Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: be9TyB5KNkpcFGEHhQVOfwjHItD93h42gT87xVY1Dq4=
Subject key identifier: 0E:98:E8:3F:1F:8D:20:50:0C:DE:E8:CE:67:0C:67:C1:CA:AF:4F:27
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 0196816BA325CCAA32F2B14525D08E335B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0885
Signing time: Tue 29 Apr 2025 12:00:37 +0000
Manifest this update: Tue 29 Apr 2025 12:00:37 +0000
Manifest next update: Wed 30 Apr 2025 12:00:37 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: 3qd6bG+WLxf2uGN+hKTFDoyDh1YMqSHmwyy+XrWuH60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:a3:25:cc:aa:32:f2:b1:45:25:d0:8e:33:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Apr 29 12:00:37 2025 GMT
Not After : Apr 30 12:00:37 2025 GMT
Subject: CN=0e98e83f1f8d20500cdee8ce670c67c1caaf4f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:3f:98:45:9e:7f:a0:ba:c5:ad:0f:8b:03:
42:f2:59:5a:8e:9a:d5:f3:ff:1c:9d:ac:ab:0c:43:
56:1c:2f:4b:78:b2:78:30:b2:d3:04:0c:16:df:b1:
17:4d:2c:37:75:0d:95:71:b8:b3:90:87:e2:ee:61:
8b:8d:e7:61:48:f0:e5:b7:3e:1a:3f:88:5e:60:a7:
c6:ed:06:9b:d9:38:f4:9e:63:18:2b:db:e1:8b:51:
ad:d4:11:2a:95:47:06:15:d7:d3:2e:56:34:c6:c9:
cb:e1:48:df:9b:d0:5d:cd:29:35:09:10:11:7d:18:
de:dd:93:75:0f:6f:59:c7:b2:6e:05:28:65:fe:bb:
0d:dc:6e:b1:ec:ac:a7:36:ad:26:f5:90:91:96:85:
33:26:f3:cd:5d:59:cd:41:30:ad:95:14:5b:a4:61:
2f:3a:37:17:94:a7:33:f5:11:1c:32:c4:4a:be:52:
a1:83:ae:6e:e8:f2:16:24:b0:9a:c4:4a:53:bc:b1:
e1:ff:34:d1:19:97:96:1c:1c:f4:ce:1a:c2:0e:b6:
2f:0f:68:83:a9:07:18:0b:26:24:e7:52:93:b9:0d:
c7:e5:25:ff:06:60:9b:ba:d2:89:53:05:b1:07:cb:
ab:95:2e:a1:02:55:4b:ac:6a:fc:cc:de:1d:79:79:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:E8:3F:1F:8D:20:50:0C:DE:E8:CE:67:0C:67:C1:CA:AF:4F:27
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:30:16:a4:de:97:71:3e:19:36:06:90:52:98:fe:0c:11:
dd:53:7a:0c:cd:bf:16:b2:1c:dc:b9:6b:88:81:a8:af:74:30:
10:a4:aa:5a:d3:cd:c9:34:ab:82:c4:76:f8:e3:b1:98:4b:0d:
22:f9:09:ef:bf:2e:f4:6e:48:c2:3e:a0:42:8e:02:dc:4b:29:
f8:49:55:4f:5d:fb:24:66:c8:e6:51:7e:db:62:32:cd:b3:a8:
46:f6:ba:10:57:f9:9c:65:6a:3b:c8:b5:b3:8e:2c:c9:0c:65:
31:27:9b:96:68:01:ff:e7:80:1a:90:13:1c:ad:ac:39:94:3d:
4f:58:fd:c2:33:f3:12:f5:37:4a:68:c8:e8:3d:c3:20:1e:70:
ca:8f:93:98:da:a7:14:df:b9:1c:a4:57:06:26:19:9d:c4:53:
db:cf:8e:8b:b0:df:da:e4:c4:1f:43:0c:56:00:1f:b0:44:15:
11:96:02:c2:b5:37:90:a7:08:53:a5:9f:d3:8a:b0:f2:d8:c3:
f6:77:ad:9d:cc:5e:1e:86:f1:b3:08:92:c3:ec:81:20:4a:8e:
4f:1f:d8:39:ae:7d:e5:8a:23:0c:f9:5b:cf:5c:bd:9b:18:b0:
fa:ae:fd:be:cc:88:49:70:fc:95:3c:e8:b9:6c:20:80:9d:21:
67:38:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:10:31 2025 by rpki-client