Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: 8R0pINXDbqn7H8HSfeKn685uihD0ym2pU7oO2sCd5iE=
Subject key identifier: 45:1D:04:60:F2:ED:44:FC:45:A3:B5:CE:C8:62:ED:8C:D2:85:7B:0E
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 01965B039870A39FB3C6AD743B252C7C7AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 04CA
Signing time: Tue 22 Apr 2025 01:01:24 +0000
Manifest this update: Tue 22 Apr 2025 01:01:24 +0000
Manifest next update: Wed 23 Apr 2025 01:01:24 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: PA/mF0yW8J3/CLQGOrFUZj6r4aqQuFKPxrspSM8TUGs=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:98:70:a3:9f:b3:c6:ad:74:3b:25:2c:7c:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Apr 22 01:01:24 2025 GMT
Not After : Apr 23 01:01:24 2025 GMT
Subject: CN=451d0460f2ed44fc45a3b5cec862ed8cd2857b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:7c:9c:2e:5e:68:40:c1:5f:df:65:1b:65:
8a:fd:17:a0:87:8a:91:b5:f9:2d:50:3b:36:e2:19:
d9:43:74:20:65:a7:a9:e8:7c:9e:0a:fc:e8:6c:09:
d3:0d:10:af:a3:5b:ae:3e:5a:1b:dc:c5:66:9b:26:
b4:93:a0:92:67:5b:cd:ae:63:55:b5:dd:d3:5f:86:
13:65:b8:46:9f:c1:da:38:47:eb:32:f0:2a:d8:dd:
49:29:07:93:8c:fd:25:bc:40:77:5e:82:d5:4c:b8:
a4:53:30:7a:15:b3:2a:39:36:c4:96:a4:c5:8a:f9:
81:21:e2:7d:92:8d:6a:79:6b:a4:f1:a7:1d:39:cc:
a0:2e:44:72:8a:48:60:d9:d3:8d:23:09:87:9d:c9:
26:51:bb:fb:ea:43:b4:6a:8e:73:bb:8d:9b:49:39:
e5:64:1a:6b:e0:f9:8b:90:23:a0:3c:fe:01:5c:e4:
8a:58:ea:28:d9:c2:7c:16:b3:91:82:e4:fd:ef:c1:
de:55:42:d9:f8:4f:34:04:1f:a9:0c:9c:c1:10:2b:
a7:40:5a:74:a0:db:09:55:45:b3:f5:f9:64:5e:11:
bb:42:2e:80:3c:87:a5:10:b8:65:d1:cc:5a:5f:fd:
97:fe:67:ec:43:bc:c6:6e:ff:36:43:ff:3e:7e:37:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:04:60:F2:ED:44:FC:45:A3:B5:CE:C8:62:ED:8C:D2:85:7B:0E
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:e8:fd:64:9b:ee:dc:23:67:3c:04:a5:dc:12:ce:ce:a9:
34:6b:e5:4e:bf:70:6a:03:6d:5a:dc:4c:d8:c7:eb:24:d0:85:
e9:68:a9:e4:12:56:81:9a:e0:be:fd:6b:e5:45:b3:92:22:86:
73:f9:cf:85:f1:09:89:db:c1:a8:02:5d:00:1e:ec:4e:d1:9c:
23:ba:10:bc:d2:ca:bd:30:3f:f2:ab:13:41:f8:f4:70:cc:2c:
12:63:44:d7:3f:af:7e:f6:8f:02:bc:21:a3:8a:ae:b5:a2:9f:
52:7a:61:21:c1:d3:09:54:49:1a:d0:cc:4f:4f:35:ae:87:8f:
e4:4a:3d:28:cc:d3:3a:5d:af:96:d2:79:9f:b3:7c:01:72:bf:
50:42:bd:6b:8f:0f:5c:ec:fb:f4:c6:bd:0d:54:1b:69:c4:bb:
e0:07:b2:f4:d9:cb:77:97:06:20:09:26:52:b8:d3:d5:0f:d9:
4e:d0:af:0e:91:2f:6b:4e:90:00:6c:31:5c:fa:bc:a5:62:83:
4b:cf:3d:76:a0:2b:a1:2b:28:a2:cb:31:17:8a:1f:9d:c8:04:
0d:21:5a:72:da:6c:b8:69:a8:a3:f7:8a:6b:cf:35:10:09:15:
32:73:1d:6e:b8:3c:b8:26:19:90:f8:38:3e:98:aa:48:db:87:
80:53:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:40:34 2025 by rpki-client