Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: DBeRDAC7Xqz/gzG5X2HSniBA7q0kuHLcP3BOHHZ+d1o=
Subject key identifier: EF:21:9C:82:7B:CA:63:C9:A1:B5:25:D3:27:8F:CE:F6:2E:42:16:D9
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 0196586F5183671872AB93495399AA635B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 0F70
Signing time: Mon 21 Apr 2025 13:00:12 +0000
Manifest this update: Mon 21 Apr 2025 13:00:12 +0000
Manifest next update: Tue 22 Apr 2025 13:00:12 +0000
Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: dwfmeXYC1UL3InAzlC3lVIUSDT3tsEc3/p4M8WBtTbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:51:83:67:18:72:ab:93:49:53:99:aa:63:5b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Apr 21 13:00:12 2025 GMT
Not After : Apr 22 13:00:12 2025 GMT
Subject: CN=ef219c827bca63c9a1b525d3278fcef62e4216d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0c:64:6a:87:96:22:40:0f:a3:9a:81:10:87:
65:12:a7:75:e2:8b:6b:bd:63:23:77:59:7c:93:73:
7f:53:de:5a:21:9d:f0:5e:ac:93:82:65:69:13:ac:
6f:5a:e1:3e:3d:39:2a:59:7d:0e:ef:f8:5b:ef:b6:
a4:44:90:74:35:22:8f:2f:b3:b6:3c:44:0a:37:43:
a3:9f:8c:9c:ea:c5:a1:4f:77:8d:12:61:dc:b2:5e:
ce:db:84:b5:2a:bf:b6:8e:ae:36:dd:ac:c3:9e:b8:
f8:e4:4e:07:a6:a7:fe:ac:79:81:2c:35:eb:69:bb:
d0:34:6c:6d:8b:25:24:2d:d1:5b:69:f1:b2:63:30:
66:0b:27:50:5f:fe:38:09:e7:8f:dc:3d:2f:37:fa:
ff:77:9c:cd:7e:fe:e6:ed:95:6e:09:70:7f:d6:ca:
32:75:b5:14:09:02:5d:5e:20:e2:35:6d:f0:05:ab:
54:b2:16:39:8a:c1:16:07:92:e3:b3:98:3f:fb:71:
d4:23:15:a5:d9:16:44:6e:86:0e:44:2e:67:43:e0:
22:63:07:65:94:49:f1:62:d8:df:98:eb:29:ae:8a:
9a:16:f7:00:bd:09:59:7e:26:cc:cd:dc:ca:dd:d2:
b1:c5:a3:07:67:b9:60:66:38:d7:24:51:26:63:1d:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:9C:82:7B:CA:63:C9:A1:B5:25:D3:27:8F:CE:F6:2E:42:16:D9
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b4:8e:9d:a6:b9:94:11:15:a9:69:1e:99:14:3d:92:a7:d5:
c0:6b:7c:fa:52:91:54:ac:ad:8b:eb:11:05:f5:76:a6:22:0f:
e9:73:f3:0e:3d:42:55:3f:85:fa:7c:89:b2:f7:2d:bd:68:85:
3f:ee:c1:c6:20:82:81:14:7b:07:0c:3b:3a:a8:b2:83:e3:98:
b5:26:01:4d:86:ae:14:a3:06:9a:72:ba:29:13:91:45:6f:2a:
b4:18:50:55:bb:c4:fb:bb:e4:78:86:b0:b7:ad:e7:b4:e1:0a:
55:d3:11:4a:4d:70:07:d7:72:30:ae:b7:0e:4d:42:af:16:47:
66:19:56:3d:06:9a:32:5e:87:74:10:4b:be:71:81:66:74:6b:
8a:82:c2:4a:d7:de:d2:56:45:6a:a0:a3:ed:35:a9:2a:9b:fa:
90:a6:1b:99:ca:06:de:48:06:29:0d:62:e9:7e:99:04:15:5c:
ad:8b:8e:ea:30:a2:1f:3e:a8:d2:be:3d:67:90:71:1e:59:ff:
e1:93:c7:c1:dd:2a:38:97:a7:4a:01:c3:85:12:95:05:61:d4:
de:df:1b:56:a3:bd:9f:e8:7e:7f:35:9c:27:9a:78:5e:f4:3c:
5d:21:b2:96:7d:af:87:78:cd:c2:05:1d:fe:90:73:a4:0a:4d:
50:0c:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:32 2025 by rpki-client