Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: CQJXT5SHzbAU58sU8YHkCjYb4eKM6AUM40LODSngNlU=
Subject key identifier: C3:E9:75:B9:2F:8C:B2:7F:8D:19:7C:A7:22:07:A6:6F:FA:62:5B:2D
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 0196BC37025A283F1AAF457B27921A0CA10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0C68
Signing time: Sat 10 May 2025 22:00:43 +0000
Manifest this update: Sat 10 May 2025 22:00:43 +0000
Manifest next update: Sun 11 May 2025 22:00:43 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: Mqq6tIvurIuAReVdySGBlJIQ/JIG2Zo9K+cWqmksaio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:02:5a:28:3f:1a:af:45:7b:27:92:1a:0c:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: May 10 22:00:43 2025 GMT
Not After : May 11 22:00:43 2025 GMT
Subject: CN=c3e975b92f8cb27f8d197ca72207a66ffa625b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:5a:43:72:a2:eb:27:30:bd:80:9a:a3:93:
07:92:64:16:00:cd:4b:67:b6:d0:a7:e9:1d:77:1c:
96:b9:ea:f9:12:64:55:b4:29:0a:08:59:db:6e:73:
3a:7a:ad:f9:d7:6a:32:00:f5:d0:b1:b6:91:2d:ac:
15:77:65:7e:17:72:5f:62:4c:db:b7:0c:14:ba:f5:
9d:ef:a8:e2:0f:59:1d:1c:ea:ba:cd:7b:9e:20:24:
5b:83:65:7d:f7:bf:1d:ca:98:f6:ba:a1:26:9a:cb:
ed:46:2c:ce:1c:e1:a5:f6:d9:c6:25:eb:56:ea:3f:
9c:af:a5:79:66:0e:24:41:91:cd:f7:6e:ac:00:90:
4a:8d:26:6c:6f:12:db:df:76:14:cb:3a:fd:91:91:
86:3d:de:7f:48:c5:45:06:47:0a:c7:7a:90:23:8f:
3a:b4:fd:9a:35:ab:d2:98:cd:c6:39:f1:ce:e8:09:
0d:9a:7b:44:de:40:55:b0:dc:c7:61:bd:7c:5b:db:
28:0a:9c:70:4a:bb:3c:00:5e:27:82:92:3f:76:00:
d0:55:ea:99:32:3e:90:36:aa:8e:d8:98:77:a6:28:
7a:f9:74:a2:5c:62:01:fc:95:5c:09:18:11:8b:1d:
21:37:c2:f0:86:fb:58:df:5a:a5:c7:e3:13:e9:23:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:75:B9:2F:8C:B2:7F:8D:19:7C:A7:22:07:A6:6F:FA:62:5B:2D
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:da:5e:1d:ff:c4:18:44:4f:06:27:d2:96:d2:f4:39:46:42:
8f:67:d2:ba:b3:07:f8:95:67:47:55:9e:ec:e9:92:3a:53:38:
a3:ea:cb:4e:5f:eb:78:97:fc:9b:39:b3:3b:14:31:17:e1:4a:
aa:10:52:fd:68:f3:29:64:86:fe:17:3c:9c:c2:14:e9:22:a8:
ce:66:01:c7:c4:d4:87:81:db:df:49:de:4c:04:9f:30:73:09:
94:44:18:86:ba:bc:2b:06:9f:6b:3c:af:e5:3c:24:97:54:f2:
20:51:00:1f:91:a8:39:a5:b4:56:17:6e:28:a5:72:9e:21:93:
d5:c4:10:c2:5d:30:c8:78:82:e5:17:91:dd:b6:cd:6e:fc:aa:
40:02:dd:45:84:b3:7a:94:07:a2:69:22:81:d9:33:d1:5c:a9:
a2:10:83:10:5d:3f:61:e6:8f:c1:9a:ae:80:50:38:81:fc:f7:
95:a0:da:0b:03:e4:27:d6:76:66:e6:68:fe:b4:3d:17:09:92:
6b:21:10:94:22:fc:10:fe:ca:01:7b:f3:35:9d:21:b6:c7:08:
64:0c:f2:c1:c3:44:8c:a6:e9:be:6d:e2:1c:50:35:b7:31:8d:
5b:b4:ec:1d:b3:3d:03:8f:0c:af:96:a0:45:47:5b:91:0f:de:
0e:35:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:03:17 2025 by rpki-client