Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: 85op8r2rSb3yUMj7h5790n33VdDZpUW9BNz75FwGBoA=
Subject key identifier: F9:69:7A:D2:8F:F8:1F:10:CD:CF:2E:41:5B:EE:80:DA:24:06:D5:6B
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019656EECBB80CBAF94FF6A26A2EFFF97BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 06:00:12 +0000
Manifest this update: Mon 21 Apr 2025 06:00:12 +0000
Manifest next update: Tue 22 Apr 2025 06:00:12 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: df+8PdL9aj8rV5TTakAGUS13leFaD5p0jR78mmaqOHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:cb:b8:0c:ba:f9:4f:f6:a2:6a:2e:ff:f9:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Apr 21 06:00:12 2025 GMT
Not After : Apr 22 06:00:12 2025 GMT
Subject: CN=f9697ad28ff81f10cdcf2e415bee80da2406d56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:80:f2:31:53:8d:05:bc:d7:b6:92:1b:21:
67:66:f0:00:97:ea:63:47:19:98:af:10:08:56:e8:
b4:bf:d7:8e:3f:dc:db:90:ad:dd:7a:df:aa:c3:90:
61:8c:7b:be:9a:14:25:2e:ab:0f:63:cd:17:3b:08:
cb:7e:96:e2:62:56:83:16:49:97:17:85:0b:77:1d:
3d:a6:e7:82:d9:bd:0d:3f:36:b7:60:2a:91:e9:cb:
ce:ab:8a:8b:e9:6a:f3:41:b9:5b:9f:aa:81:ee:a5:
9d:35:72:e4:56:be:29:c7:4f:8b:51:73:9e:bd:ac:
d0:b8:dd:4b:62:08:5a:b8:a5:1a:56:8e:36:35:6d:
b6:3a:18:3d:5a:67:4d:0c:e1:7f:df:6f:fe:e3:f6:
ca:cd:f9:36:5d:e3:03:18:d9:46:6d:ee:db:fe:bf:
91:b9:d7:d4:4e:c9:5a:c0:ae:11:8c:9b:af:06:cb:
4e:5c:d6:15:a3:8a:47:7d:0a:4c:33:ab:a2:76:d7:
8e:7e:19:52:68:8e:57:80:71:94:a0:90:06:18:d7:
ad:45:d7:a2:72:c9:d9:e9:ad:64:ca:ae:7a:b3:ab:
a8:a6:28:62:9e:99:66:3e:b6:19:fc:6b:aa:48:56:
2e:0d:e5:f5:12:95:7a:1c:34:1f:dc:50:7b:3b:d6:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:7A:D2:8F:F8:1F:10:CD:CF:2E:41:5B:EE:80:DA:24:06:D5:6B
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:90:f9:ea:e4:98:b0:64:a7:00:74:91:5a:df:40:e4:91:b2:
48:a0:ba:6a:2b:59:19:87:80:14:6b:d6:28:f8:b8:2f:2b:c9:
81:b7:ae:a0:c3:00:2e:b9:88:b7:2b:21:ad:33:d5:dc:a3:da:
7c:af:e6:e1:a8:de:1b:9d:0e:83:ff:96:61:4d:47:91:e4:3b:
5d:53:55:5d:80:3f:5f:c3:51:f6:5e:b4:b7:52:8f:ee:23:e2:
fd:dd:57:a1:bc:5b:44:5e:36:4c:9e:cc:cb:0e:a6:3b:55:3e:
86:37:dc:0d:42:d1:66:e2:30:5d:98:93:ca:cb:08:4c:03:b2:
af:15:a9:c0:34:b8:57:32:8a:f4:8e:92:9b:3e:a4:3e:e8:4e:
e0:01:57:c8:53:4a:54:94:e3:ef:45:be:a2:a1:15:27:fd:8d:
06:7e:4b:49:c2:ae:69:0b:18:3b:1c:dd:28:fa:a0:78:78:c5:
19:af:a6:fa:13:59:9c:f6:89:7a:d1:11:a5:d8:09:1e:e7:9b:
25:4f:ea:8c:04:7a:9e:b6:c1:26:e4:55:f4:0a:b9:74:5e:52:
93:77:f1:5b:52:ba:65:b6:93:25:06:14:67:2d:c8:d0:d6:e4:
a3:03:be:d4:33:4c:83:9e:ba:b0:ff:58:ba:bc:85:21:6e:61:
e8:60:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:47 2025 by rpki-client