Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: VOksdXzlkcFW1TsFnVzNqcN7R6tgv+jZHAn+cDrLrqA=
Subject key identifier: 8A:FA:E2:DA:B6:32:B7:99:06:F2:BA:42:35:47:67:31:BA:06:11:33
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 0196BCDB5E54EE14CD16FFFC9BB26025B82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 0EF3
Signing time: Sun 11 May 2025 01:00:15 +0000
Manifest this update: Sun 11 May 2025 01:00:15 +0000
Manifest next update: Mon 12 May 2025 01:00:15 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: IdwbhQ0AlHGh9hB304rHz+rM/5iEo2zJs6JREVu129A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:5e:54:ee:14:cd:16:ff:fc:9b:b2:60:25:b8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: May 11 01:00:15 2025 GMT
Not After : May 12 01:00:15 2025 GMT
Subject: CN=8afae2dab632b79906f2ba4235476731ba061133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:f3:1a:dd:b3:83:51:e0:4f:a7:b2:9b:92:
ee:8c:d9:35:73:0b:53:ff:92:65:31:0e:49:8e:25:
b3:ec:2f:d3:cf:3e:01:82:c0:3b:2b:fa:fd:de:d0:
5f:52:11:42:a0:e8:3c:44:55:db:ab:d1:ae:22:cf:
27:03:2e:2e:18:d5:b1:79:2a:a6:51:aa:c4:78:b5:
10:30:19:bf:de:a0:8e:d3:94:4e:30:1c:7c:6e:2f:
a6:8d:82:60:21:a6:10:b6:41:69:f2:51:7c:4c:85:
b7:f0:da:ce:3e:25:cd:da:2c:70:62:95:25:d7:ce:
22:c8:e9:84:aa:6e:e1:b7:d1:c0:3a:60:d5:55:3f:
6c:1e:d2:a4:1e:38:5d:29:07:40:3e:6c:75:53:4e:
36:f4:1c:dd:94:f8:e7:88:dd:c7:59:18:75:9c:e5:
4b:1b:52:87:ae:4c:67:71:6a:e4:cb:ce:47:0b:15:
49:61:26:db:e9:30:3f:9e:5b:5d:56:f5:28:51:18:
39:8d:78:53:49:12:32:19:75:49:65:4a:c4:67:6e:
95:96:a2:90:63:2b:0e:f6:43:c6:51:25:2c:a8:e6:
a2:ea:72:d2:b3:35:db:fa:e8:52:93:d7:e9:e2:32:
19:d2:00:b2:a0:d0:56:9c:e4:e9:7b:17:ed:95:60:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:E2:DA:B6:32:B7:99:06:F2:BA:42:35:47:67:31:BA:06:11:33
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:9b:f1:22:e9:bb:67:16:86:2b:9d:db:0f:8f:42:6e:49:
96:c8:7d:fd:42:16:54:bd:1e:95:e7:fc:57:36:05:d8:22:12:
2a:a7:57:ac:31:67:79:4b:ab:66:56:e8:8c:06:f9:8e:6f:9b:
7a:7e:11:0c:23:3b:5c:27:85:dc:51:94:9f:79:7e:5a:97:db:
61:a5:0e:ea:0d:32:d7:34:be:0d:3f:cd:c1:87:98:89:a0:89:
0e:10:6b:b8:27:6c:95:e4:34:56:d8:3f:9a:3b:79:31:80:27:
18:ae:3a:d9:d1:3a:37:7c:f1:9d:74:4d:ae:c7:d3:07:40:bc:
b7:9a:0a:2d:f9:6e:0d:14:0d:e0:70:1f:9b:66:54:63:90:6a:
6b:d1:24:59:ce:52:31:73:51:a9:f8:f9:25:3f:e5:2b:23:44:
69:c9:54:6d:6a:71:0b:8f:42:5d:27:dd:ea:97:54:35:a4:eb:
b4:34:4c:34:13:f1:4c:11:bc:1e:2f:2e:1f:f0:82:ba:f9:2b:
b4:f1:14:c2:39:b1:ae:c9:3d:e4:15:c8:76:7e:80:db:4c:2d:
5e:b0:27:26:c5:f7:cc:0a:d0:5b:e3:7b:e3:4e:a1:d5:07:f1:
6b:17:59:53:13:cc:3c:f1:ec:9a:d1:70:31:89:e4:a1:21:70:
57:2a:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:38:49 2025 by rpki-client