Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: BVwG2l42bh+1qtFfibRcN7pzRWtgki7M0aduw+suXoA=
Subject key identifier: DB:E5:9D:B4:91:F6:19:61:A0:C7:DA:24:A2:DA:12:C5:0D:F5:E8:59
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 0196B8FEB81FD5FA4F33B7551DBA5F71BE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 33
Signing time: Sat 10 May 2025 07:00:23 +0000
Manifest this update: Sat 10 May 2025 07:00:23 +0000
Manifest next update: Sun 11 May 2025 07:00:23 +0000
Files and hashes: 1: g8dmqB-d7-gWtV7kw3NmQBJ6GQE.roa (hash: tY65EsqKgUVd5eEy+b3JWcjOnvKmYod9fbKFPbX+LkU=)
2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: WrTe8hG9g6Fdb+Gt9Zah5bRPZoaGl4KWEa/9h0jGwa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:b8:1f:d5:fa:4f:33:b7:55:1d:ba:5f:71:be:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: May 10 07:00:23 2025 GMT
Not After : May 11 07:00:23 2025 GMT
Subject: CN=dbe59db491f61961a0c7da24a2da12c50df5e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:29:b2:20:15:7e:b6:cc:6d:4c:1d:02:ff:
71:de:fd:10:2c:73:cd:7d:f9:33:a4:67:3d:20:26:
6a:d4:64:10:2e:41:f6:f7:a3:c2:34:b9:fd:84:90:
13:14:df:27:44:c6:5c:65:76:d7:af:f3:92:e9:07:
c8:eb:92:c1:61:7e:b0:e3:91:71:f0:95:0d:ec:30:
5b:cf:a3:5a:13:f8:0c:b9:20:21:4d:21:0d:1a:5b:
b8:56:0a:86:1d:33:32:24:46:2a:3e:54:e3:2e:d1:
fc:58:50:75:44:2d:4c:e0:68:13:e8:4b:e7:f0:f1:
b6:9d:4e:7f:ff:4c:18:73:e0:5f:ff:61:3c:8b:5f:
19:c5:20:11:8e:be:13:fa:7c:94:3d:72:d7:05:b0:
77:95:c1:95:24:85:b8:11:7a:dc:c7:6d:67:19:d3:
98:91:eb:73:02:94:34:49:19:9d:d4:9b:2d:e6:bd:
2a:fd:81:0a:0d:f5:77:5c:dc:d5:f3:e3:7b:e1:46:
8d:3f:ee:4b:2a:19:2c:11:21:84:70:63:56:e0:6e:
7d:ce:a2:42:91:91:ab:92:60:e3:73:d8:35:b0:f7:
2f:c0:ca:40:92:e6:9c:9f:12:aa:e7:fc:c8:c9:90:
f2:24:de:51:3a:6e:ba:84:6d:1b:ac:84:7c:73:9e:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:9D:B4:91:F6:19:61:A0:C7:DA:24:A2:DA:12:C5:0D:F5:E8:59
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c0:57:27:25:a5:9d:81:e1:6f:cf:63:a0:75:2e:3b:a4:ba:
a4:00:75:8f:dc:1e:cd:01:7c:0f:f6:07:40:ea:a1:f8:80:5f:
16:a3:13:ba:2e:c2:2e:56:e9:f2:16:6d:06:1a:2d:84:03:dc:
9f:2e:13:20:43:00:02:c0:45:04:18:4e:f2:38:55:94:2d:8a:
0b:fe:90:18:5b:41:a2:49:b0:59:e7:1a:d4:30:29:67:ff:6e:
da:6e:18:7d:53:d1:8f:e2:2f:c3:38:83:8b:33:cb:bf:af:63:
1e:fe:09:09:9a:40:a9:18:78:49:84:4b:d1:10:9c:38:66:62:
f2:51:09:bf:33:e2:0c:b0:76:80:86:32:3a:f0:9b:23:d7:e2:
d4:40:0b:f6:9d:5e:02:d6:89:cd:c6:2d:4e:a9:ac:c7:18:95:
fe:1d:72:96:af:06:fa:dc:28:3d:07:99:6b:2d:8a:1c:b7:3c:
b9:40:d8:e3:14:0e:bf:a2:69:57:cd:fc:30:9f:c2:4c:34:73:
ea:77:e6:71:55:00:57:b3:e3:f8:1b:a8:8c:c2:70:59:53:8e:
14:4f:83:aa:bf:61:50:02:f9:e1:24:26:ec:54:91:b3:ce:4a:
96:8c:d0:9d:d3:17:40:ad:d2:51:4d:b3:96:65:5f:31:53:da:
34:49:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:37:54 2025 by rpki-client