Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: LKBiPrqC5/+bJv51q8ETMyWkaQQDNEc2KkY8L8w4mcU=
Subject key identifier: 99:8D:AF:59:79:74:D5:88:72:36:24:21:C5:D8:03:A2:BE:A2:D1:D3
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 0196B4468E8A0562D35721256438C664728E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0CDC
Signing time: Fri 09 May 2025 09:00:44 +0000
Manifest this update: Fri 09 May 2025 09:00:44 +0000
Manifest next update: Sat 10 May 2025 09:00:44 +0000
Files and hashes: 1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: 4VMrXPNjBc9mvrOYLw080H7S+M+Iv8L3eBwFKFsBe3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:8e:8a:05:62:d3:57:21:25:64:38:c6:64:72:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: May 9 09:00:44 2025 GMT
Not After : May 10 09:00:44 2025 GMT
Subject: CN=998daf597974d58872362421c5d803a2bea2d1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:01:6e:97:80:3c:00:0f:88:b8:a9:e0:07:
b2:17:2e:54:be:70:9e:ad:81:ce:db:2b:96:21:11:
17:cf:3c:5f:83:43:8b:05:ac:11:4c:28:02:a3:39:
a3:85:c3:ef:1b:58:d8:e2:0c:c9:f8:da:70:03:35:
40:c0:f0:36:65:8f:86:0f:58:4d:80:a1:17:cd:5c:
b8:34:9d:21:2b:0b:e2:04:87:16:d1:11:0f:04:2d:
55:66:7e:2a:8e:af:30:6a:51:bb:1c:83:83:ae:64:
1c:c3:c8:04:92:1c:ce:4e:90:fa:69:30:22:2d:4f:
57:9e:40:13:bf:9d:95:03:45:0a:c7:48:02:e5:fc:
a2:4b:ae:f0:7a:0b:39:31:2e:f7:1a:a6:8f:e8:1b:
8e:ea:5b:78:4f:1a:b2:34:6b:63:61:0c:22:3e:e5:
d4:5b:e3:7a:c7:7a:76:13:8a:35:73:eb:44:2c:0b:
f6:4c:e7:5a:bc:0e:37:aa:c0:8e:4c:23:02:e5:b5:
8c:bd:47:1a:ac:c3:71:9a:ee:d9:68:c8:b9:fb:19:
be:35:c8:e7:49:7f:36:23:9e:36:d1:b5:73:2d:c0:
26:35:0b:23:da:b4:19:ee:09:69:d1:84:2c:9d:c2:
d5:8e:42:ee:1e:0e:a6:4e:10:a4:36:8d:d3:15:53:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8D:AF:59:79:74:D5:88:72:36:24:21:C5:D8:03:A2:BE:A2:D1:D3
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b2:01:02:bc:96:1a:1e:0d:a3:c8:8d:e5:89:19:98:77:7a:
69:8e:39:2c:c7:1d:cf:41:2e:ce:e7:6a:07:ec:1c:44:80:3d:
7e:c7:57:93:bd:7a:d4:de:27:ca:96:06:29:39:e1:97:ae:15:
06:a2:5a:ec:90:7c:77:fe:a3:64:c1:5c:31:6f:c7:4a:ef:3d:
1b:fa:45:53:3e:40:bc:ce:ea:a7:bb:9b:e8:7c:a2:74:0d:a7:
87:43:d1:08:5e:87:0a:17:2d:6d:2d:3c:47:06:f8:45:77:f8:
ee:c6:46:64:fc:e4:3f:64:43:f5:61:e9:84:7a:55:74:17:64:
9b:0a:f2:8a:8b:e3:08:75:d9:ba:4f:02:ab:f5:29:44:fe:06:
61:c7:5c:58:6e:37:e9:ff:6e:9a:b7:fc:67:6d:7f:40:39:27:
89:a0:a8:75:70:fd:e8:f1:a0:c2:38:8e:82:4e:fc:de:06:5a:
48:80:a1:c5:95:62:35:98:25:5b:41:31:40:b3:17:db:40:c7:
cb:0c:9f:f1:f7:8e:7f:e5:9a:da:70:4c:6b:bd:df:cf:89:fc:
42:8d:8f:61:d4:48:76:5f:9a:1e:8b:2a:5b:ff:a7:db:d1:4b:
d2:af:df:b8:67:b9:35:54:cf:b2:d6:13:5e:26:68:0d:71:60:
f7:6e:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:47:49 2025 by rpki-client