Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: xNJlYTDPukb0yftG4t4P4HQvM5ciF/kAlkJgvxtkjdg=
Subject key identifier: 57:7D:7A:C6:6C:C2:84:28:C3:B1:82:D3:A7:3F:F6:FE:E9:9D:1C:BC
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 0196C2A7180F0B267A31E412B3FFA3827737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 10F8
Signing time: Mon 12 May 2025 04:00:52 +0000
Manifest this update: Mon 12 May 2025 04:00:52 +0000
Manifest next update: Tue 13 May 2025 04:00:52 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: Rx0p48ResaOcbSsoPGOG9+MwxOsWZGJTUMP68QIYY8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:18:0f:0b:26:7a:31:e4:12:b3:ff:a3:82:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: May 12 04:00:52 2025 GMT
Not After : May 13 04:00:52 2025 GMT
Subject: CN=577d7ac66cc28428c3b182d3a73ff6fee99d1cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:fb:08:01:a7:a0:39:66:5e:97:36:ad:3a:
bf:be:ea:30:8e:aa:27:25:2c:3b:ed:2c:2a:b9:95:
ea:8f:61:75:34:8a:b3:9f:2c:5b:08:2d:ad:d8:cc:
cb:be:5d:78:42:51:ee:3f:18:4e:c4:bd:d1:d9:74:
7f:10:f0:62:a1:f9:52:b9:fc:e9:ba:31:6f:64:7e:
1a:c3:b7:24:8e:a2:4e:51:c9:a9:31:ad:dd:e4:78:
75:57:66:3d:39:fa:45:ef:68:b9:9c:c9:27:2a:d0:
8f:84:52:5c:77:fb:a0:c4:32:db:a1:73:78:06:77:
b9:7b:10:bb:9c:75:72:8d:11:e8:42:58:5b:0b:8e:
00:c4:02:fd:e3:97:c0:e2:71:25:be:e4:c8:eb:d4:
55:bf:88:f4:22:64:65:c6:62:18:b1:b5:3b:01:00:
ac:da:dd:35:4f:86:93:b2:c1:4f:1c:13:1f:c2:4c:
56:8e:9a:2d:66:e3:65:4c:c4:50:7c:99:3a:cc:7e:
59:8c:d6:6c:24:b4:b1:f3:36:ea:df:54:70:41:54:
95:94:43:9a:e9:69:5a:95:b7:a4:82:bc:46:bf:26:
49:47:e4:cd:1f:4b:0a:26:ec:46:4d:e5:59:c6:6d:
c8:9c:9c:24:55:70:f7:28:66:57:d2:08:bd:90:57:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:7A:C6:6C:C2:84:28:C3:B1:82:D3:A7:3F:F6:FE:E9:9D:1C:BC
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:b4:e1:55:8b:20:6f:cf:85:81:5f:7d:b5:e3:1f:09:6f:
bd:92:6c:d4:13:2f:c4:44:6a:15:70:d1:02:c1:56:0e:01:71:
b8:37:04:8d:50:db:51:57:85:a3:4e:da:67:f7:03:58:16:03:
d0:1c:b7:b8:e6:2b:a6:6d:8d:82:a4:0d:5f:05:fc:7e:01:00:
b1:d3:74:9d:8a:9c:ca:ab:48:f6:70:36:d8:df:6f:1a:05:68:
cd:e1:9c:c9:1a:fd:38:d4:35:00:5e:68:e9:cd:87:64:c0:83:
04:b7:c8:e2:e5:e3:d8:5a:09:ff:7d:a7:79:55:90:d8:02:92:
c7:dd:49:8a:20:ee:78:8f:53:eb:b3:71:73:9b:65:c7:6b:5d:
4e:6f:db:09:d4:30:cd:d5:a2:b6:6d:25:51:90:11:c2:30:45:
d6:f9:07:ce:5a:07:d8:c3:7d:0d:e3:16:e6:66:64:6f:d1:05:
a0:cf:65:a3:83:f2:72:5d:f0:d4:99:b6:0e:db:ba:65:ea:a5:
ce:c5:b2:35:a6:f4:9e:ba:ad:18:b2:33:99:cd:c5:bb:ea:23:
1a:f4:72:b9:30:0f:fa:23:4e:e2:18:4c:7e:8b:77:ce:bf:b9:
4c:fd:71:b3:59:8f:5e:eb:eb:f6:54:ab:52:de:3e:a5:0e:c3:
0e:d2:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:14:04 2025 by rpki-client