
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier: vKtJc54WbHhA6wXltfTbqHS34joHsqi59lHDdhQoKqI=
Subject key identifier: E4:5C:5F:4E:9E:6F:AE:EA:18:4A:C2:EB:47:B6:49:AE:CC:FF:33:00
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 0196A12D980BC6A734AF1CDE3A4C66A9E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number: 152A
Signing time: Mon 05 May 2025 16:00:41 +0000
Manifest this update: Mon 05 May 2025 16:00:41 +0000
Manifest next update: Tue 06 May 2025 16:00:41 +0000
Files and hashes: 1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=)
2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=)
3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=)
4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=)
5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=)
6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: 47UpfuswdWEfv+SVTQeoWP4ThuPC0Xcd0KYS6l4QfVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:98:0b:c6:a7:34:af:1c:de:3a:4c:66:a9:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: May 5 16:00:41 2025 GMT
Not After : May 6 16:00:41 2025 GMT
Subject: CN=e45c5f4e9e6faeea184ac2eb47b649aeccff3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:25:38:0d:74:83:3f:c8:12:4f:db:41:2e:
25:d4:84:3a:cf:c0:e3:e8:d6:77:ec:8d:52:bf:77:
cc:11:86:a0:9e:ca:ff:cb:8f:57:04:67:1e:34:be:
82:be:62:2a:00:a8:49:0b:b3:92:ad:37:5f:2e:65:
aa:95:da:c4:8d:9a:01:00:1f:68:08:1a:11:86:1e:
35:9a:df:49:9e:ca:da:0d:46:67:68:60:6e:fe:c8:
21:60:30:87:a7:2d:cf:75:8d:ad:a3:9d:3e:76:b1:
1b:05:fb:61:91:d5:9a:d0:19:5b:b2:a0:3f:da:6c:
1d:f5:74:c8:11:16:9f:56:24:6d:5f:db:86:f4:5e:
67:02:f0:66:4a:37:4b:64:02:a2:12:6b:c6:cf:4a:
ea:73:a6:c7:27:9d:f2:ad:cb:6c:5b:77:4a:f4:03:
6f:97:03:27:2f:0b:b0:e5:0f:0d:0a:f9:41:ad:ca:
c9:5f:fc:50:3c:f2:87:fa:8e:33:78:da:5b:ed:b1:
cb:92:87:a9:92:10:1e:ec:ef:20:f7:49:ae:e6:fc:
c8:59:eb:1b:3e:6a:d4:5f:3f:ae:1b:d9:02:43:a8:
44:8c:e3:d1:ac:b4:40:71:87:35:0c:84:56:a0:5d:
18:92:c4:73:a3:19:c1:95:27:85:d2:61:fb:fd:21:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:5F:4E:9E:6F:AE:EA:18:4A:C2:EB:47:B6:49:AE:CC:FF:33:00
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:98:26:63:ed:08:0d:ee:c4:a2:26:56:32:ee:bf:73:57:73:
ac:3b:65:4c:94:a0:ae:7a:66:da:42:35:a3:07:c2:4e:a5:24:
39:c6:20:3d:d1:4e:66:e9:bb:ac:88:92:7d:f4:a7:dc:39:40:
f7:c7:ee:5d:d3:fa:31:90:f1:fb:c1:0f:27:5b:02:fb:a7:38:
69:c2:03:97:86:6b:81:07:7e:4e:11:02:f6:86:2d:65:ed:f3:
12:2a:92:d7:8a:53:24:cd:1b:b8:d3:e0:36:2a:9c:ec:2a:b2:
72:dd:91:b7:ee:66:e7:bd:e0:6f:75:bd:7c:d4:22:c8:66:ee:
c4:2e:ea:7d:ba:3c:bc:bb:cc:05:0b:d6:a1:e0:9b:c1:13:6e:
0d:4e:1c:0b:ac:db:3d:37:ea:43:0b:ed:6b:57:2c:1c:ca:5c:
bf:b1:8e:38:c9:21:e2:29:59:7f:5a:d4:1a:5f:29:be:a5:66:
2f:03:45:c6:43:7d:26:c9:db:52:c9:b3:ab:16:fb:0f:d3:58:
e6:4a:e9:ff:1e:b8:41:fa:82:5a:ca:c1:19:ba:35:af:61:ea:
e8:07:e6:ea:3c:97:b3:c6:4a:46:47:ad:df:7d:c5:b9:4c:a9:
d4:30:29:a2:80:ff:71:aa:a0:0e:7a:7c:0e:99:06:6f:65:d7:
fc:99:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:12:41 2025 by rpki-client