Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
File: yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft (raw, json)
Hash identifier: zaioBAbBeR5sPCaZIz5Gup4/KrPDvlM96kejx3kgxCg=
Subject key identifier: A9:B1:F0:F5:74:DE:24:2C:DB:3F:A6:5E:91:C9:55:FA:24:7E:AD:DF
Authority key identifier: CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
Certificate issuer: /CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Certificate serial: 0196553822CB4FFD6DDEA7CB53C7E02E87B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
Manifest number: 0283
Signing time: Sun 20 Apr 2025 22:01:04 +0000
Manifest this update: Sun 20 Apr 2025 22:01:04 +0000
Manifest next update: Mon 21 Apr 2025 22:01:04 +0000
Files and hashes: 1: eVWj75QB5-NY5cip7EaAMqsD3_Q.roa (hash: R8SYABsszbTf/c1Z91aXqCMR7hgNS09va3LcQa+6Zyg=)
2: yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl (hash: ThBwyx+zBhhwnTGcOd6c7JFoPuJsSOi6RlEsUkOE4XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:22:cb:4f:fd:6d:de:a7:cb:53:c7:e0:2e:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Validity
Not Before: Apr 20 22:01:04 2025 GMT
Not After : Apr 21 22:01:04 2025 GMT
Subject: CN=a9b1f0f574de242cdb3fa65e91c955fa247eaddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:90:95:27:c6:74:81:19:b4:23:c5:2c:df:
8a:c8:ff:43:0f:7e:e8:14:7c:32:6f:60:f1:4e:58:
5f:9f:54:16:66:bf:59:f3:76:09:db:da:44:24:5f:
d0:10:24:4c:60:59:1b:5a:f5:4e:c4:7f:4d:ee:82:
43:17:1a:4e:5d:26:b2:48:84:09:6f:8e:b9:47:33:
80:df:27:76:a6:a4:3b:14:3d:5f:5a:02:1a:d2:d4:
92:f5:69:84:4a:a0:ff:c4:5c:e2:44:4c:da:bb:ed:
c6:11:fc:9e:9b:76:5d:79:43:91:e6:91:40:90:f0:
98:fb:61:a3:b5:3d:ef:8c:9b:21:56:6e:35:9d:7e:
0a:da:94:5a:97:38:51:1c:4b:f5:1c:2a:ce:bd:28:
49:e0:7c:4c:01:f2:0c:dd:bf:ea:6e:b7:cd:20:a1:
92:d1:10:b0:16:9c:d0:48:53:85:da:57:95:5e:97:
1f:28:7f:cf:74:15:26:10:c8:13:0c:1d:91:ae:8c:
79:4a:4c:f0:07:87:01:0d:87:3f:c5:ed:ca:67:e8:
d1:8f:95:ae:d5:2a:ab:d8:39:94:42:1b:79:55:a4:
0c:10:3f:c4:7f:1a:58:0d:ca:f8:0f:91:26:90:a2:
cf:ab:bb:37:95:2a:ac:2b:56:45:fa:af:a5:f8:9e:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B1:F0:F5:74:DE:24:2C:DB:3F:A6:5E:91:C9:55:FA:24:7E:AD:DF
X509v3 Authority Key Identifier:
keyid:CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:77:41:70:ab:1b:c1:79:78:0f:74:16:f5:ac:8e:8a:9c:
b5:77:de:a3:10:8f:32:e3:73:1b:38:88:e6:1a:18:21:d6:66:
0e:97:52:44:63:96:f6:a9:22:0c:fb:72:a3:59:fb:94:63:e6:
89:9d:4b:cd:a2:e0:88:98:5b:db:34:33:06:68:21:97:70:0c:
fa:d3:f1:97:23:75:52:85:a8:a4:98:33:d3:cc:87:2b:be:29:
35:96:58:cb:30:fb:c0:c3:98:57:9c:2c:4f:43:58:43:95:c2:
31:3e:e1:86:60:16:f1:ad:71:7c:54:4c:98:24:b4:14:29:5c:
fc:c3:4f:86:49:96:5d:bf:e7:ec:98:38:de:19:cc:2e:81:39:
16:2c:55:84:52:2b:5a:93:96:70:4a:84:c6:2c:92:a8:cb:01:
2a:68:a7:b2:e2:45:40:1a:d5:ad:8c:da:55:da:a8:34:73:ab:
cc:87:5d:31:20:59:86:90:b0:ef:3a:cc:52:8b:05:17:f0:bd:
ea:4c:26:6d:65:d7:c9:bd:2f:45:c5:ce:f8:d4:6a:ba:c0:3b:
d3:86:1f:a8:21:23:be:6c:8f:f8:ea:5b:7f:7e:2d:cd:26:2d:
45:72:a0:9f:ef:66:07:07:3b:21:d9:4b:ba:6a:20:8b:da:6d:
76:73:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:23 2025 by rpki-client