Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: s1b5iVHXlTYAfEQirLloULp2lfWzHipuZfd7jVm7VD0=
Subject key identifier: 84:27:5C:0A:E9:0E:C9:C2:C4:DB:C1:6E:17:8E:C4:2E:E4:E4:90:57
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01965726319DE29641035868C182B451F040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: B2
Signing time: Mon 21 Apr 2025 07:00:42 +0000
Manifest this update: Mon 21 Apr 2025 07:00:42 +0000
Manifest next update: Tue 22 Apr 2025 07:00:42 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: I3C8dPoRbYTLOPk26ovTuxek3d6IstqOcPVsFxfAfwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:31:9d:e2:96:41:03:58:68:c1:82:b4:51:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Apr 21 07:00:42 2025 GMT
Not After : Apr 22 07:00:42 2025 GMT
Subject: CN=84275c0ae90ec9c2c4dbc16e178ec42ee4e49057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:5d:42:ea:96:8d:e5:92:ad:b3:1e:fa:89:
ce:db:47:a7:23:6e:bb:cb:db:d4:62:aa:a5:1c:ec:
ed:20:85:15:a6:e2:02:0a:29:b8:9a:78:da:68:93:
52:06:5a:f9:d8:ef:42:36:92:78:be:ff:cd:d9:0f:
57:39:58:23:2d:59:1d:99:77:50:cc:fb:f4:db:49:
f1:ca:ac:84:e6:a2:f9:a9:c5:78:c2:58:e0:b8:8c:
16:86:eb:c1:3c:9e:48:fb:3f:91:b0:e0:5e:6e:02:
ac:c8:40:9a:92:b6:c8:58:f5:0d:22:6e:1e:b9:8b:
32:18:dd:6f:56:d6:0c:81:d6:ed:57:78:62:fe:4c:
e4:da:20:62:5d:60:ee:cc:74:7d:2c:dc:a5:c4:b4:
45:e0:a8:0e:ea:07:e6:7b:87:0b:c7:5b:18:60:c1:
ef:63:ce:a9:0e:95:91:0d:b5:78:26:94:a6:7b:92:
53:46:f6:18:40:c0:f8:b9:99:4e:f5:59:3b:18:e1:
6d:99:32:82:e3:dd:34:2d:a1:5c:45:c4:e5:ba:1d:
32:a6:6b:d2:f3:9d:57:5f:bc:60:1f:71:5e:2c:f7:
1b:56:2a:a6:c1:8b:8c:40:59:d2:93:0e:f9:6e:07:
d9:27:a0:c2:a0:6f:99:60:04:3d:33:60:48:bf:38:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:27:5C:0A:E9:0E:C9:C2:C4:DB:C1:6E:17:8E:C4:2E:E4:E4:90:57
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:42:73:55:6f:2c:cc:00:32:8c:46:ba:18:5f:80:0b:af:fe:
b1:63:1b:45:bb:e3:6d:cb:e7:df:5b:b1:10:94:34:fe:a3:f9:
03:e0:41:17:43:e4:b8:08:21:0c:0e:a0:15:61:87:0f:a1:8f:
8a:7d:c0:7f:6d:4d:89:46:b9:56:a6:e3:08:4c:b1:bf:4e:b9:
de:29:09:6c:74:0c:99:02:18:d0:e8:b9:9b:cf:4c:e0:73:ad:
89:da:a8:a9:fb:0f:a5:e8:6a:1f:15:52:a4:f5:cc:9d:ca:54:
4b:51:5e:62:08:7d:8a:f9:e4:66:89:7b:7e:dd:9d:8e:c0:82:
4c:8d:c4:e9:a8:2c:a3:bb:db:48:03:34:b9:8d:3d:f3:78:4f:
44:62:cf:47:49:f0:fa:39:aa:6f:6f:ac:66:3d:59:a2:0a:3c:
3c:ea:ea:23:fd:d8:6c:39:c9:a8:c0:74:16:ab:ac:c9:f0:b7:
b7:62:a5:d8:df:91:e3:3e:b3:f9:cc:3d:d2:af:0c:ef:7c:62:
d0:67:d7:85:f4:6a:58:18:2e:d6:17:fa:68:ca:3c:43:1e:8b:
52:cb:22:f3:f5:fd:39:79:41:0e:dc:97:7a:c1:80:3c:2b:67:
90:1c:0c:dc:33:cc:ab:08:3c:55:16:f3:9a:d7:cf:4d:d1:f9:
2e:54:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:12 2025 by rpki-client