Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: 20g5DkicpTQcs5SAC0vAWUVzwq5Be5Z+NspL/vPvpLA=
Subject key identifier: 55:E8:49:40:16:27:22:36:EC:0F:87:15:4A:C3:CE:B5:96:EA:82:96
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0196D6D23CC3712A1D929D9E40232AFC13F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 152A
Signing time: Fri 16 May 2025 02:00:24 +0000
Manifest this update: Fri 16 May 2025 02:00:24 +0000
Manifest next update: Sat 17 May 2025 02:00:24 +0000
Files and hashes: 1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: ggB3J2GiiZfB7MqPyv6Lukb5AogrgBQb9WI+AhNBoeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:d2:3c:c3:71:2a:1d:92:9d:9e:40:23:2a:fc:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: May 16 02:00:24 2025 GMT
Not After : May 17 02:00:24 2025 GMT
Subject: CN=55e8494016272236ec0f87154ac3ceb596ea8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:7a:8e:af:6f:3c:bd:eb:38:22:65:ce:35:
5d:99:8c:78:9d:9f:ac:1a:18:f8:7e:00:ac:d4:0b:
18:72:22:47:af:01:a1:8e:0e:22:84:a6:6b:90:d2:
7c:6f:89:31:33:be:ec:6b:e2:e5:b3:d7:bf:ef:25:
12:68:78:f5:49:b4:56:e5:d9:7b:c8:ff:cf:5a:1f:
7e:45:80:14:d0:a7:7d:8d:89:cb:fc:f7:c8:15:70:
36:41:31:32:ac:b9:9c:53:41:04:ec:a7:f9:7f:57:
6d:c2:3b:e9:69:05:a8:0e:f1:9c:41:59:fb:e6:9a:
d2:3e:ab:1e:a5:b7:3e:f0:c5:7a:fa:5e:b4:bd:1f:
82:55:6c:0e:1e:c7:21:65:f9:b8:d4:80:ab:1e:c2:
c0:03:6e:4c:0a:a2:0a:62:8d:9b:a4:cf:6a:63:e0:
ff:dd:9d:6f:9c:62:4f:86:f8:bd:fd:fd:9f:1b:32:
ab:c7:a5:59:88:54:28:db:15:c6:a8:9b:52:ff:5a:
85:4d:df:b2:18:4e:84:91:16:ec:c7:50:7c:a6:5e:
59:c0:12:a1:aa:c6:ac:26:e5:42:12:2b:85:30:0c:
6d:ea:20:ef:0c:33:b3:60:ce:8d:10:54:db:42:92:
54:35:64:71:12:dd:17:74:87:76:40:ad:c8:de:09:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:49:40:16:27:22:36:EC:0F:87:15:4A:C3:CE:B5:96:EA:82:96
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:db:cd:fa:95:4e:bc:ad:9a:05:87:81:03:2e:10:b0:1b:
7d:f2:ae:73:15:d2:6d:92:b0:3a:34:31:c6:78:db:7f:fe:e1:
42:41:db:33:5e:ce:1e:5e:03:7e:6d:fd:33:9c:ba:5c:69:37:
33:8f:08:9b:c5:ae:23:1b:35:7c:a7:86:28:74:4d:3e:00:e3:
70:3d:22:7c:f3:fa:8a:b2:43:0e:0b:10:a6:7c:77:a8:a0:bb:
a0:fb:c7:42:f1:a2:c0:62:bc:be:90:99:af:da:0b:3c:91:77:
83:66:9a:58:90:19:7c:eb:cd:de:cf:d6:78:71:3b:2f:c7:02:
cf:93:5b:d2:ff:83:d1:6c:aa:b4:14:58:bc:74:85:11:35:a7:
69:f9:75:ef:2e:6a:c8:e9:9e:b6:8b:ee:dd:01:a8:42:c4:b7:
f6:63:f3:39:a4:4c:d6:76:e9:8b:39:cf:ca:b2:e2:65:24:d7:
fb:e5:f6:31:be:de:49:6a:b2:3f:f7:ea:04:8e:de:82:6b:d1:
07:f0:3a:b4:4e:9d:20:2d:07:88:28:50:c8:3f:98:03:79:98:
3c:d5:f0:4e:c6:5f:ce:21:4e:ad:27:cd:0c:88:2f:3b:8c:fb:
64:30:31:c4:c3:98:b1:b2:f7:aa:53:fc:79:a9:25:cf:c9:b9:
50:7b:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:12:50 2025 by rpki-client