Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: Wa3jPrMUk4x6J5AUk5IBxolet7ps++xt3Z95dWlHcVM=
Subject key identifier: B3:0C:E7:E5:DB:17:B8:DC:F7:BB:26:FD:A5:88:03:DD:3E:78:4F:C7
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 01963E78D909495387834829C0A7E96B7AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 12:00:29 +0000
Manifest this update: Wed 16 Apr 2025 12:00:29 +0000
Manifest next update: Thu 17 Apr 2025 12:00:29 +0000
Files and hashes: 1: __KLjvjgMO1LuKrx6zZXZJBcRtk.roa (hash: kZSjdOtgx956Q9WcOxsnl5QBMbkPJAPdg2gED1ZbQy4=)
2: xmOvbRNpbfTNvGRi0NGmoChwF8k.roa (hash: 7oU4y3FJaTZ6zlZMUwxbLqzJR9lqEVzJSwfHVW5xI4s=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: 1rT6CV4doqtYEVrE9B+faOTmefq+H60DhceasNwqbNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:d9:09:49:53:87:83:48:29:c0:a7:e9:6b:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Apr 16 12:00:29 2025 GMT
Not After : Apr 17 12:00:29 2025 GMT
Subject: CN=b30ce7e5db17b8dcf7bb26fda58803dd3e784fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:36:e1:82:94:8b:8b:ee:92:a6:15:b8:b1:
3a:fb:3f:d1:bf:ca:5a:f1:1b:c2:6c:38:93:30:bb:
a6:7a:66:bb:73:8d:a8:b2:7a:79:72:e1:2d:21:c9:
2b:23:8f:04:56:91:ea:f4:e2:06:bf:82:9e:35:0e:
6f:eb:4e:b7:8f:9f:72:c8:af:71:9a:c4:25:94:9b:
da:f0:5d:47:ae:fb:bb:ad:36:85:30:08:1e:36:0d:
4a:27:5c:ac:65:95:c8:40:89:b7:78:f2:60:04:93:
5b:3a:5c:30:d8:91:6d:0d:a1:d2:8f:52:83:bd:b1:
aa:f8:e2:11:dd:46:dd:0b:74:07:4f:e9:c8:07:60:
1c:cf:7b:99:15:44:5d:3a:99:17:1d:1f:0d:92:3c:
86:21:14:bb:c3:7b:e0:e0:f0:bc:29:b8:23:55:b2:
24:6a:6e:1e:7c:01:05:1c:04:bf:01:55:51:4d:58:
cd:d3:2b:d2:9a:06:fd:ae:85:f5:5c:5d:d2:7b:0a:
69:6e:b9:df:a2:f9:56:e9:a6:50:f5:85:af:f9:85:
88:0e:2d:c1:15:76:30:7b:ff:64:82:6d:03:5c:b3:
91:8e:31:21:7f:a5:38:ae:1a:f3:6d:2a:39:52:82:
42:52:ea:7e:6d:0b:8c:de:ec:c2:fc:35:63:06:c6:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:E7:E5:DB:17:B8:DC:F7:BB:26:FD:A5:88:03:DD:3E:78:4F:C7
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d3:76:e6:e5:0d:98:ed:6a:da:b0:56:a2:7c:03:04:b0:e2:
bb:ce:33:6b:b7:c5:10:09:bc:42:e8:95:04:64:59:73:59:6d:
c0:c9:b1:0e:b2:2f:08:4a:98:0e:99:d0:03:fc:b0:eb:af:4d:
5b:54:38:05:66:e0:39:a9:e9:8a:d6:87:80:49:dc:cc:f1:59:
76:91:8a:57:f4:9d:60:39:f4:29:f1:83:c1:b0:b3:d1:78:5b:
e0:11:1c:6b:dd:e4:4d:11:3f:b9:53:c9:eb:d5:24:06:62:e8:
22:00:be:dd:66:87:34:27:99:12:e2:13:f4:94:d3:b4:4a:af:
b3:92:96:f7:f5:5e:51:65:5b:a5:e2:df:4b:14:93:d2:d7:55:
4f:11:3c:12:e9:3f:34:03:41:c8:91:27:10:38:fb:4c:2b:bd:
5a:38:e0:02:46:09:a0:4b:60:68:6b:1c:8d:29:62:68:55:ff:
49:88:9c:db:ea:51:e6:5f:69:5f:1e:66:96:b6:ea:7c:6b:12:
e3:ac:d5:16:61:5e:f4:94:6b:93:b5:4c:ba:5f:d4:da:74:86:
2a:af:ab:e8:b4:a4:bc:5e:1b:e0:d1:b4:5d:d5:a1:ef:37:76:
e1:9b:68:8b:79:7b:99:c5:01:26:09:12:fc:2a:b4:86:27:23:
dd:31:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:28 2025 by rpki-client