Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: q0D60RqMbW/JV7sUIT8Ay7+172dyyNFPlONGGcoCwVI=
Subject key identifier: 10:FA:69:3B:26:14:CE:5A:A0:74:34:EA:B1:9B:DE:C1:64:7E:69:0E
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 0196895C094A9A65105E9D72E1773894A1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 0D26
Signing time: Thu 01 May 2025 01:00:32 +0000
Manifest this update: Thu 01 May 2025 01:00:32 +0000
Manifest next update: Fri 02 May 2025 01:00:32 +0000
Files and hashes: 1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: u0xinuf3sRgJN/dvSFRNj2Kp9xxkOKXfZhfxxNYp9PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:09:4a:9a:65:10:5e:9d:72:e1:77:38:94:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: May 1 01:00:32 2025 GMT
Not After : May 2 01:00:32 2025 GMT
Subject: CN=10fa693b2614ce5aa07434eab19bdec1647e690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:fb:20:da:43:5b:09:dc:f7:4c:46:4d:0d:
d9:fa:80:0f:36:f0:8a:c3:52:d2:c4:df:fe:e5:1b:
b6:f1:f5:bb:28:7f:43:bb:5d:b8:60:d5:df:d7:14:
10:a4:45:fc:87:ba:90:ba:9f:de:cb:bd:ea:10:35:
18:05:41:79:c3:4a:6c:f2:4f:ba:47:93:e2:2b:de:
0a:a7:2c:e8:34:ca:c1:05:c8:b8:47:7b:65:71:53:
4c:28:f7:37:13:2b:91:42:ba:30:28:e2:0b:e5:28:
7e:7b:4d:24:20:39:f1:dc:98:0a:93:b1:cb:ad:92:
e2:17:51:3b:2b:a8:94:ba:ef:62:b0:32:79:dc:94:
6d:ec:9b:a5:bc:43:f7:f9:d8:03:f9:a9:6f:ee:44:
14:98:31:bb:11:8a:df:94:01:d1:22:c1:38:7b:c1:
d8:ea:63:8c:77:16:c3:20:c9:6d:0d:7f:5c:cd:dc:
98:31:e0:a3:56:ef:96:32:9a:47:8d:6c:f4:be:19:
1d:30:df:7f:25:41:e7:cb:c4:ab:ed:fd:84:0a:00:
c3:17:b3:18:fe:39:b2:66:0b:bd:7f:27:0e:47:5a:
f2:b6:82:f0:31:68:5d:6e:3a:4d:02:fb:62:db:a2:
34:86:77:6b:fe:3d:0a:ff:d1:44:9d:ba:5b:31:d4:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:69:3B:26:14:CE:5A:A0:74:34:EA:B1:9B:DE:C1:64:7E:69:0E
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:6c:a9:c2:03:bc:0d:3c:69:8b:24:6b:70:46:dc:3f:4f:
f4:37:17:e1:91:3d:0e:71:8b:6b:64:ff:bc:eb:74:f3:ae:45:
7d:d3:a8:d8:40:6a:41:e2:26:db:c1:ff:89:40:d0:35:86:69:
b3:78:a4:6c:32:8c:01:3d:88:5f:d5:d4:2e:f9:1e:2d:ad:94:
24:d7:57:cf:9b:96:4a:c6:6a:63:69:3b:74:8d:a2:fb:1b:08:
9f:6c:3d:10:55:62:8d:90:6a:bd:cd:3b:65:22:ee:f9:54:31:
58:e8:ec:37:65:7b:3c:41:08:15:be:53:b2:ed:66:f6:bf:d5:
77:02:19:39:65:c2:b2:0c:8a:fe:18:e2:5b:af:4e:56:d7:65:
53:65:c0:1b:16:1d:5b:56:ad:f1:c4:65:19:93:dc:da:1b:2d:
41:96:76:c1:d9:c8:44:31:7d:df:eb:c3:f3:be:8e:69:53:4e:
88:f5:84:d3:24:05:de:87:7d:a7:71:1a:c9:21:b3:ec:d8:ed:
b1:92:84:d5:c1:54:37:22:2c:d6:18:08:62:f7:1b:71:4e:1a:
96:16:78:27:89:51:53:79:02:7a:b4:ea:82:4c:8c:c5:2f:b9:
17:c0:fc:2d:b3:a0:01:91:97:3e:55:ea:48:78:d5:e0:be:52:
38:4b:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:18:55 2025 by rpki-client