Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: Ga4t3Z9zY8M6/becgXtw8vs+uumOcSNh0Law9GQWo58=
Subject key identifier: 8C:15:14:E7:FF:A0:9A:C1:C6:50:72:C5:04:C3:84:DF:D8:36:57:4B
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 0196D0621E7CAF5C557F68A73F934FC0AD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 20:00:13 +0000
Manifest this update: Wed 14 May 2025 20:00:13 +0000
Manifest next update: Thu 15 May 2025 20:00:13 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: X2Zs74bSbuC74dZetdT6/ugo/Ksj3AEMdFdIoziB6CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:62:1e:7c:af:5c:55:7f:68:a7:3f:93:4f:c0:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: May 14 20:00:13 2025 GMT
Not After : May 15 20:00:13 2025 GMT
Subject: CN=8c1514e7ffa09ac1c65072c504c384dfd836574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:21:53:59:e4:21:58:a8:bd:b6:12:38:1f:
ea:aa:0b:06:0f:03:60:28:55:dd:0c:d5:f1:c3:ea:
93:7d:75:c8:28:71:15:47:96:2e:c3:bb:a3:53:42:
70:ba:de:da:34:a3:51:94:c1:9f:d8:2d:bd:51:37:
24:41:21:78:5b:ec:99:b1:dc:9b:f9:5a:2a:a3:b0:
fa:6e:87:de:6b:6a:06:59:32:23:bc:f9:e6:22:d7:
fb:54:6c:59:3d:f1:19:06:09:3c:06:5c:3f:da:54:
c5:06:74:9d:d8:2b:df:73:9f:65:c5:24:11:7d:9b:
6d:fe:36:c1:fd:40:da:c9:8b:39:3a:2a:23:14:9f:
ee:bd:8b:9e:4b:0c:ae:04:7b:f4:89:7b:6f:88:6d:
8f:30:3b:b8:01:bc:0f:de:b2:d1:31:c7:df:0f:49:
24:3f:2f:05:7e:a9:2d:ce:47:24:91:b0:8d:d1:b0:
b0:9b:97:8f:25:9d:0d:29:02:0f:da:69:00:a5:ed:
ae:24:32:33:83:83:4f:4f:64:bb:ad:4c:74:3c:23:
e7:b6:60:f2:ca:39:79:bd:04:41:89:11:1b:2c:25:
57:a2:0c:70:60:bd:42:7c:68:b3:68:16:bc:d7:59:
2d:f5:90:03:ec:9f:d4:8d:33:c5:19:43:4d:50:33:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:14:E7:FF:A0:9A:C1:C6:50:72:C5:04:C3:84:DF:D8:36:57:4B
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e1:02:ca:8f:43:e7:32:f0:95:ed:64:2d:ac:01:e1:72:14:
7c:5e:e1:4f:35:64:95:11:d7:76:74:fd:69:ab:68:37:bb:02:
3c:cb:79:37:07:4d:fb:50:c6:35:d2:fd:01:b3:dd:54:a4:c7:
5b:39:ce:3a:76:d2:85:7a:85:97:bc:ac:3e:c8:43:12:be:de:
33:6b:15:ed:1c:b6:66:3e:ad:52:e6:b8:84:7d:3a:73:51:3b:
45:39:76:06:ed:84:51:15:6e:c2:9e:18:3d:e6:36:9e:ed:20:
75:f0:7a:aa:4c:8a:dd:8c:fe:c3:70:5b:f1:e7:0b:a3:91:4e:
36:84:72:c1:eb:e0:c4:7f:d6:72:29:af:28:ed:30:8b:63:bf:
1d:40:a9:a7:89:cd:dc:71:2d:fc:74:69:4a:6e:12:67:bd:0d:
0a:d6:00:5b:4b:2f:a8:78:3c:2c:f9:49:95:c0:cb:ed:ac:5f:
a1:d2:73:2c:42:41:ad:c9:a5:ae:f3:18:04:b2:5b:37:42:c4:
34:0d:91:f0:1a:49:4a:76:02:36:06:cf:35:60:9a:e4:70:a8:
da:ee:5b:31:23:06:62:f6:18:f8:7c:84:21:c5:f7:d7:ab:91:
03:de:16:18:3a:db:5c:28:45:b5:be:c3:4b:4a:ae:e2:6d:ba:
0f:ba:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:56:32 2025 by rpki-client