Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: f3Kpns/F/spnLuuNdEEECjMGTvwmKl0ZP8PKjkGaAT4=
Subject key identifier: 85:15:BD:0B:E6:4A:9E:E7:DA:FD:FC:2C:AA:A7:10:8D:A6:73:0D:17
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 0196ADD6A10836FE3107CE94FF33BA4449D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 0634
Signing time: Thu 08 May 2025 03:00:46 +0000
Manifest this update: Thu 08 May 2025 03:00:46 +0000
Manifest next update: Fri 09 May 2025 03:00:46 +0000
Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: O6B5wHQM+ic5XahZsmpzws8/JphjGDX4SX57NdRQd/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:a1:08:36:fe:31:07:ce:94:ff:33:ba:44:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: May 8 03:00:46 2025 GMT
Not After : May 9 03:00:46 2025 GMT
Subject: CN=8515bd0be64a9ee7dafdfc2caaa7108da6730d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:0d:c4:ff:8c:be:d7:ab:7b:f9:30:09:78:
31:69:90:c3:b9:c6:53:3c:53:24:c0:e8:13:cc:19:
5b:a1:2a:05:cf:91:11:a5:a4:97:88:56:25:c2:2a:
6a:38:28:b6:84:90:4b:b6:05:ae:b6:83:56:a0:96:
9c:65:22:9b:8b:53:9f:3a:ff:b2:5d:63:3b:e0:26:
d6:00:a0:3b:bb:04:3c:ec:be:78:d6:01:4c:c5:aa:
1e:2b:5b:3c:27:67:f0:75:43:ce:72:c2:4b:3d:2e:
a5:3e:59:f8:22:06:d8:cc:fe:b2:ad:7e:1c:bf:b7:
dc:2a:61:50:9b:23:07:d1:3a:4c:3b:00:5f:7c:cc:
0f:63:6c:b9:83:df:bf:7e:82:c9:b2:f5:f5:9c:8e:
f9:dc:15:71:6a:0c:5e:a7:77:af:e7:e4:8c:c6:f6:
63:b8:a8:96:c4:79:9e:c5:ae:4d:6c:5c:a5:8a:3d:
62:50:ed:38:83:86:6a:86:f9:f5:a3:95:54:7d:b6:
fd:71:4d:46:4c:bf:5c:11:86:d1:de:1f:38:c1:27:
2a:8c:74:f4:07:90:66:be:65:58:e8:9f:e7:59:ee:
fb:d7:b2:90:69:e0:a4:c0:d9:42:8b:d6:bb:3b:19:
8d:84:9d:88:59:ea:db:40:e7:48:5e:9a:4a:6b:e2:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:BD:0B:E6:4A:9E:E7:DA:FD:FC:2C:AA:A7:10:8D:A6:73:0D:17
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:9a:ae:7e:8b:f0:2d:29:40:da:fd:24:7e:fe:33:20:34:
87:a1:de:3d:04:04:17:54:b8:9a:6c:dd:e8:65:6e:b0:c8:26:
74:35:c4:73:6d:f7:9f:3f:98:dd:1a:4e:52:85:5d:c7:37:07:
a7:1a:35:e3:57:27:54:10:ee:36:59:88:63:57:54:d7:b8:09:
6d:5a:4a:17:bf:da:df:13:08:57:36:08:6a:24:ae:c1:87:87:
1f:8b:db:a7:cf:75:7d:a9:51:d8:51:48:46:e6:19:9d:99:12:
01:85:b9:27:bd:77:f7:0a:89:28:d1:f2:bc:9b:ca:84:7f:db:
e2:cd:82:a4:82:7f:3e:75:a7:66:c0:c4:80:25:7c:d8:f1:26:
f1:97:52:25:a1:67:93:f5:0d:37:dd:6b:89:63:ca:cf:3f:a7:
19:ba:12:50:5c:88:c8:e6:b0:6b:75:8b:dc:ae:6a:85:dc:a7:
61:05:a3:44:85:db:f6:c2:d7:fd:a4:4b:72:93:82:3c:9c:62:
ff:5a:31:0d:a7:48:12:fe:e5:c1:e0:8f:47:46:40:8e:d6:28:
39:13:cc:47:d0:ae:da:06:3f:c0:07:be:32:cf:cb:db:42:79:
e2:73:6e:b8:42:ac:b6:69:ad:dd:52:e8:a6:98:f4:26:c2:d4:
d3:15:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:39:04 2025 by rpki-client