Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: ifnDnw4F9c9WRzEHSwC77kxKv+oXB9mr596CMG17LKQ=
Subject key identifier: 7F:63:EF:8F:32:AE:F2:63:17:99:A5:93:0F:86:64:B6:A0:1A:C5:01
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 01962423DC0F9C0DD49C91360744DE33CA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: 28
Signing time: Fri 11 Apr 2025 09:17:31 +0000
Manifest this update: Fri 11 Apr 2025 09:17:31 +0000
Manifest next update: Sat 12 Apr 2025 09:17:31 +0000
Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: ZacIVM4me2ybN7lfOiSVSCmZ+dM2MdjfkWxYaqNOkQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 09:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:23:dc:0f:9c:0d:d4:9c:91:36:07:44:de:33:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Apr 11 09:17:31 2025 GMT
Not After : Apr 12 09:17:31 2025 GMT
Subject: CN=7f63ef8f32aef2631799a5930f8664b6a01ac501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:61:8c:d2:c7:3c:15:7d:14:5f:d1:69:30:
2f:c0:61:e5:02:30:c9:1d:fc:d4:e6:ca:3d:8e:46:
b9:54:7b:e8:67:d5:32:55:09:d5:39:a8:56:85:03:
b5:bf:df:35:98:c7:8e:a3:d8:60:8e:a2:d9:d8:7e:
e7:db:b7:88:c7:82:b4:29:4d:aa:20:4a:2a:83:4d:
e8:4a:d6:61:54:6b:01:33:c2:cf:54:4d:6c:8d:66:
df:69:c1:6b:75:8d:70:ed:96:57:8e:47:2c:85:1c:
af:e7:5d:3c:e4:c0:fa:5e:9e:48:2e:f9:0d:c6:42:
c9:64:f7:f8:a3:79:84:e1:04:b5:11:99:c9:db:3c:
65:92:97:33:d9:84:83:9d:0b:84:4f:0d:1f:1c:19:
48:0b:11:d8:e4:20:9d:fc:e9:0c:13:9e:ec:86:02:
8c:76:02:a3:05:5d:73:c5:02:29:1e:24:ef:36:19:
89:9a:93:19:ba:ce:56:c2:69:a4:80:f8:fc:b5:18:
eb:1a:b6:05:23:35:b1:e6:5c:98:f2:61:ba:6d:28:
65:eb:b3:13:cf:6e:ed:3d:47:8d:38:55:b0:0d:3b:
f1:70:fd:87:74:69:0f:db:92:62:4c:e9:bf:58:24:
b0:78:27:67:ca:18:34:37:18:cb:e3:e9:03:43:97:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:EF:8F:32:AE:F2:63:17:99:A5:93:0F:86:64:B6:A0:1A:C5:01
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:9b:65:5c:54:f5:24:4d:28:4a:1c:f8:9d:75:59:e0:77:
f6:90:26:a1:2c:be:e3:3e:eb:37:84:ef:90:09:5c:f6:20:ce:
8a:cc:d3:65:b0:43:5c:f8:cd:48:8e:4e:c6:37:06:63:02:a0:
13:97:31:89:ba:d2:ea:4d:fd:e8:82:37:18:d3:74:11:ee:62:
c8:49:90:4f:10:2a:9e:07:72:eb:3b:e9:81:12:0a:f9:75:8e:
0b:98:de:48:07:b1:c5:a5:50:3c:38:78:c1:3a:f2:39:e4:d9:
59:e7:64:bf:44:07:4f:4b:bf:33:39:38:10:ee:52:30:7a:f2:
bf:e7:a0:11:e4:36:d5:d6:00:08:d2:21:4c:6d:37:82:7d:1b:
02:ed:58:86:00:20:9d:74:b9:0f:cf:d7:96:fe:18:55:8f:29:
ec:c3:a3:ee:35:d3:04:e2:34:e8:4e:c9:35:c2:8c:44:00:30:
5b:ff:66:03:b0:10:49:73:b5:fd:dc:1d:ee:67:16:71:54:82:
61:dc:29:b6:41:4e:a3:76:df:5a:c0:fc:57:7f:b9:16:b4:c6:
a5:00:45:d1:25:77:40:71:a1:d9:fd:13:4d:76:cb:a6:a9:4f:
a5:d6:56:21:41:81:8d:e7:be:48:f0:f0:d9:22:39:c0:a1:ed:
09:bf:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:19:57 2025 by rpki-client