788E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
Manifest number: 0527
Signing time: Mon 12 May 2025 22:00:19 +0000
Manifest this update: Mon 12 May 2025 22:00:19 +0000
Manifest next update: Tue 13 May 2025 22:00:19 +0000
Files and hashes: 1: VZHF0nE3qVwIIpqdmF6QQh7nLs0.roa (hash: mQT6bJlTC89LqB3D9GVMba8EFmBGqFt+S6QYF8yZZKY=)
2: yWyebTIz4sJBILhdFxec-10zR4Q.crl (hash: zqSk7/bykOquhP2o3LojSAx9QQ/nYf9x8MjJT8tzdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:5d:8d:74:e3:9a:7d:75:4d:1b:ea:15:78:8e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Validity
Not Before: May 12 22:00:19 2025 GMT
Not After : May 13 22:00:19 2025 GMT
Subject: CN=ae3ce7a2f6e9e46ac1167bdad5e047d1726e2db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:a6:e4:e8:cc:3f:d9:82:d6:52:8c:b6:0e:
69:16:2c:40:ff:97:c5:97:20:25:ad:84:7f:00:63:
bd:ff:48:82:3f:9f:cd:d7:0f:3e:a6:ee:f6:de:6f:
0b:a0:68:dc:cb:0b:8b:1d:a1:03:9f:97:8c:a6:16:
5a:ed:49:d7:6e:c2:04:3e:9f:2b:aa:2d:b5:c5:61:
dd:3f:aa:d0:0b:f2:6d:83:df:ee:36:a0:11:5d:e3:
12:3b:00:50:16:73:a7:30:bb:21:7e:63:00:a3:5e:
ab:cb:3a:96:05:1f:a8:75:01:d4:ac:7f:a9:64:1d:
5c:91:02:11:fc:f9:b0:47:c4:bf:b9:d4:86:97:c0:
bf:3b:fe:6a:ec:4f:44:2d:11:a4:06:12:6e:8c:68:
6c:9a:6a:de:19:8b:76:c9:0a:50:42:ef:d2:45:ba:
79:2b:ff:82:a4:b3:7f:eb:00:1c:60:28:80:f3:39:
cd:66:dc:f5:8b:e4:84:a2:08:1c:8f:7a:48:60:17:
2a:f2:d8:93:10:1a:67:0c:eb:5f:bb:72:7d:3e:dd:
3f:cb:04:94:87:81:04:1c:ff:14:9e:01:1c:df:94:
8b:47:08:4c:41:d2:56:43:98:1d:e4:02:3a:24:1c:
64:04:0e:41:cb:83:21:30:b3:e9:2e:91:04:ba:1c:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:E7:A2:F6:E9:E4:6A:C1:16:7B:DA:D5:E0:47:D1:72:6E:2D:B6
X509v3 Authority Key Identifier:
keyid:C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:63:63:bd:7e:b8:1a:4b:f3:2d:70:69:a7:33:e3:8b:df:43:
b6:ba:d1:dc:38:da:d7:43:29:57:41:7d:ec:f9:14:7b:1b:2c:
b2:9e:e5:d3:72:65:3f:86:8d:d9:97:a6:02:64:57:73:9c:33:
ce:45:33:11:6e:66:a8:5d:1b:42:b7:85:ef:e9:ca:81:c3:c5:
f5:23:db:64:9d:76:17:0f:80:1d:b6:61:fa:78:61:58:36:af:
9d:79:33:56:a5:f4:ea:1a:6d:01:0a:36:3d:e4:3a:81:04:b6:
b9:21:e6:e7:55:0d:d2:94:93:dd:cd:9c:ab:f0:7d:c4:83:21:
80:92:05:3e:78:56:9c:e7:2d:b1:e8:11:60:78:1f:a3:02:d7:
66:6b:36:a2:6a:f4:87:aa:f3:f0:88:2b:60:39:f6:02:43:d4:
9e:e9:b5:21:3b:67:28:1e:ef:ce:c8:e6:51:93:11:9f:4d:09:
70:d0:c5:a4:a4:46:05:5d:8a:33:75:af:df:8d:42:be:e8:90:
1b:ef:6e:f3:e4:c7:2e:09:0c:ac:8f:c7:fd:5b:61:5f:86:81:
e7:9a:63:ad:d4:b6:de:69:46:19:02:4a:48:2e:b6:b1:95:32:
f0:2f:ff:a9:4d:53:0a:a4:03:34:9f:13:a6:3a:b3:c8:8f:01:
a5:bd:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:30:44 2025 by rpki-client