Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: G9Bdz4XCbIzSWexpA0RnPHaxwzrHNRrPU3bmmNC1IGI=
Subject key identifier: BB:AB:96:06:07:2F:50:8D:1C:83:29:BC:D5:2C:18:43:A1:DE:32:A0
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 01968F5E4C317B49B1E41F19C4A947DBE06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 05:00:43 +0000
Manifest this update: Fri 02 May 2025 05:00:43 +0000
Manifest next update: Sat 03 May 2025 05:00:43 +0000
Files and hashes: 1: JDEgNxAB09AUh6owQNZeZtBtGuM.roa (hash: mbF3wS/KwnnaSKoNDphyfrKVcXZhcSZyXmhtgyyil/4=)
2: h9QHPHPgriAH9IrwluwQdT3LGdE.roa (hash: Tqsnz0XXMc5csYtxxzDh5cjERR+4yLVbUs/Q+m4fJwI=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: QykEQRsrZmawLnbTNbtIj9ujN/4fNXoOVNU9USXsUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:4c:31:7b:49:b1:e4:1f:19:c4:a9:47:db:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: May 2 05:00:43 2025 GMT
Not After : May 3 05:00:43 2025 GMT
Subject: CN=bbab9606072f508d1c8329bcd52c1843a1de32a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:2b:b6:be:09:26:b1:82:fe:7b:57:28:af:
b9:1a:1c:fc:b0:ae:09:45:5a:ff:de:22:6b:a8:2d:
42:29:90:3b:b4:6b:97:b4:67:fe:c3:9e:59:cd:d9:
b2:31:57:a5:3c:55:71:07:94:1b:c7:d7:a1:17:ca:
4d:0e:43:7c:89:80:88:e4:e8:56:a0:e1:3c:e9:b2:
1b:1b:c1:3f:8b:3d:11:4c:7f:d9:58:35:26:9a:c2:
2b:4f:c2:30:66:25:c1:88:cc:ea:e7:7f:58:70:b0:
2c:d9:dc:e9:47:eb:58:af:17:2d:d9:61:96:7f:93:
25:79:54:94:ee:82:6b:a0:d5:4b:ec:b9:f6:cb:69:
4e:f5:97:96:eb:a1:36:1e:d7:a8:fc:ab:41:b4:00:
a3:56:80:f0:a9:11:2f:91:7f:e2:6c:47:98:5c:f3:
3f:de:ba:d1:b5:94:23:f4:ac:07:ef:55:b5:42:81:
f3:8b:d6:9b:a8:4c:33:66:63:f0:cc:79:c1:e2:f8:
67:92:8a:d2:eb:37:c6:84:02:b4:a4:f0:61:9f:75:
45:bc:f8:61:84:10:3f:11:9e:7c:2d:d6:9b:4a:14:
04:25:fc:02:3d:82:c1:5c:8b:1d:3f:3e:7b:b2:cb:
43:f9:9c:e5:e2:d9:6b:a3:b8:f7:1c:1f:54:a7:45:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AB:96:06:07:2F:50:8D:1C:83:29:BC:D5:2C:18:43:A1:DE:32:A0
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:f6:1a:1e:0f:54:3a:4b:e4:75:cc:59:2d:bf:49:fe:80:
c6:56:94:35:64:ab:0b:d3:92:4e:10:a2:4b:4b:fa:4d:3b:8e:
bd:af:c4:a4:a8:6d:f5:ba:57:a4:e9:ab:51:00:79:f5:19:57:
a8:46:8f:b5:b7:2e:23:ca:e9:72:74:da:9b:6f:18:d7:af:64:
c9:80:9d:a9:c8:60:62:34:47:02:bf:d7:f4:ea:eb:e3:0a:57:
0a:0e:94:b2:d6:b8:49:d8:45:d6:78:95:2c:f0:98:31:20:94:
04:07:cc:35:c3:da:69:a1:42:14:0c:b5:05:80:01:14:bb:b9:
22:55:5d:c0:ce:1a:04:25:e6:e7:f8:c5:d8:f0:fa:bf:11:6e:
69:ef:3e:ca:9a:6d:f4:35:58:8d:36:1e:b0:a6:ba:f4:f5:b7:
d2:4f:41:ba:69:50:e0:27:58:d6:4b:4c:a0:39:63:77:e4:d2:
2b:5d:9d:5e:0e:bb:cf:02:51:d1:ba:b8:df:2e:54:b2:fe:d2:
e6:c1:7b:b1:ea:66:62:9b:27:a9:40:6e:37:ad:ee:39:ef:77:
da:3e:bd:3b:8d:db:ce:ba:7b:a6:e4:b2:0c:46:cc:71:16:53:
ed:8e:1e:c3:3e:5e:a1:fd:f5:eb:83:03:db:f6:c5:6d:ed:9b:
c4:fd:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:29:49 2025 by rpki-client