Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: da6ZQUXcj01w6uGn9DLOwuAKybKEk9hwbBaMRKbH34Y=
Subject key identifier: 41:A2:EC:B4:BF:BA:71:B5:0F:7D:AA:9C:9A:20:DD:DE:65:F4:80:78
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 0196594B204F093489A3649690BAF0A4C93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 012C
Signing time: Mon 21 Apr 2025 17:00:17 +0000
Manifest this update: Mon 21 Apr 2025 17:00:17 +0000
Manifest next update: Tue 22 Apr 2025 17:00:17 +0000
Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: V+LUzMORHBypptNv/klTMoVqS4SjX6iE+XIhMw3G3k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:20:4f:09:34:89:a3:64:96:90:ba:f0:a4:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Apr 21 17:00:17 2025 GMT
Not After : Apr 22 17:00:17 2025 GMT
Subject: CN=41a2ecb4bfba71b50f7daa9c9a20ddde65f48078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:75:e5:7b:dc:cb:16:d4:bf:be:54:a5:77:
1c:22:cd:4e:47:80:8e:98:f2:88:16:ff:af:39:0f:
a1:a6:a0:84:f9:6e:bf:a5:9c:3b:50:85:9a:0f:cb:
c8:8c:66:aa:67:e6:19:90:df:71:93:27:43:ff:05:
84:4e:f3:0a:94:c4:27:2f:93:45:66:b0:03:eb:08:
0e:27:ee:7b:3c:1b:e7:7a:51:76:1b:42:ed:c9:50:
ff:50:f6:47:12:85:6e:6c:eb:8c:de:d8:c1:47:d3:
78:e1:f1:1e:8a:d2:82:42:6f:d0:3b:d2:3c:b8:70:
b2:ee:7c:bd:ac:3b:56:82:9d:8a:c2:0e:a3:0f:49:
6b:f6:3b:71:05:25:17:3b:b6:d6:f3:cd:15:d7:3e:
05:ac:a5:56:74:bc:20:29:73:6e:c5:32:d8:24:d1:
94:19:23:42:27:58:1a:ee:41:85:62:94:54:4b:e3:
f4:a7:a6:37:b3:e8:7d:13:2b:e2:53:81:d4:43:dd:
fe:6b:9f:14:10:be:a6:18:18:74:86:58:dd:c2:d2:
39:3f:3c:2a:ad:e5:4e:ac:6b:c6:3f:84:72:a4:df:
4b:f6:a3:fa:24:11:81:93:6d:53:8d:44:04:a3:7b:
2d:27:69:0e:35:0c:bb:6d:30:e0:54:fc:94:7b:5c:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:EC:B4:BF:BA:71:B5:0F:7D:AA:9C:9A:20:DD:DE:65:F4:80:78
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:60:4c:8c:3b:23:37:9f:00:45:c7:71:04:48:81:4a:6f:18:
80:f8:98:4b:de:1b:7e:08:f3:2c:d7:50:a0:98:56:aa:ac:63:
4f:2a:5b:0c:2c:54:b9:07:a6:44:13:05:60:da:2c:93:b4:84:
22:3c:11:79:96:5c:ed:0b:a3:0d:dc:24:1e:6f:be:08:d8:f4:
92:0d:77:69:b7:a5:2e:8f:79:a7:4f:a4:4a:fa:6c:0c:c9:6b:
da:9a:b1:1c:b1:90:90:d0:66:30:89:3c:bc:7a:7b:02:74:6b:
25:fe:a8:b7:c0:98:d7:c1:b5:6f:32:be:ad:7d:6f:ea:5f:28:
00:f1:53:47:d7:86:f0:50:a1:21:0e:2b:e0:fe:69:79:03:49:
c6:2b:8c:89:f2:33:e9:9e:3f:74:f6:e3:9e:37:d4:55:0b:dc:
5d:47:ab:0b:ff:a8:c2:46:90:14:c2:70:28:70:62:74:5d:7f:
d5:96:d6:3c:32:af:19:a2:37:0f:4e:81:57:ad:99:fc:f3:ca:
3f:6c:fb:bf:fe:5b:0e:5c:91:02:c9:e1:65:82:0e:6b:8f:11:
69:1f:9d:5d:ad:f9:e2:94:92:c3:74:e1:82:96:30:3e:eb:55:
4f:a1:70:74:3d:e8:13:a7:1e:87:8f:41:0c:2c:98:05:57:7e:
24:50:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:21:01 2025 by rpki-client