Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: eETuayBxuC7t25ulZ99NnJu7ui1zydmhkh5xDynluDk=
Subject key identifier: 45:61:42:93:CC:9F:CB:A5:34:FA:EA:8A:97:8C:83:97:D9:6A:0C:C4
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 0196BCA4F548E60F907600C006C9771786BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0915
Signing time: Sun 11 May 2025 00:00:49 +0000
Manifest this update: Sun 11 May 2025 00:00:49 +0000
Manifest next update: Mon 12 May 2025 00:00:49 +0000
Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: 9SLGhQDB+VHgMOhBjMMGiWps9S99WncmIxbxcYc34rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f5:48:e6:0f:90:76:00:c0:06:c9:77:17:86:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: May 11 00:00:49 2025 GMT
Not After : May 12 00:00:49 2025 GMT
Subject: CN=45614293cc9fcba534faea8a978c8397d96a0cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:a8:b6:a5:1d:cf:74:22:3d:2e:c7:60:2d:
53:59:1d:1d:4e:51:88:ed:c1:dd:4e:0d:16:cf:27:
86:db:05:06:9d:9e:6f:3b:52:dc:06:b4:36:ad:71:
01:4e:3c:e0:b8:ae:77:b6:1d:64:f0:a4:35:7d:46:
b1:a8:69:32:43:6f:40:b5:26:35:4b:46:46:2e:a3:
22:ed:68:db:95:34:47:82:b4:f7:a9:86:cc:08:51:
a7:fa:9e:34:38:65:11:38:e1:80:8a:de:46:db:84:
77:97:29:41:5a:9f:9e:d3:4d:ca:3d:38:86:7b:30:
b7:8e:12:c5:c8:02:7a:ef:eb:57:1f:b3:8a:fc:df:
02:cc:fa:fd:70:fa:94:be:09:3b:42:bd:18:53:e2:
cc:23:20:99:f5:e3:73:23:c4:0a:19:01:82:2b:08:
d0:0b:53:9c:99:1f:5e:14:ec:ed:9f:cd:77:c1:4a:
a0:c6:16:44:65:76:70:78:73:3c:a3:da:3a:02:78:
0d:23:b6:e7:a0:9f:e8:c7:36:33:a1:1f:18:ff:7b:
18:0d:13:d9:60:e2:55:b6:84:a6:c8:a8:77:88:dd:
b3:d3:40:4f:2d:e2:6d:e9:52:64:0d:49:77:a2:d8:
39:8d:68:f6:f8:cd:77:99:f8:b5:f7:3d:bb:0c:43:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:42:93:CC:9F:CB:A5:34:FA:EA:8A:97:8C:83:97:D9:6A:0C:C4
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:6d:06:4a:d6:05:6b:32:5b:32:99:a1:62:c4:04:7a:2d:
95:bd:45:06:0c:02:3e:ef:ef:0e:56:dd:43:96:57:52:5e:fa:
4b:62:26:a7:a0:3c:60:8e:14:1b:4a:99:9c:34:4d:e6:8e:13:
7a:8c:a8:bb:e9:e6:cc:04:53:4e:ac:36:df:e0:3d:65:89:b6:
42:44:f8:3d:16:8a:36:d6:7c:74:9c:44:f9:9a:0e:7e:f0:0c:
da:19:db:a1:af:a4:2a:b8:bc:41:94:9d:b1:f1:b0:49:2b:d5:
a5:da:6d:a8:db:f7:49:c4:a3:f4:de:f8:dc:ba:b5:ad:06:95:
9a:5d:dc:e7:c0:cf:6d:35:6e:6b:04:b0:38:38:64:73:77:0a:
99:41:bf:69:58:79:ab:24:17:00:b1:0f:ce:ba:97:a1:8c:dd:
ad:29:4e:3d:ec:8a:15:94:f2:94:a1:77:ee:4c:34:29:c0:b2:
8d:2b:ab:c8:d7:bb:9b:ee:c5:ed:31:5a:cb:39:d0:f1:32:3c:
f7:d9:c8:00:34:b9:e9:2b:7a:3e:1c:33:ed:59:0d:ad:18:3a:
37:96:48:05:78:97:13:0f:09:c8:a6:ec:62:52:e2:c8:b3:2b:
f8:fc:ed:e7:2b:95:b2:34:e8:0c:2c:9e:5b:29:19:d9:96:b2:
db:e4:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:27:37 2025 by rpki-client