Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: d5qOO4zZmQ9tAslXN2s8IknP9q/5I1mpIVrMyYInPgE=
Subject key identifier: 28:3E:8D:BC:00:63:23:60:08:FE:B6:6F:68:E4:9C:7A:12:5C:71:F1
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 0196760CC799C0D79028FDAFF346ECBF44FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 02E5
Signing time: Sun 27 Apr 2025 07:01:10 +0000
Manifest this update: Sun 27 Apr 2025 07:01:10 +0000
Manifest next update: Mon 28 Apr 2025 07:01:10 +0000
Files and hashes: 1: UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa (hash: zpm9oScjJUHtNk/CwO+EVZyjIHRYFCB8FAgH34Qnsvo=)
2: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: nXBNgaMGlsffBvvG+Pkpgxe0VpXPy+uSRlqPUuIeuho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c7:99:c0:d7:90:28:fd:af:f3:46:ec:bf:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Apr 27 07:01:10 2025 GMT
Not After : Apr 28 07:01:10 2025 GMT
Subject: CN=283e8dbc0063236008feb66f68e49c7a125c71f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:62:cd:d5:f5:e2:97:bf:86:3d:1e:99:09:
34:3f:f7:3c:6c:1f:b1:1f:4a:5c:76:6d:21:82:21:
36:88:bc:37:06:7a:3d:7f:64:aa:11:3d:dc:4e:4d:
23:35:dd:fc:0b:2c:6d:0c:fb:92:42:40:91:8c:ae:
a9:23:00:83:d6:17:8e:c8:70:4b:92:e1:e0:7c:0d:
54:9f:90:3b:f3:32:63:b1:c3:6a:aa:6b:ac:ab:47:
fe:88:20:07:e1:b4:21:56:79:53:11:5e:bd:2e:7b:
80:cc:61:97:4a:2e:1a:7c:e6:2e:96:96:cd:e5:b9:
16:4e:e8:9d:5b:96:74:1a:81:34:a1:98:d2:24:dc:
87:df:93:5c:2b:93:a9:14:12:a0:97:9f:f9:a9:68:
ff:0a:dd:12:d1:63:e6:f6:05:1c:26:61:a8:6f:21:
dd:d4:df:27:e3:4e:aa:9f:bf:94:0a:84:85:49:3b:
74:67:72:15:83:c5:32:f4:32:5c:bb:a3:90:d3:7c:
b8:36:45:54:70:9f:5c:31:5e:38:d1:35:83:8b:48:
1e:c1:9d:f1:c0:91:ed:ef:f3:79:87:fe:7c:17:bb:
ce:09:12:76:c2:a3:62:c2:70:95:fc:4a:7f:4d:fb:
5f:90:99:b5:74:55:15:35:b2:11:cc:59:2f:fb:4c:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3E:8D:BC:00:63:23:60:08:FE:B6:6F:68:E4:9C:7A:12:5C:71:F1
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:df:38:1f:24:10:5d:22:44:16:ad:e1:0c:ed:62:95:71:31:
30:51:e7:81:7c:d2:68:c2:be:aa:7e:91:87:da:76:e4:48:75:
78:60:3d:0f:76:6d:05:d0:59:94:03:b7:ed:16:12:db:c2:d8:
60:e8:93:82:6c:ff:91:ba:2e:db:0e:b8:b4:49:4e:a3:76:8e:
37:9b:d9:c2:b7:2b:e5:32:be:e4:9b:95:4d:24:ed:63:47:86:
31:f7:88:76:3b:29:49:c3:d6:59:e1:51:83:83:02:87:34:d4:
d7:42:df:d7:1f:75:fa:49:22:25:84:53:63:3b:17:cc:de:9b:
99:14:21:fe:71:7e:a5:ec:c9:77:1c:7e:46:fe:3f:3d:68:a4:
35:17:bf:98:e1:03:49:c3:8a:a0:df:e4:1d:e9:1f:f5:7a:ae:
e6:8c:d8:c4:51:63:05:39:09:6d:24:f3:69:44:7c:df:70:08:
71:0b:1d:e1:f6:00:2d:4b:8a:6e:b9:ae:3d:35:cd:cf:90:b7:
bd:65:f9:62:79:ff:ed:6c:68:f5:fe:56:c8:71:0c:0e:4b:86:
e4:40:18:09:da:c3:8f:37:26:7f:9c:c7:5d:48:12:67:65:5f:
28:97:58:a2:ea:f2:a3:bd:52:51:c1:d0:28:46:64:a8:c4:56:
8e:c9:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:49:32 2025 by rpki-client