Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: fHt5F7HZ9okT4tG/WmF6lkXefr/8HaB+ZTyLMclxH1M=
Subject key identifier: B9:E3:B0:11:54:48:21:00:6A:65:BF:5E:69:DA:5E:18:09:DF:17:27
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 019689C9F62FCE4E162466F87EE46BD11EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 03:00:36 +0000
Manifest this update: Thu 01 May 2025 03:00:36 +0000
Manifest next update: Fri 02 May 2025 03:00:36 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: Ps6tNLwNCtx2Vdzb6k6uj7vQFccFJerDWv1wH7z5O+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:c9:f6:2f:ce:4e:16:24:66:f8:7e:e4:6b:d1:1e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: May 1 03:00:36 2025 GMT
Not After : May 2 03:00:36 2025 GMT
Subject: CN=b9e3b011544821006a65bf5e69da5e1809df1727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:e9:d0:d0:c3:cb:f8:9d:82:aa:77:75:41:
38:be:83:ba:03:c6:76:21:b0:16:f4:6d:0d:41:fa:
7c:12:24:0b:39:22:91:e2:34:18:37:5a:70:8e:66:
e6:6f:a0:98:39:86:0d:20:8d:a7:88:c0:2f:5b:28:
9f:a1:84:d7:09:39:58:66:c1:0e:52:e4:5d:ca:56:
96:4d:a4:9c:35:5b:5f:1d:27:bb:f1:98:1e:83:21:
ad:18:9c:bf:51:95:90:d9:6b:2e:ac:6f:de:c5:7c:
f7:8d:5d:00:35:52:4f:f9:2d:1d:8a:45:c7:a9:ca:
08:47:65:bb:ac:46:fc:61:6d:ed:56:19:8c:f0:e1:
30:cc:0f:77:2d:b6:65:9e:47:d8:b6:af:5e:6a:68:
23:21:c5:c1:be:23:17:b7:c8:f3:11:ff:e7:c1:09:
8f:ae:9d:e8:73:96:66:f8:4d:ed:f6:41:7f:c9:4a:
32:0b:a9:94:fb:a9:fa:63:54:1a:f5:2f:35:81:6d:
a1:34:23:64:9a:95:89:04:3b:b2:02:9e:f0:ca:ad:
c8:bc:a0:62:16:2a:51:63:2c:77:74:9e:e5:78:1a:
c9:0c:d9:b7:dd:6b:32:18:fa:b2:67:10:7d:6b:6e:
0c:5b:f7:b9:e6:93:a5:e8:12:81:c2:66:c5:1f:84:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:B0:11:54:48:21:00:6A:65:BF:5E:69:DA:5E:18:09:DF:17:27
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:36:c0:7b:08:d3:1d:97:dc:19:44:ae:c9:43:67:fb:09:81:
59:36:47:26:03:40:91:04:92:86:3b:17:9e:99:ab:61:1d:4a:
41:b9:af:1d:35:97:3c:82:12:75:d0:80:da:32:6c:b3:51:88:
88:87:48:ca:db:8c:1b:4d:d0:ee:12:8f:66:3d:cf:bc:66:f5:
51:65:5d:24:35:80:ff:9a:60:cd:88:9b:d8:66:30:99:ee:4a:
de:11:75:8b:b4:73:3c:d7:1e:1c:59:1b:18:53:0a:81:93:ca:
76:b8:22:74:c3:ce:3f:32:dd:05:62:58:3a:7c:07:d0:7e:b7:
01:66:88:a1:85:52:6f:1c:48:42:5e:09:66:11:34:d6:e5:42:
01:50:e7:fc:12:fe:8f:52:71:a2:61:51:79:5c:31:bd:34:57:
aa:80:35:12:87:7f:df:dc:eb:fd:c7:e4:1c:61:10:1c:d0:18:
e2:1f:a6:23:be:db:17:51:55:a2:9e:c3:44:22:f0:e6:7a:72:
25:89:40:c7:d3:36:79:a0:b6:cd:a0:74:83:29:7a:77:13:21:
f7:a8:66:33:be:6e:01:45:b1:47:47:63:3b:32:a4:b2:f7:d9:
3d:c6:e3:bf:0a:c0:f1:cb:59:7a:35:51:a7:d8:c4:65:e2:3d:
6c:6e:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:20:12 2025 by rpki-client