Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: FnuDqb/FqOD4En+OTjQUJQT4Uj6UCmp8VcSICD3y9Is=
Subject key identifier: 1C:7F:C6:7F:58:A1:5D:81:57:49:DC:09:C3:7B:66:47:C1:37:4F:B0
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 01968ADC3ADF5F171C0E1615C5A54A357EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 07E7
Signing time: Thu 01 May 2025 08:00:10 +0000
Manifest this update: Thu 01 May 2025 08:00:10 +0000
Manifest next update: Fri 02 May 2025 08:00:10 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: jm1WPkZBuAtNFpulNsubSdj4CrHScn7RXY48iutFqmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:3a:df:5f:17:1c:0e:16:15:c5:a5:4a:35:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: May 1 08:00:10 2025 GMT
Not After : May 2 08:00:10 2025 GMT
Subject: CN=1c7fc67f58a15d815749dc09c37b6647c1374fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:fe:f4:61:6b:aa:a8:39:37:88:a9:34:e9:
64:a7:00:ff:f7:b2:6f:ee:75:65:c9:ca:d7:d2:d6:
57:8d:34:c1:9a:98:b6:0b:0a:97:44:60:37:53:25:
f3:17:7f:b4:08:9c:c6:ed:fe:a9:c4:60:28:d3:d7:
1d:61:d4:67:01:d6:ef:83:1f:7f:cc:b3:46:21:2d:
2f:a4:49:38:4f:19:f1:b3:3a:40:45:90:5b:42:36:
9c:65:29:44:c2:3d:02:6f:38:a4:cc:b2:3c:24:e9:
b3:b7:e8:f4:9f:f1:ba:28:d9:06:f2:a3:3a:7e:07:
a6:c2:85:73:42:96:f3:cb:64:4b:ab:75:d4:0f:b8:
a1:59:8c:1a:4c:95:2e:59:19:7a:5b:ac:b4:8c:e6:
4f:cc:93:dc:93:71:90:d2:24:ff:67:1e:81:01:f9:
83:d4:05:56:fb:dc:03:92:e1:75:df:45:10:e1:a3:
d7:e7:9c:e2:fc:b9:13:ed:7f:d1:04:f8:9e:20:31:
46:9b:6e:f4:5e:cb:12:36:22:a0:7d:3a:89:39:43:
da:fc:5a:4b:e1:ee:1b:7d:d7:2f:46:f6:09:23:09:
6f:71:8f:bf:4e:45:07:7e:43:6b:0b:f8:87:f9:20:
21:71:13:47:96:08:6a:a6:e3:24:f1:d1:8a:29:97:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7F:C6:7F:58:A1:5D:81:57:49:DC:09:C3:7B:66:47:C1:37:4F:B0
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:86:97:99:96:81:e2:ff:09:3b:10:41:1d:21:a6:72:42:9a:
77:4d:18:96:38:7d:b3:c6:10:70:97:75:28:0e:e7:1c:09:04:
e6:c2:29:d7:f0:04:fb:c4:85:d6:95:f2:63:d6:14:67:ca:e4:
64:b1:5a:6c:d7:c9:cd:64:e4:f5:02:bb:d0:97:98:6f:ad:50:
b8:c0:55:e8:e0:2b:6c:df:76:d9:28:c9:17:46:d0:da:ab:29:
d0:8f:42:1a:fb:04:6d:cf:ae:e8:2f:11:0b:a1:5f:45:8a:f0:
04:45:1b:f0:d8:39:4a:42:b8:de:64:ad:df:be:14:5b:34:06:
d0:d3:5d:6b:89:d5:e0:dc:0d:fb:f0:45:9a:20:c1:f4:11:7f:
2b:26:a9:31:d8:1c:23:c4:fc:9e:3d:d0:6c:ef:7d:8f:a6:4c:
ac:32:2a:6c:91:7e:62:aa:29:72:b0:8b:e0:74:b0:13:4a:8a:
7c:4b:e2:ff:91:49:8f:0b:71:f5:e8:58:51:5e:ea:bf:5b:ff:
47:3e:71:d6:d0:e1:0f:23:2b:d0:8c:39:2a:5b:7b:d1:8e:98:
d8:28:77:bf:7f:c2:e7:8f:f3:a5:43:b1:89:fb:60:08:5a:9e:
fc:4d:d3:9b:ce:b3:95:97:76:64:7f:4b:83:84:1e:fb:08:5e:
29:e3:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:45 2025 by rpki-client