Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: m0GjmX8nWwiHq3X2KI6dOUi1Yz06yOdFJ5n0ZY3OIdo=
Subject key identifier: 09:EC:2D:F3:22:E0:26:ED:D0:09:29:31:02:F7:A3:C2:9B:44:5F:27
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 0196C2DDF0B557479489C200E184074182AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 05E2
Signing time: Mon 12 May 2025 05:00:46 +0000
Manifest this update: Mon 12 May 2025 05:00:46 +0000
Manifest next update: Tue 13 May 2025 05:00:46 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: gdJyVSt+5icVLxVl2bhVSCUvNFPLQgmEFgT4VN3yyMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:f0:b5:57:47:94:89:c2:00:e1:84:07:41:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: May 12 05:00:46 2025 GMT
Not After : May 13 05:00:46 2025 GMT
Subject: CN=09ec2df322e026edd009293102f7a3c29b445f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:7b:43:be:4a:a0:5f:bb:cd:df:d3:1a:cf:
66:ea:df:50:63:1a:58:8c:3b:7b:77:eb:0f:6b:88:
69:12:b0:5b:54:09:72:de:c8:f1:70:6e:93:41:32:
43:9a:a7:2e:9a:58:9d:84:75:3f:25:df:5f:a2:a1:
1a:61:9d:5b:48:dc:33:dd:62:b3:33:ad:6a:b1:c4:
de:7e:58:47:78:b2:69:66:b2:1b:e2:c1:8b:01:46:
04:af:df:1b:36:d9:c6:60:c9:4a:f6:56:64:9d:d0:
7b:c7:0f:3f:73:97:9c:d8:24:cf:a3:61:e2:2b:1a:
72:5e:71:c2:36:b3:91:df:64:6e:02:9b:75:85:59:
f0:2c:5d:b7:02:22:2e:6f:54:4a:2b:f6:ca:11:80:
90:95:8e:85:98:f2:98:78:11:34:cc:c2:d3:7e:96:
a7:70:68:f1:f1:0b:1d:4a:b6:8f:b5:06:8e:b0:cb:
a6:85:fd:22:7d:01:9a:9a:aa:76:29:fa:50:dd:df:
56:ea:69:4b:a9:e3:dc:ce:27:bf:1f:9d:7b:05:b9:
35:8c:17:d1:65:7d:e9:00:6e:8e:e1:3d:cf:d5:59:
4c:87:88:7d:a7:c0:45:36:35:60:1f:86:8e:e8:d6:
05:2e:ca:3c:63:a0:ae:b6:dd:6f:ca:8b:e0:dd:27:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:2D:F3:22:E0:26:ED:D0:09:29:31:02:F7:A3:C2:9B:44:5F:27
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:76:28:75:32:35:bc:97:0c:c1:c8:65:39:00:b6:e1:42:4a:
79:e7:0b:64:3b:77:35:b3:9b:36:41:5c:b2:97:af:32:c2:67:
49:80:10:3f:dd:89:fa:c8:7c:cc:6b:36:f2:92:ca:f0:15:1f:
02:f5:c2:9b:75:6e:86:23:57:3b:34:9f:7b:1c:9a:7f:85:1b:
f5:0b:37:46:59:04:73:df:2a:91:de:0f:c9:90:f4:43:ff:3e:
c6:21:8e:f9:0b:b0:37:75:3f:8f:79:43:e4:c0:e2:3a:27:ac:
32:10:fb:e0:bd:27:35:be:ea:17:75:29:dc:1c:13:f2:26:01:
8e:54:80:fc:a0:61:e5:b5:86:a0:fc:5b:ad:87:f9:a5:41:04:
a2:08:40:c1:a6:da:33:ee:9e:82:1e:27:7a:e0:9c:72:fc:13:
b2:c4:40:4f:70:7c:c3:ab:8e:e1:cb:d0:94:fd:d0:2b:24:32:
e5:d1:0d:21:38:82:92:4a:f6:fd:87:73:98:75:25:f1:83:89:
43:4f:bb:44:a1:90:a8:e7:a9:c3:52:e9:3a:86:cb:56:29:15:
44:58:1e:82:67:1e:1e:66:96:e9:79:3a:1a:c7:e5:8e:ee:4d:
be:c0:66:44:ff:ca:9d:3a:04:5f:2b:25:c7:7a:1a:a8:bd:aa:
3a:24:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:22:00 2025 by rpki-client