Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: B4rjiBZkBhw80yrKkFuGnCLtazPkFL/cLg80bZdhdHQ=
Subject key identifier: B7:55:DB:3F:21:56:5A:BF:33:AE:A2:6B:74:60:39:28:D3:A3:82:D3
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019657CAFA36E8AD4BCEBC68754028DF0525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 10:00:42 +0000
Manifest this update: Mon 21 Apr 2025 10:00:42 +0000
Manifest next update: Tue 22 Apr 2025 10:00:42 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: CChL4f3K5z5lIj/xKAgfvNjnXNBTixBDYfAIrKv8zQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:ca:fa:36:e8:ad:4b:ce:bc:68:75:40:28:df:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Apr 21 10:00:42 2025 GMT
Not After : Apr 22 10:00:42 2025 GMT
Subject: CN=b755db3f21565abf33aea26b74603928d3a382d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:21:0f:08:23:58:08:a6:a9:7e:cc:55:fa:
38:4b:1c:e2:b7:dc:64:c8:ab:03:61:1f:1f:4b:61:
2a:3d:80:b2:1e:6d:15:33:78:57:b9:92:69:17:71:
a3:bb:b7:1c:8f:dd:30:25:71:50:7f:34:41:ff:26:
59:03:8a:47:ae:a6:09:c5:25:1f:b8:02:93:7d:92:
2a:70:25:f2:4c:63:9c:4f:6f:81:9b:fa:47:57:79:
17:ca:c2:f8:ba:10:52:5d:6e:17:b8:e6:dd:4d:8b:
81:9b:d7:2b:16:89:74:51:df:2e:9e:5a:5e:be:26:
4f:ea:40:38:8d:e9:d9:85:24:3a:f6:12:2e:84:81:
b8:22:6d:9a:20:c8:f7:4b:29:56:43:33:c8:e9:43:
9c:f9:7e:4f:1f:c3:8e:73:1a:be:4b:cf:de:d4:7b:
dc:e7:9c:71:fa:27:e5:43:27:0e:88:66:6c:1b:4b:
bd:b7:54:a1:1c:a1:49:24:c0:5d:94:16:c4:62:c2:
97:97:58:f1:64:cc:96:05:5c:c9:21:3b:31:6f:08:
37:b7:f3:a9:53:78:11:d6:a5:d2:f9:23:76:17:95:
fd:11:33:f4:a0:2c:f6:97:38:85:6c:09:47:10:ec:
b0:ee:9e:fa:2e:ff:81:56:36:80:f2:0d:9b:34:d0:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:DB:3F:21:56:5A:BF:33:AE:A2:6B:74:60:39:28:D3:A3:82:D3
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:51:95:01:c4:4c:31:14:f9:a7:b6:f6:f1:b1:df:79:57:
3c:97:9a:e7:0e:45:13:3a:01:79:01:c9:3e:61:6e:cf:f1:52:
35:d2:64:6c:57:97:a3:ec:36:a6:e1:b8:fb:16:e6:17:ea:5d:
1c:95:74:cc:52:68:c4:b3:66:5a:90:6e:b9:74:12:b1:6e:b3:
1b:4a:bc:31:7d:2f:1e:d8:b7:62:5f:92:db:03:98:72:a3:13:
bb:4f:71:4d:c3:62:c9:e7:04:ac:d6:fc:50:03:3e:ed:09:2d:
bf:49:01:bc:87:ba:78:79:da:56:6b:9e:f8:a8:39:4a:31:95:
11:07:88:64:1b:0f:8d:fd:ed:7d:f7:40:bc:9c:89:cb:9b:e7:
96:86:99:92:f3:d7:86:ea:bb:e9:f6:27:5d:73:7e:ca:20:2f:
f7:50:e6:0b:a4:a3:7d:b3:d4:94:f1:39:f1:50:11:35:69:ac:
53:e8:b5:00:18:62:f2:d6:6f:eb:32:c4:32:4d:7e:9e:d4:31:
31:f9:b3:8d:48:5b:15:84:78:73:e0:d4:21:9e:c6:5e:03:45:
0a:96:1f:c3:8a:a7:73:ea:32:83:1b:72:6d:86:a4:79:8d:15:
85:03:4f:42:f4:61:7e:0a:af:42:8a:ca:fa:d7:65:f1:bf:5b:
65:68:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:40:12 2025 by rpki-client