
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: rtMHVDMDHqy5jNIpIo2jwNDKBPCJX8Bh9Owo+KhLXYE=
Subject key identifier: 25:D0:E5:D5:D5:15:3F:F7:9C:0C:17:83:55:41:DF:00:02:D4:04:3C
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0196925FA69196D47844990AE801F46B167B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 19:01:04 +0000
Manifest this update: Fri 02 May 2025 19:01:04 +0000
Manifest next update: Sat 03 May 2025 19:01:04 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: SNhkabAMYW5ngSNYDQl+9znFfOaPd/7fZgJWxggBSLE=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:5f:a6:91:96:d4:78:44:99:0a:e8:01:f4:6b:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: May 2 19:01:04 2025 GMT
Not After : May 3 19:01:04 2025 GMT
Subject: CN=25d0e5d5d5153ff79c0c17835541df0002d4043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:d6:27:dd:6e:f2:23:71:a7:00:ec:77:28:
9f:68:b6:ac:f9:d4:80:b5:29:b2:9c:b9:39:9c:51:
da:75:9f:5f:0b:52:39:68:4a:ec:82:53:b8:61:43:
d8:7a:66:4e:96:98:26:40:1e:fa:e6:9f:04:0f:14:
37:71:ed:43:04:73:69:61:6f:ad:d2:4a:b4:ac:77:
d0:48:52:29:f3:1d:97:b6:55:b9:be:b0:53:30:ec:
02:32:ae:a5:ee:90:c5:d3:f6:26:83:43:dd:f9:a8:
74:04:ee:c1:75:2f:4f:1f:86:2f:1c:88:e7:f3:8c:
e6:08:5a:76:c2:7e:3f:3d:83:ac:33:57:6e:f9:c4:
fd:87:28:f8:69:8a:a4:42:f5:de:bd:71:a5:8f:98:
3d:a9:a5:71:92:76:07:d8:f4:36:20:d4:81:01:db:
2d:f5:1f:c9:88:f5:7b:47:7a:0b:b4:9c:1b:1b:f5:
f0:01:4d:aa:58:8b:8a:e3:51:12:13:9b:8a:14:26:
d8:c9:a9:c7:c6:34:f3:f7:8b:57:73:82:7c:32:b5:
1b:8b:17:fa:d1:d9:ae:f0:42:f8:ef:5f:a7:fb:eb:
03:d7:23:3d:fb:3d:a2:23:a7:20:2d:95:c7:46:ea:
31:99:b1:8e:fb:5c:9c:9e:b8:e6:a3:72:0c:70:3f:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:E5:D5:D5:15:3F:F7:9C:0C:17:83:55:41:DF:00:02:D4:04:3C
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:5c:d5:5b:89:3b:98:eb:c0:42:d6:4b:e1:09:5b:ab:85:
12:8b:a6:20:d9:57:e1:3d:20:f9:a3:0a:82:37:34:9b:48:6d:
12:c5:cb:4a:11:3b:32:36:c9:3d:70:8b:12:4c:af:9c:14:e4:
e8:46:f4:77:a4:7d:14:83:c2:fc:32:e8:26:ef:17:2d:e7:51:
ba:e7:af:6f:d6:a8:5a:01:52:ff:bc:13:93:dc:80:c3:ce:3a:
7a:d7:48:5e:6b:9e:30:16:64:60:58:e9:ae:58:78:55:79:62:
1a:63:3a:69:ec:52:42:a4:be:14:59:a2:63:37:67:78:9f:22:
f8:e6:c8:67:09:2b:56:f1:bb:59:78:6a:dd:99:9f:47:ee:42:
f4:4a:2e:ea:64:07:f1:d9:5d:c5:a4:ed:f3:bf:97:06:6d:3f:
9b:58:ad:8b:8d:80:b6:3f:f5:8f:ca:e9:9a:48:9b:3f:09:6d:
2d:d3:84:50:95:9f:ca:9d:bd:84:cb:a2:ed:a1:60:3f:3b:2b:
1e:9f:bd:e7:ee:ce:5e:29:5f:32:9f:74:15:f2:7f:e8:e8:de:
72:76:61:2d:31:5a:ed:a6:99:e6:7b:bf:6f:af:4e:4e:92:74:
ef:b4:e9:fb:50:f5:ef:d8:79:bd:60:20:4d:c9:94:b7:78:fe:
43:de:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:57:12 2025 by rpki-client