Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: lK9xfbcB9TXWOavVh0Xe8VjKYCYrbcNHTA8aTtx67yE=
Subject key identifier: 4D:76:D0:65:50:1C:C9:BC:1C:A4:CB:AA:C5:46:62:D2:A3:DA:EE:9A
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 019654C97AD8781545A3DE5476D591EBF7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 20:00:12 +0000
Manifest this update: Sun 20 Apr 2025 20:00:12 +0000
Manifest next update: Mon 21 Apr 2025 20:00:12 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: utecocj5UtuWyrdKzrOAWUE1wgzcIGkUqpJ3Ped+KjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:7a:d8:78:15:45:a3:de:54:76:d5:91:eb:f7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Apr 20 20:00:12 2025 GMT
Not After : Apr 21 20:00:12 2025 GMT
Subject: CN=4d76d065501cc9bc1ca4cbaac54662d2a3daee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:10:6c:c0:0d:7f:5a:1c:f1:0b:9b:07:24:
ef:db:c0:5b:11:e4:5f:7e:58:14:e7:e3:25:99:88:
d6:a8:33:6f:70:a4:21:df:f7:8b:59:4b:96:18:63:
fc:43:42:c8:ef:51:c9:89:14:1f:61:21:07:50:32:
7f:fa:03:8e:30:db:2c:05:e2:8c:ff:49:1d:32:6a:
25:45:0f:82:b1:54:06:e5:ed:b8:87:6e:0b:d8:e9:
4f:87:58:47:fc:4e:04:c4:e1:f3:5a:ff:69:5e:59:
53:b8:8c:cf:6c:8b:cd:94:3c:d6:b7:00:9a:46:b9:
22:dc:fb:d8:8c:57:76:0b:89:37:d1:3b:d8:b3:c3:
a0:71:12:4b:1e:47:44:ef:af:0b:ac:5d:36:c0:82:
50:a9:84:06:8e:ad:b5:d0:55:0a:92:22:22:e5:18:
6d:06:47:c5:74:2b:d2:01:30:bd:a4:95:27:f5:33:
29:58:17:5c:0c:0b:62:d6:92:2f:17:4b:85:0b:1e:
48:b3:1d:76:96:01:02:b4:45:27:d8:37:e4:e2:73:
5d:36:15:17:e8:89:4e:ea:24:c0:4f:e3:6d:23:ab:
24:c8:66:6a:18:07:ad:4c:24:a4:35:3b:17:b2:b0:
82:06:81:ba:4a:65:15:45:f4:6e:41:ca:b2:45:35:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:D0:65:50:1C:C9:BC:1C:A4:CB:AA:C5:46:62:D2:A3:DA:EE:9A
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:d9:ff:58:c3:70:24:e0:11:9e:08:cf:1a:ce:ba:74:27:
f6:d0:1a:20:c3:d5:f8:bc:de:b0:e8:55:00:82:a1:22:df:b3:
26:f3:1c:4c:6e:ba:14:ba:37:22:b0:a3:38:43:b4:27:54:2e:
b0:22:13:6f:9b:89:f0:6b:d0:74:32:a3:90:32:68:95:44:fb:
e0:ba:b1:3a:18:15:e5:b5:51:d5:70:ce:a6:2a:ef:d5:90:ae:
27:45:d4:32:3c:8d:37:6c:92:98:f1:0f:28:61:bf:1c:3b:7b:
35:dd:8b:b9:98:40:23:fc:ef:9b:68:cd:8a:ba:85:89:13:f1:
9e:ca:8a:d6:d5:fa:68:d7:38:ac:38:a4:bf:7d:59:7b:23:af:
61:b8:88:fc:3c:5a:c4:00:03:c6:5e:81:d1:7f:a7:d2:d4:02:
e3:b5:8f:13:8e:3a:3a:a5:ba:12:ad:6b:1e:e2:3b:4d:8a:2a:
15:45:ae:e3:11:5d:0c:54:f8:83:81:20:1e:92:3f:4c:a5:38:
9f:a7:4e:0f:70:4f:38:32:5e:1f:8a:49:2c:11:71:99:5b:67:
81:e6:a8:09:74:c4:d7:3b:b5:30:87:16:fe:f5:ca:ee:e8:26:
14:8e:b1:53:89:cc:f8:01:4b:07:85:a9:95:d2:f9:80:8f:26:
e7:69:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:24 2025 by rpki-client