Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: 4mn144oPwRL7N+/M9MEdApjgReoHKy3qp44ERRlQp1Q=
Subject key identifier: 5F:A1:BA:60:30:21:4B:CE:6C:4A:8F:23:12:6C:E8:8D:D6:CC:34:08
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019655DC9E9FACB069265E533B57D57E19DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 01:00:44 +0000
Manifest this update: Mon 21 Apr 2025 01:00:44 +0000
Manifest next update: Tue 22 Apr 2025 01:00:44 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: Sx0DPklODH/xwcEcTyPcW1PXG4CFKQxQq+ATtbTWgXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9e:9f:ac:b0:69:26:5e:53:3b:57:d5:7e:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Apr 21 01:00:44 2025 GMT
Not After : Apr 22 01:00:44 2025 GMT
Subject: CN=5fa1ba6030214bce6c4a8f23126ce88dd6cc3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:f4:cd:97:af:50:a4:26:dd:e6:9b:f7:60:
5d:60:49:bc:e9:4d:49:b6:91:6d:2f:d9:70:15:76:
c4:98:e4:8b:e3:e9:b3:dd:a6:32:6f:1e:1b:a3:17:
2b:ca:87:50:8d:49:1e:cc:1d:f4:34:f5:92:1b:46:
03:65:8d:4a:35:1e:0c:40:34:24:a9:63:03:e9:60:
36:19:1c:e8:16:cb:81:4a:37:f1:86:45:af:de:ec:
41:af:17:f2:bf:a6:bc:04:75:6f:7f:2b:76:64:d3:
a1:99:a6:a3:2d:08:a0:8f:17:27:89:9b:29:86:77:
a9:1c:49:6d:69:68:f9:c3:e8:a9:d4:d0:30:ce:f3:
ef:1e:d7:00:2d:d8:be:1a:0e:e0:df:4e:0e:cf:8e:
9a:9d:05:06:4c:f2:f8:89:47:99:5b:5c:3f:04:89:
a6:6a:a7:4e:50:47:df:74:50:f1:87:e7:1e:65:03:
42:74:7c:01:ed:7c:16:a3:aa:d7:fd:d1:ec:3b:9f:
45:29:aa:fe:c5:59:28:f4:1d:11:40:ab:b0:92:fb:
2c:34:29:0a:79:6c:4b:f0:6f:0b:7f:df:1e:a8:03:
73:04:a5:dd:43:40:32:83:4a:e9:d5:bc:3e:86:e1:
59:29:f8:ac:58:f1:d0:d2:84:34:92:70:82:af:18:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:BA:60:30:21:4B:CE:6C:4A:8F:23:12:6C:E8:8D:D6:CC:34:08
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:4d:08:c2:ce:68:43:db:fc:a1:40:4b:f8:df:70:11:39:
f2:92:77:e4:58:06:68:1f:10:30:6d:c6:03:07:2f:81:6b:e6:
02:60:ce:89:b6:73:bd:95:82:27:48:b4:30:bf:de:ee:d3:2d:
2a:25:75:d8:e4:2f:c5:d5:48:a1:23:ab:d1:73:24:8b:ee:b6:
20:dd:ae:18:22:22:4a:e9:78:31:32:a6:78:aa:5e:81:fa:eb:
96:fd:6a:39:88:ff:e3:16:06:8a:8a:13:28:bb:18:4e:9a:4f:
a7:d4:b9:64:e5:6e:b3:ae:06:62:82:56:a6:9b:19:af:94:55:
ac:7e:90:d9:29:62:19:3f:85:a9:50:91:57:fe:e6:3f:42:d2:
33:44:40:20:8d:cf:13:0e:b0:05:64:1f:bd:6c:89:98:b8:93:
4a:48:6f:89:8b:49:af:98:28:37:05:85:e4:f3:f1:ba:76:3e:
e4:7b:a6:8d:ac:4a:63:45:e5:91:d4:2e:d7:a3:b8:1d:af:7f:
b3:3d:af:cb:ff:59:a4:2b:6c:93:3c:ba:08:a6:74:13:37:ae:
11:dd:60:09:95:78:b6:5b:fd:66:b6:e1:8d:90:5c:59:58:45:
69:53:28:cd:75:bb:81:1e:3a:40:94:e1:3e:02:41:9d:32:ad:
a8:e0:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:54 2025 by rpki-client