Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: gPRIYexyLyxnm7Fb4hD78Wnr+GgQG8T8BQxcX1Jvjgg=
Subject key identifier: CB:09:4E:7D:E3:1D:EF:41:10:84:4F:64:E0:59:4A:85:B4:7F:FA:D4
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019655DD1290CAFA55E2B74E7B925ABE9C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 01:01:13 +0000
Manifest this update: Mon 21 Apr 2025 01:01:13 +0000
Manifest next update: Tue 22 Apr 2025 01:01:13 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: +/tKRLRuJ88ub1njT3wQVLbSLfRPSP7UBoTtPdv8418=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:12:90:ca:fa:55:e2:b7:4e:7b:92:5a:be:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Apr 21 01:01:13 2025 GMT
Not After : Apr 22 01:01:13 2025 GMT
Subject: CN=cb094e7de31def4110844f64e0594a85b47ffad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:f4:2f:4b:0d:d7:d9:ac:88:5d:6d:f4:20:
6d:9f:31:32:6f:29:3f:bb:7f:de:03:40:73:c4:26:
e0:4b:cc:46:a2:3d:da:2d:bc:ee:23:6c:aa:57:34:
c4:53:7a:e6:be:ad:7b:99:f9:63:93:89:ca:af:da:
0c:38:e2:59:36:00:a2:5a:5d:cb:e7:46:6d:87:93:
45:06:4f:5f:58:1c:b4:cc:2c:89:5e:15:a9:c6:42:
20:69:3c:2a:05:1c:e6:e8:30:fc:e4:b9:55:fd:98:
14:ba:9f:ad:0f:45:b2:55:41:a5:42:c7:7d:e8:4c:
a7:20:c2:ed:da:32:0d:47:8d:62:00:e0:5f:25:a5:
fd:a3:5b:40:e1:5e:51:9c:27:2b:f0:13:f5:fb:7f:
6a:e7:7a:71:ac:8b:6f:2a:f5:e9:d4:6f:85:8d:42:
c7:d6:28:18:ac:94:d4:7e:5b:1a:68:28:56:09:62:
6d:82:3c:b2:b9:33:99:8e:a1:85:fa:e7:3f:95:21:
c0:da:f7:e7:8b:02:ea:69:fb:b6:5f:65:23:2d:89:
e7:96:93:a6:a0:6a:36:b9:e8:72:5b:83:c5:87:82:
3d:d9:b7:9d:4b:49:f4:6c:3f:c2:c6:b7:54:34:95:
5e:f8:43:df:90:2f:0b:a0:26:33:c6:3a:a1:69:99:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:4E:7D:E3:1D:EF:41:10:84:4F:64:E0:59:4A:85:B4:7F:FA:D4
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:48:fe:69:07:bd:2e:84:9e:f3:78:6b:77:b4:2f:cf:9f:
b7:68:c0:19:7c:c0:58:7e:ae:50:d1:e1:38:26:49:2c:50:1d:
cc:da:e1:97:bc:00:cb:25:aa:da:b3:65:eb:e4:4f:7d:dc:21:
10:b6:b4:b3:a9:8e:c4:12:22:12:ce:fc:d8:00:e9:8b:1a:76:
e7:6c:ea:77:f1:9c:0c:28:71:7c:9e:27:8a:b7:a8:3b:9f:02:
6b:10:98:28:b9:09:c6:d5:c4:e9:48:fc:4a:97:20:ef:f9:3c:
da:8f:1e:9b:ad:fb:01:8a:ff:a3:c0:97:e9:4f:7f:18:db:16:
19:37:1f:ab:a1:01:86:e8:24:0d:aa:2b:46:38:0c:fd:40:d0:
f5:d8:c1:0c:35:26:a2:7b:a3:34:cf:8b:25:f9:b6:73:29:30:
50:3c:e5:b2:8f:52:65:de:af:75:d4:79:98:c0:cb:a3:6a:96:
a4:b7:e1:77:7b:c1:89:65:12:68:a1:2a:84:50:e1:c2:ef:8c:
cb:06:cf:1e:29:67:a6:43:fa:f3:0f:8a:75:b7:4e:60:f5:c4:
b5:7a:23:1c:1e:90:d0:4c:6c:a3:18:ac:08:f0:a7:8e:15:6a:
7a:85:18:cb:30:34:4f:33:a0:4f:19:5a:22:31:b3:81:15:1b:
06:37:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:37 2025 by rpki-client