Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: Fgmfd43mr5/iAcKqotlsHUIm2ixoVLMSl05eX3ZSkEI=
Subject key identifier: B2:9D:EA:FD:D7:20:DB:89:EE:28:91:F3:A7:F5:19:8A:5E:33:9A:8B
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 01965D5F8FD7A3E7C6772EC7AB904EC453C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 12:01:05 +0000
Manifest this update: Tue 22 Apr 2025 12:01:05 +0000
Manifest next update: Wed 23 Apr 2025 12:01:05 +0000
Files and hashes: 1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: ui7RQHRT8l7MFFKHOGMAKsERXRzzhezZJqnBfVAirGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:8f:d7:a3:e7:c6:77:2e:c7:ab:90:4e:c4:53:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Apr 22 12:01:05 2025 GMT
Not After : Apr 23 12:01:05 2025 GMT
Subject: CN=b29deafdd720db89ee2891f3a7f5198a5e339a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:13:9f:18:97:ee:1a:38:5c:2f:21:dc:b8:
f8:ec:e9:db:ad:5a:f5:b4:f9:de:a8:aa:f3:80:3d:
e5:41:99:52:78:32:86:de:49:f8:79:d9:6d:86:67:
6b:66:8c:13:ec:45:fe:b5:41:17:2e:b9:4a:53:76:
51:e3:7f:9d:4e:78:44:10:ba:b9:52:8f:0b:ae:2f:
84:13:1f:b3:85:21:9c:49:71:98:b5:c0:a4:96:50:
8d:75:e9:46:13:e3:3c:ff:64:5c:e3:5f:75:3f:65:
bd:36:a7:99:84:a7:be:c5:6b:bb:3a:67:db:e1:c1:
4a:ba:94:b6:20:7b:b7:7c:29:27:1b:14:7e:16:60:
3f:29:2d:e5:5e:13:91:f2:3a:a7:b9:dd:b1:7c:df:
29:f2:ca:5c:f0:c7:ee:d7:fa:00:d9:c6:4f:de:f8:
c5:e3:2c:7c:e4:fa:2b:89:5b:61:3e:0f:68:7d:fd:
63:46:85:97:06:60:91:eb:fb:ca:c8:39:7b:34:0d:
2d:91:cc:e3:82:a6:24:75:0a:58:34:ec:15:13:e5:
68:e2:81:83:02:ad:19:2b:db:78:3f:2b:a6:13:34:
bc:40:34:76:36:cf:3a:24:03:24:da:71:ae:f1:5e:
87:06:4f:db:3e:a8:6e:22:88:90:48:0f:ba:01:aa:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9D:EA:FD:D7:20:DB:89:EE:28:91:F3:A7:F5:19:8A:5E:33:9A:8B
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6c:01:3c:e7:0e:d9:d3:c6:18:b8:17:f5:d2:79:c4:2e:7d:
3a:02:e4:ae:4b:ca:5c:49:8c:a3:0e:d6:a0:7c:d2:83:79:4b:
28:7a:30:93:ed:10:7c:a3:3b:1c:81:c2:6e:95:bc:0b:09:b6:
20:8c:d8:fe:7e:87:26:6c:5c:89:9a:86:80:7c:fb:40:2c:6e:
ae:0c:71:9c:ba:64:2f:d4:58:65:45:39:49:17:92:48:32:40:
3f:64:aa:b5:43:27:3b:57:b4:f9:b0:06:f7:c1:89:4a:e7:0e:
35:30:1c:a7:31:e5:00:41:ff:db:f2:eb:0d:24:a2:30:13:e4:
26:62:97:28:c5:44:87:b2:81:67:0f:bf:bd:5d:81:c7:fe:2c:
cd:02:41:20:fc:9d:e9:4a:24:c8:e9:a8:a0:87:80:e7:86:09:
65:3e:08:62:b1:5e:15:87:3e:33:ac:b2:3f:91:e1:e1:51:96:
da:01:27:f1:d0:fc:0b:9d:e6:bc:41:34:f4:e0:42:12:de:ca:
cd:89:1e:a2:0d:f8:e1:f5:c5:b4:fe:bb:35:79:97:a0:84:4b:
8d:e2:a2:4d:03:3e:1a:85:8f:8f:44:3b:7f:67:e3:d4:c2:ee:
60:9f:d8:37:11:75:34:1b:88:e4:73:3a:cd:09:55:cb:1c:fc:
69:bb:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:32:13 2025 by rpki-client