Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: pjHsjtjUpXI930y2257he4wNgru/3Xaa05SP4hj6KG4=
Subject key identifier: 9A:DB:CC:DF:EB:A4:AA:D6:58:F4:58:A7:A5:82:5F:FD:AB:38:9E:8C
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019601F69102CD49D8B735DF8FBE9203C1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0D81
Signing time: Fri 04 Apr 2025 18:00:58 +0000
Manifest this update: Fri 04 Apr 2025 18:00:58 +0000
Manifest next update: Sat 05 Apr 2025 18:00:58 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: SV+7r28OifUiLZfA+n4B3toctgQr0RTjzuUAjxmGpuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:f6:91:02:cd:49:d8:b7:35:df:8f:be:92:03:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Apr 4 18:00:58 2025 GMT
Not After : Apr 5 18:00:58 2025 GMT
Subject: CN=9adbccdfeba4aad658f458a7a5825ffdab389e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:b6:e9:df:45:35:66:38:45:c7:35:a9:02:
68:ca:32:99:2e:88:b4:d8:0e:21:ea:1d:a9:38:a5:
0b:f7:73:1d:de:37:13:d7:f2:a7:26:31:ff:df:9a:
71:9d:76:d3:03:26:5c:7d:ec:56:0b:30:2b:70:a3:
e3:26:09:73:ed:b5:a8:75:69:a4:3f:bf:9d:35:36:
3c:e2:86:1a:dc:79:1d:13:22:5e:c9:74:bf:e7:01:
bc:bd:60:30:bf:4a:a5:e5:6f:cc:23:2f:ce:9d:d3:
cd:b1:3a:43:b6:7d:77:85:76:71:ec:12:8b:f9:1a:
dc:ef:ae:a2:c1:96:02:55:aa:29:3e:7e:e7:7a:9c:
e9:37:86:7b:9d:a4:db:46:2f:d8:fc:29:3e:0e:fe:
85:43:f5:32:f5:e0:9f:58:15:09:41:f8:09:72:9d:
a7:8a:ec:4b:88:fc:78:bb:73:d0:f7:c1:c9:92:36:
60:27:1f:85:b1:64:57:23:6a:c5:67:77:c2:ba:2a:
3a:78:7d:86:33:9b:77:97:58:6e:db:79:e9:b4:4c:
f8:aa:68:1f:d5:d9:ec:24:79:55:b1:47:41:80:03:
18:ca:f2:9d:13:20:79:4c:be:96:2c:30:39:7b:ba:
4d:97:f9:78:e0:06:c3:29:03:bd:1f:dd:21:bd:e7:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:CC:DF:EB:A4:AA:D6:58:F4:58:A7:A5:82:5F:FD:AB:38:9E:8C
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:66:eb:5b:fa:e6:7f:b2:09:53:92:fc:e1:9c:ab:76:c9:46:
ec:d7:84:95:0c:3d:17:f2:c5:dd:ef:50:b9:17:9e:43:6c:55:
db:c9:31:0b:ec:5f:48:aa:00:03:fe:e0:29:af:4d:8d:95:87:
11:5c:6e:a3:b5:cf:f8:a1:9c:a6:04:4c:2c:6f:b4:f4:9a:6b:
a1:b1:d1:54:01:a3:0f:4d:58:d6:3b:5b:a6:5d:52:68:2b:83:
d5:9f:2e:7f:14:85:8c:a6:e6:87:09:61:88:74:61:ef:fa:eb:
a1:98:bd:8e:a9:79:f0:56:6e:11:03:34:b5:04:58:dc:07:88:
5b:7a:dc:06:1f:f6:53:36:5b:66:da:97:b9:17:8c:f9:56:f1:
43:7b:f6:99:29:0e:85:dc:db:46:cb:8c:43:20:b5:6b:03:19:
a7:30:44:0b:bc:be:f0:ae:59:27:c5:bc:16:83:1b:e2:83:13:
78:f3:6f:c8:7c:c5:36:c6:b9:9c:ed:75:01:08:a2:9e:9b:d2:
fa:f0:fd:dc:05:7b:8c:72:8d:a3:44:ee:cd:d0:4a:98:29:e0:
c3:a1:1c:0f:27:33:91:ec:3c:55:cc:5a:c0:10:55:ac:b0:62:
30:27:cc:59:ee:e7:d7:e6:e3:d3:ac:44:b0:40:b0:bc:0f:f6:
b2:a1:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:28:34 2025 by rpki-client