Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: xy0SVgl4D3rcS7yOfgACv0Xt2fCrjHCBXqtyYaD+GxQ=
Subject key identifier: 99:3F:10:10:43:D4:43:19:2D:88:77:95:2E:BF:6F:76:58:36:13:03
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0196B333B5BAB71FC59F47B87C2EFFC813E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 0302
Signing time: Fri 09 May 2025 04:00:32 +0000
Manifest this update: Fri 09 May 2025 04:00:32 +0000
Manifest next update: Sat 10 May 2025 04:00:32 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: mwd37mhy0tBPMz0khFOiDIklQZZ6y0DX6b1aiFnIgXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:b5:ba:b7:1f:c5:9f:47:b8:7c:2e:ff:c8:13:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: May 9 04:00:32 2025 GMT
Not After : May 10 04:00:32 2025 GMT
Subject: CN=993f101043d443192d8877952ebf6f7658361303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:26:9b:88:45:de:0d:17:ef:d8:62:0a:24:
07:c5:50:2c:e2:b9:7b:e6:3e:d8:0c:54:93:b8:fc:
fd:6d:cc:70:85:80:d6:dc:b4:20:a6:81:12:9d:9e:
e9:7c:78:2e:7c:88:9b:1d:80:4c:bc:42:ee:d1:c0:
e9:ca:c3:f4:4f:a5:47:68:5b:ae:50:05:6e:23:be:
18:aa:78:b6:eb:c2:ff:24:62:44:0a:cd:3b:e3:0e:
8f:cf:fc:29:18:08:8f:d0:4b:03:74:10:0f:73:dd:
6d:c1:e3:55:dc:c1:9c:04:96:92:d3:98:0f:64:f2:
6e:c6:7a:f9:7d:36:d4:df:dd:3d:53:05:cc:13:0d:
02:33:cb:6e:36:fa:26:24:f8:14:81:05:a1:05:56:
24:a4:8d:fb:63:91:47:16:af:87:81:d8:5d:a9:b7:
74:66:46:b7:66:86:2c:72:f9:c6:11:10:c8:53:24:
0b:05:a6:2a:eb:f8:b2:5c:71:bd:28:43:d3:5c:74:
55:2d:cd:a9:de:de:f5:96:cd:f8:4a:5d:c7:18:c1:
25:be:69:4a:99:50:7a:9a:cf:21:f0:3a:69:da:89:
42:a6:30:b6:74:b0:0c:39:25:7d:e7:da:c4:2e:73:
b0:98:35:eb:5b:25:d8:28:94:77:2c:cc:ca:ea:28:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:10:10:43:D4:43:19:2D:88:77:95:2E:BF:6F:76:58:36:13:03
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:32:75:8e:a1:a5:94:20:41:22:1c:44:01:30:3b:eb:ad:62:
59:a0:e8:7d:de:6e:b4:24:c4:64:2f:0a:86:6f:10:cb:48:55:
9d:11:11:a3:fd:d0:bb:7c:ed:ec:03:3f:dc:39:81:fb:58:c3:
ad:08:6a:7d:56:39:7b:54:3b:e2:41:05:4e:0a:fb:df:d0:d6:
75:ee:7b:ba:36:4a:c1:c9:e0:61:2a:ce:07:c6:61:07:ba:76:
85:76:18:f4:dc:92:3b:ce:96:08:14:46:4f:14:e2:a7:32:01:
00:52:50:7c:e6:3b:4d:43:1e:93:ac:67:6b:60:10:ac:bf:2f:
8a:92:ca:e7:f2:62:bd:4a:91:8e:02:b3:f2:53:cd:e7:30:60:
63:ef:45:14:8e:21:56:ef:5c:a4:38:4c:c8:3a:63:4e:a1:58:
01:7b:32:35:d5:bd:60:44:f9:03:e6:27:83:5d:64:ab:97:c5:
d5:e7:c5:00:bc:27:15:ed:49:2c:83:0f:de:b3:07:79:01:f3:
f2:4b:b3:13:7b:f4:5e:bb:99:c8:a4:81:e8:69:ed:5a:49:8f:
e0:56:42:52:25:15:11:d9:51:e6:10:7f:32:10:4b:ef:e6:6d:
9a:f8:da:dc:9a:0a:90:90:e2:84:b7:56:78:b4:1e:f5:04:43:
46:a1:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:59:26 2025 by rpki-client