Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: mw2qtnrSdGftOXitgiLP4qZcg+Dqx+lggct1zM+BGqs=
Subject key identifier: 25:7E:E4:FD:E5:BC:DB:45:B3:D1:D3:58:DC:C2:91:C7:36:54:B3:1E
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 0196B40F87D61126ADD6A31103B9AB2AE6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 08:00:38 +0000
Manifest this update: Fri 09 May 2025 08:00:38 +0000
Manifest next update: Sat 10 May 2025 08:00:38 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: N+/477MrBkCyu44LrRtoScdZDI5bzbAdzCZq68wvBRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:87:d6:11:26:ad:d6:a3:11:03:b9:ab:2a:e6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: May 9 08:00:38 2025 GMT
Not After : May 10 08:00:38 2025 GMT
Subject: CN=257ee4fde5bcdb45b3d1d358dcc291c73654b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:26:24:f0:60:b9:67:c5:0d:92:2f:27:33:
10:1e:81:f8:07:f3:4b:35:7a:69:26:1a:a7:98:98:
61:34:93:51:ec:2a:98:08:76:e5:09:bc:d4:bf:8a:
51:fc:a9:9c:88:3f:51:4d:7d:da:cc:ee:bb:44:07:
d6:a0:d4:4d:2e:8f:3b:3a:ae:2f:e9:53:d4:13:a1:
e5:d0:f4:e2:72:5c:b0:10:88:b3:09:d5:49:98:aa:
dc:39:ba:e1:73:0e:06:03:74:b4:ac:8b:1b:75:03:
8a:d2:72:96:6e:3a:5a:ea:a9:66:b9:21:cb:98:4f:
93:2a:06:44:33:dc:ec:46:c8:5c:c4:c1:f3:72:9e:
70:aa:4b:77:6f:00:2e:44:b0:a3:f2:61:29:b1:5e:
8c:f5:2b:ed:7f:d3:6e:18:29:94:a8:78:fe:a1:14:
ce:e5:16:a1:1f:32:a0:6d:cf:0a:ff:e1:db:47:cc:
fc:93:df:27:52:2b:5a:1b:f8:88:45:87:9a:d5:33:
c0:05:f4:2f:4f:0b:33:15:1e:8b:32:00:42:2c:24:
e4:93:ba:97:33:2b:d8:24:9d:35:e5:e4:d6:76:11:
3a:3b:47:53:57:61:33:1e:3d:99:cb:f8:85:0a:44:
31:d8:ed:ac:53:18:f7:a4:36:bb:5f:cd:37:a7:9f:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:E4:FD:E5:BC:DB:45:B3:D1:D3:58:DC:C2:91:C7:36:54:B3:1E
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5f:72:a0:9d:df:62:8d:6b:2b:6e:a7:51:22:9d:53:60:bf:
97:62:31:d5:93:4e:5f:98:52:7b:ae:7e:fd:25:af:62:91:fc:
81:22:9c:f3:a4:8d:76:d9:10:b0:f8:03:3b:68:2f:d6:da:f8:
b7:73:90:6a:a6:a5:2f:87:69:e2:1a:db:41:a2:99:43:0b:e5:
ee:09:55:d5:8e:42:c7:a8:9d:bc:28:30:02:f9:b7:14:06:6b:
41:68:58:96:b2:91:bc:ae:9f:f3:dd:16:34:33:3c:be:aa:19:
33:f7:e2:b0:f6:1b:58:9f:2f:11:ba:ad:1e:40:ee:3f:74:b8:
ba:10:22:a1:27:f9:33:21:fd:86:65:74:99:69:72:53:81:78:
a2:c4:3a:9a:20:fa:9d:23:12:79:44:f8:10:71:51:06:e7:9a:
88:84:4f:bd:4c:bc:64:e4:74:00:06:e9:f4:35:ee:ee:c2:a0:
af:9d:99:6d:ad:94:ea:6a:14:95:94:60:f8:7a:46:9a:01:4d:
26:a9:33:62:c1:4c:51:ee:36:52:cd:cc:9a:54:09:a9:28:c3:
08:e3:c9:28:ae:04:26:e0:9a:67:90:ba:00:5f:00:aa:3e:46:
9e:84:d3:69:f4:b6:dd:f9:2d:88:ea:02:14:6b:b0:3a:da:48:
35:a6:96:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:10:31 2025 by rpki-client