Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: vr5VS5jySX1CwNAesfKBDS89Z0dl42KZlMOBQrWZM9o=
Subject key identifier: 76:4C:1A:48:55:9B:A9:D3:EF:0E:AF:8E:B6:FE:18:36:5F:E2:AF:F8
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 0196C2DDFCD54E57744D49FF6A90BE42B600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 0186
Signing time: Mon 12 May 2025 05:00:50 +0000
Manifest this update: Mon 12 May 2025 05:00:50 +0000
Manifest next update: Tue 13 May 2025 05:00:50 +0000
Files and hashes: 1: 1R1JwYUhzre5tVusLNcgvNdeib8.roa (hash: X7vjIUI1jCkzMROnRUlPtAL6sP2kfkpfxX03eNmr1AU=)
2: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: aQI3xzZDMwLApcpKswn73gRMDdva3IVcu07TMz2nJp4=)
3: Oa9LsMPKbG6aASCQoEwRN7kKYK4.roa (hash: Pw17YPc4vy9Z5t/JIPzjeYGs6qX3rfu7GNC8UJfrzuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:fc:d5:4e:57:74:4d:49:ff:6a:90:be:42:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: May 12 05:00:50 2025 GMT
Not After : May 13 05:00:50 2025 GMT
Subject: CN=764c1a48559ba9d3ef0eaf8eb6fe18365fe2aff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:89:c9:a2:8b:ab:31:cc:6a:29:be:7f:80:
a1:16:64:9c:5e:f8:f6:72:fe:d0:29:9a:24:cb:0e:
5c:4b:44:a9:cd:06:6e:2a:64:2d:7c:1d:02:e8:4b:
d1:7c:6c:16:01:67:ea:80:22:ea:27:98:0a:c2:24:
0f:d3:a5:6b:16:ec:8b:da:b9:19:06:a1:dd:36:8e:
cd:cf:91:77:f8:db:b6:16:dc:30:ee:d9:76:29:af:
3b:d8:29:05:cf:0c:b0:40:7c:01:7c:38:39:fa:88:
ca:db:00:69:5f:f1:dd:32:d2:c0:6d:c7:00:b8:6d:
fa:af:02:de:db:f6:43:a4:49:6a:fc:75:c5:c6:da:
e7:af:4b:31:9d:78:87:d0:b9:4f:a9:82:3d:da:4b:
20:8b:61:4e:85:ee:d4:ae:64:a7:15:d2:36:f5:24:
e3:2b:a0:79:0f:63:2b:2f:77:97:2c:58:62:61:d7:
44:7c:d7:90:f8:13:91:16:4c:a3:b0:3e:3e:7c:51:
f6:8f:31:22:c3:cd:11:af:24:89:61:bf:d8:14:e2:
b3:fa:ac:ac:28:bd:5b:f4:df:28:a8:28:64:47:90:
7f:4c:c1:73:88:9a:3c:b4:8f:cc:64:d6:12:a7:6a:
0b:a6:12:e8:18:5f:5a:aa:71:f2:7d:d7:7e:7b:f4:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:1A:48:55:9B:A9:D3:EF:0E:AF:8E:B6:FE:18:36:5F:E2:AF:F8
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cf:a5:2b:72:7c:5f:99:32:ed:2a:fc:f3:0d:b6:1f:29:f7:
b5:91:94:2f:5a:14:bc:a2:14:05:b2:1c:01:9c:12:87:1b:05:
42:2d:41:93:48:69:2f:e1:8f:10:6b:6b:61:84:f8:d3:99:a6:
25:de:b0:5e:8d:94:8e:b6:67:17:9a:5e:20:04:f2:03:26:ed:
dd:5b:00:df:6f:46:98:19:17:45:89:c6:6a:0e:ba:e7:a4:d8:
75:88:4a:ce:58:40:ce:ac:30:9d:19:16:8c:10:80:f8:2f:e0:
fe:1c:d1:93:ad:cf:2b:51:8b:e8:fc:08:96:a4:42:13:5d:ae:
f4:bd:53:40:c0:e3:36:7f:47:2b:8c:cb:97:65:d0:9a:db:0b:
0b:b5:75:4d:07:fc:80:3b:3c:50:48:99:c2:51:80:08:12:01:
dd:9d:a7:66:aa:85:d4:cf:d5:30:1d:3d:d2:39:00:3f:8a:2f:
8c:5a:c9:eb:66:a5:6d:4c:9e:d6:a9:49:f6:d1:b6:c0:f5:95:
68:a4:52:37:20:e1:e3:e7:f2:9c:17:04:8a:a5:49:1c:5e:89:
87:d4:c7:14:66:8c:78:39:71:38:13:32:9f:6f:8d:7d:12:3d:
aa:8b:3d:19:f8:ba:f1:b9:1f:65:7b:73:6c:c1:b8:2b:d9:0f:
3b:c2:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:08:35 2025 by rpki-client