Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: bK3+KRL6kRYRPbdP0XHyHRqEFOWPbTF8Y8z0KhPQRwk=
Subject key identifier: B7:2A:1E:96:82:CA:0C:06:3B:E5:AA:22:CD:2D:13:36:6B:62:CD:7E
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 01964D4753FC8BEFB5D9955B54D5E2FA478A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0932
Signing time: Sat 19 Apr 2025 09:00:42 +0000
Manifest this update: Sat 19 Apr 2025 09:00:42 +0000
Manifest next update: Sun 20 Apr 2025 09:00:42 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: BWWYmNBPIcFyuAy+hnTvbF1LYNSoXenu0cgOnpwMx88=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:53:fc:8b:ef:b5:d9:95:5b:54:d5:e2:fa:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Apr 19 09:00:42 2025 GMT
Not After : Apr 20 09:00:42 2025 GMT
Subject: CN=b72a1e9682ca0c063be5aa22cd2d13366b62cd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:e0:c3:1f:d6:12:86:43:c7:eb:8f:fd:cd:
68:5f:1b:c4:29:6c:0b:8c:9b:5b:b2:cc:b7:74:c6:
b4:f8:6a:7b:89:dc:e9:9f:67:99:e6:45:85:9c:24:
77:6a:92:0a:b0:5c:b6:4c:72:3c:b8:c1:e0:37:0a:
83:ed:84:ef:7c:05:de:0d:f8:a6:61:8f:45:dc:33:
5e:c9:a6:8d:28:01:5f:14:38:66:35:90:11:90:a7:
47:90:97:20:4e:01:0b:5c:a2:01:fe:54:e0:7f:c2:
5c:a7:23:19:0e:e2:a0:5b:e0:43:69:5e:7c:96:31:
fe:a6:a2:33:70:f4:68:22:ae:54:6b:4f:fe:ed:a1:
82:93:02:22:12:3c:cc:df:1c:87:ec:1d:f0:ec:28:
5f:5d:7b:43:86:36:55:9d:93:e1:8a:17:58:cd:7f:
aa:17:f0:58:55:a4:55:da:e2:6c:25:44:f0:fa:21:
1f:56:63:63:e1:1a:54:43:4a:ea:a9:cd:04:a9:61:
33:4c:60:0c:54:80:5a:0f:9d:77:b8:77:fd:65:db:
69:7c:9b:a2:6e:b7:f1:d6:14:85:4b:bc:94:1a:66:
9d:7c:c1:78:50:ac:ac:ac:10:26:e6:14:10:96:e6:
31:68:16:74:ad:04:76:11:b8:fe:da:1b:1f:d2:39:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:1E:96:82:CA:0C:06:3B:E5:AA:22:CD:2D:13:36:6B:62:CD:7E
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:14:28:51:97:c0:58:82:36:a5:2c:5b:e3:2f:cf:c3:2f:14:
9b:f8:11:96:f6:34:e8:29:c2:fa:89:df:c6:85:05:87:53:df:
d9:29:66:d8:44:65:3e:f3:c6:1e:c6:35:cb:24:36:6d:49:82:
ac:79:83:57:ff:79:fc:37:8c:21:dd:ba:80:09:94:83:37:26:
52:35:aa:06:9f:d3:10:7f:d2:da:aa:c5:97:08:85:d2:d6:fc:
e9:0c:53:95:92:e1:44:01:b2:6b:89:a9:49:af:86:49:49:59:
18:e8:e0:ea:40:d2:54:c3:db:a5:09:ac:85:2c:7c:12:0e:66:
54:7c:8b:39:71:91:67:71:b7:3a:18:3d:f9:c8:1c:4f:5f:ec:
52:66:54:5e:06:ea:6c:6c:d8:50:6e:df:4f:f9:c3:6b:f4:a5:
8b:3f:52:4c:19:a0:79:22:6f:57:de:4d:a1:ee:70:35:30:6d:
c2:c9:5c:93:cf:f0:d7:fd:4e:87:06:b4:a4:27:58:8f:be:2c:
69:6b:96:17:d4:20:58:1f:61:64:19:1b:8b:66:6c:95:ed:08:
5e:b6:32:fd:0b:ab:ce:9d:dd:60:e0:e5:3f:97:9c:77:ec:de:
6a:6d:76:52:39:2f:00:e3:cb:55:6a:07:6d:d9:00:ea:21:36:
df:e1:b7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:10:19 2025 by rpki-client