Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: O+1xG12ufmSYQ1G/Pgc+CfS/Jl861rRGSEAMJ0JKkDs=
Subject key identifier: 22:BE:24:DD:C8:9B:6B:72:6F:40:D2:13:C5:25:39:38:0E:22:3D:59
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0196A19B7BA4FAD0EFDC3C541D6612B3BBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0447
Signing time: Mon 05 May 2025 18:00:43 +0000
Manifest this update: Mon 05 May 2025 18:00:43 +0000
Manifest next update: Tue 06 May 2025 18:00:43 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: +apNmOKl+nJ8Tl/P0MbYvgXJZTIXP3dr9YgvRwzs9Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:7b:a4:fa:d0:ef:dc:3c:54:1d:66:12:b3:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: May 5 18:00:43 2025 GMT
Not After : May 6 18:00:43 2025 GMT
Subject: CN=22be24ddc89b6b726f40d213c52539380e223d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:55:2f:35:8c:dd:c0:85:f3:95:61:a1:43:
45:b3:5e:ee:a9:d7:64:a0:b6:ae:4c:df:8e:41:6e:
09:38:06:d5:d2:a0:d9:8c:ca:1a:5b:6e:ea:99:a2:
57:d1:99:a6:8c:5c:d5:0b:5c:cf:3e:0c:12:c3:aa:
d9:76:1b:40:9f:63:c5:02:2d:b1:70:df:22:53:6f:
85:57:c1:a3:32:cc:ac:0b:e5:16:17:6d:55:fa:bf:
14:11:75:e1:62:5a:00:bc:58:e6:57:79:b8:c6:20:
99:17:0f:f9:18:1b:06:bb:3c:5d:f1:cf:03:e2:9a:
df:b8:a0:47:0b:d6:d1:83:b4:7a:8e:25:52:f8:a5:
a2:da:56:5c:7c:72:99:98:93:f0:e0:29:f9:18:c8:
5b:1b:34:c5:9a:a1:b1:64:96:81:60:53:f5:a8:d2:
04:8c:12:28:f8:ec:8a:d7:13:4a:d7:ff:cd:1b:d2:
00:10:10:8d:8e:d5:7e:4b:af:54:17:57:cc:b6:73:
17:08:14:11:99:ae:16:84:59:25:c9:22:04:ee:88:
73:84:13:ac:bb:85:fb:45:56:95:69:3e:50:1a:89:
41:9e:ad:3d:f9:ee:87:88:49:b2:d8:98:32:da:9d:
44:09:9b:fe:33:db:2b:55:b5:fb:ee:7b:bf:76:2b:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:24:DD:C8:9B:6B:72:6F:40:D2:13:C5:25:39:38:0E:22:3D:59
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:48:df:39:6e:97:c9:55:06:96:41:64:8f:be:91:bc:20:
27:fd:bc:09:64:e9:69:3c:7a:1f:a4:53:0b:05:dd:c2:9e:84:
18:91:74:dd:12:46:b0:9b:79:e7:6a:b9:b5:d6:99:9a:ca:1d:
64:65:53:40:11:e5:a0:a2:d4:c4:7e:0e:13:0d:47:e3:cc:16:
a4:8e:4c:5e:99:fe:44:a2:98:73:a6:6b:f3:04:76:0f:51:6f:
23:b1:17:8b:ff:fa:6f:b4:93:6e:58:11:bc:4f:a5:03:cb:a7:
5f:76:5f:9b:70:f3:d6:7b:23:f2:be:a4:f3:3f:46:3f:21:c1:
05:ff:12:53:b8:bb:31:3d:0e:60:64:7e:61:7d:bb:e6:cb:7a:
30:8a:79:b1:30:70:5e:24:61:50:7e:e1:18:5c:e4:17:a9:4c:
1d:c5:80:0b:53:3f:bf:92:47:f4:c5:75:6d:b6:dc:e2:80:e6:
c3:76:db:c0:40:72:1d:5e:78:61:dc:be:76:01:de:79:1b:17:
fb:1d:d2:9d:38:60:1a:1f:54:b2:7e:ca:a7:15:42:ae:bc:c0:
d3:6e:79:8a:78:6a:df:77:2a:92:17:35:63:60:15:c9:a5:b7:
13:34:c0:27:ff:14:bf:cf:84:3b:74:ca:78:a3:69:03:b2:a5:
3b:3e:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:54:24 2025 by rpki-client