Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: fJW/tiu8LeiFVUAsbpxIFOf48ZNEOCP2eEk9ZOcZtSc=
Subject key identifier: E6:D2:F0:B4:97:52:66:2D:DD:7A:36:62:EE:B9:04:05:45:D9:70:48
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 0196A8AFB9AE10C8BE5C385DE2E6E5EEC030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 0D9C
Signing time: Wed 07 May 2025 03:00:10 +0000
Manifest this update: Wed 07 May 2025 03:00:10 +0000
Manifest next update: Thu 08 May 2025 03:00:10 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: gZTdKeMtZmvdPvRQBw0Gr1yC8jGtluoDXyzV9XzzwxU=)
2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:af:b9:ae:10:c8:be:5c:38:5d:e2:e6:e5:ee:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: May 7 03:00:10 2025 GMT
Not After : May 8 03:00:10 2025 GMT
Subject: CN=e6d2f0b49752662ddd7a3662eeb9040545d97048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:50:c7:af:07:58:16:fe:c2:4a:f6:91:03:
09:8d:9c:ae:50:66:bb:86:32:fa:68:f1:8a:91:95:
b9:84:a3:7a:0e:7e:0a:f8:6d:4e:a1:f2:91:95:54:
32:58:6f:d0:6a:2a:9e:52:39:08:31:89:3a:e9:bb:
14:22:68:99:65:2d:c8:d0:29:13:2e:5f:4b:41:fb:
12:aa:26:a1:e2:0a:c1:d0:ad:73:9f:72:73:38:24:
38:2f:63:b4:9f:67:91:5b:28:7d:7d:70:b9:e0:19:
30:3e:58:2e:88:8b:b5:b3:50:13:12:c6:6d:a1:f9:
2d:a6:45:8e:7e:4d:3b:4b:cc:8b:89:31:5e:e7:26:
32:00:59:cd:0b:b9:30:50:d8:28:46:84:54:75:d0:
c4:28:35:dc:bb:9b:d2:77:60:6e:7b:3c:a9:39:64:
b2:4b:b6:7d:75:df:97:4e:c0:f7:a9:d0:f0:f3:0e:
6d:48:dc:dc:36:81:c7:a5:a6:76:9c:c9:df:70:c6:
62:59:6c:8e:22:bb:4e:14:f6:e5:9e:f2:e0:1b:df:
0f:69:87:5a:39:e8:45:f3:89:6e:f7:dc:76:37:b8:
4f:4c:f2:75:c9:4b:60:66:cf:3b:90:4a:03:fb:48:
75:f4:2f:ff:f6:36:41:85:fb:22:81:24:68:e0:89:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:F0:B4:97:52:66:2D:DD:7A:36:62:EE:B9:04:05:45:D9:70:48
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:1b:c0:ef:78:1e:ef:48:78:e4:d6:47:de:af:80:1c:94:
89:e6:b4:c0:f9:dc:8b:24:24:4c:e0:21:c4:e8:72:28:60:b2:
1a:cf:5d:8f:db:e9:7d:ef:11:1d:53:ef:a4:30:5b:1e:08:6e:
17:33:58:05:5f:b7:d8:b7:cb:14:5a:43:68:1c:da:33:01:75:
88:ef:ba:7f:c0:49:f3:0b:83:b6:c6:2f:f0:21:15:26:97:74:
8d:4f:d2:76:59:45:93:53:cf:f4:68:8d:f5:8a:8a:41:3c:48:
0c:fe:2e:66:e4:3a:d6:7a:56:f5:0a:b4:b7:69:89:51:3d:cb:
d3:33:1b:9b:c9:ba:3f:69:b8:95:25:1e:a0:4e:a1:d3:b0:71:
54:c7:db:24:de:09:84:68:4f:3b:b5:f5:30:89:79:f4:d7:28:
52:6f:58:de:f4:20:1f:9e:21:b2:be:c2:09:fd:8d:60:e7:2e:
b9:3f:dc:b5:2f:43:18:d3:3b:ef:80:66:7f:d1:06:60:a6:77:
77:32:45:5f:e4:4a:4c:6a:94:05:c2:96:6b:a7:f7:42:f7:e4:
c7:51:8d:64:24:f2:eb:7c:4e:89:00:56:9f:d7:9a:a2:94:78:
11:60:78:b8:63:1d:ef:ed:20:7f:fd:e2:0c:8c:b9:53:5a:0d:
fa:1b:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:45:46 2025 by rpki-client