Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: ecYBglOTLYqA3qGSzq2stJ1sCrw5ryvVEnz5/HtuJKQ=
Subject key identifier: 91:F6:E4:1E:D0:6D:0D:0E:A6:70:25:BE:24:73:DE:C3:EB:FD:08:CD
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 01964EFEA669752163184A55B54099F7AA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 14E8
Signing time: Sat 19 Apr 2025 17:00:33 +0000
Manifest this update: Sat 19 Apr 2025 17:00:33 +0000
Manifest next update: Sun 20 Apr 2025 17:00:33 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: iaaRp6WVSlDiR+D9fd8I8JrNPPbfGOtJWW21UryOiBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:a6:69:75:21:63:18:4a:55:b5:40:99:f7:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Apr 19 17:00:33 2025 GMT
Not After : Apr 20 17:00:33 2025 GMT
Subject: CN=91f6e41ed06d0d0ea67025be2473dec3ebfd08cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:87:a5:89:f6:40:c0:fe:36:26:c8:4a:7d:
39:d5:35:db:58:2b:2b:cb:3c:d3:e5:5a:2b:23:4a:
b5:38:28:b3:67:d7:79:65:91:f1:40:c5:7a:10:ca:
a6:19:b4:6d:c4:37:28:0f:80:df:35:84:ac:ec:34:
f6:d5:4d:3a:32:72:fa:d1:cd:94:8d:2a:fb:7c:27:
8d:86:25:ca:12:fb:f4:e7:ff:52:65:0c:70:17:5a:
28:81:ce:b4:a2:0b:19:35:76:d0:7e:da:1e:eb:04:
e3:98:22:f7:12:33:6a:87:6f:58:5c:3a:e2:87:9d:
87:a9:d6:d3:dd:e6:ae:7f:79:8f:b4:b6:a9:c9:51:
0d:a8:6a:47:e5:dd:d2:c3:b7:27:c1:64:aa:dd:97:
cb:28:f9:c0:b8:fb:d1:7b:a8:ee:64:30:ff:8d:62:
88:f5:17:bf:6b:28:e3:11:1d:e5:78:c6:82:14:01:
30:b5:80:64:8e:cd:9b:fe:ad:f4:f5:63:21:42:7d:
f8:61:1e:6e:4b:26:d7:5b:9f:b8:d2:ca:71:07:f8:
39:ad:b6:cd:8e:d2:e4:df:8c:5b:69:42:ce:33:37:
60:22:25:4e:3c:f0:f7:68:c6:8d:58:3b:14:f5:c2:
37:0b:b9:ca:ce:3c:ea:d0:ce:96:a5:2e:a9:1b:25:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F6:E4:1E:D0:6D:0D:0E:A6:70:25:BE:24:73:DE:C3:EB:FD:08:CD
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:36:b0:ed:1c:92:e4:cf:8b:c8:69:98:a2:5f:61:49:85:
a0:9f:5c:04:f9:2f:0a:22:08:80:c3:15:94:c1:0f:e9:d4:60:
4c:31:f9:b2:76:1a:bf:d6:64:f9:66:c8:20:2e:d0:a9:7e:a4:
d6:95:03:24:2d:40:42:14:be:a1:33:d7:dd:3a:1d:d2:dc:c3:
f6:f2:77:44:4e:19:88:63:04:9a:0b:65:58:42:a9:83:97:6a:
e6:69:8e:db:e7:79:d6:9d:f6:fb:8c:c7:07:f1:0b:e5:f5:b3:
4b:4f:b2:da:db:ae:db:ca:36:cd:f1:f9:5f:b5:cb:df:b7:d3:
df:47:b4:60:12:2b:e7:70:e6:bb:6d:e7:38:6f:61:38:73:05:
64:96:de:de:13:34:7e:59:3c:99:91:33:1a:6a:9b:ee:50:18:
ad:a4:a4:42:ef:08:8c:35:98:e4:3d:37:1e:0a:c0:49:ff:83:
45:7b:cf:84:fd:46:31:e4:99:c1:f7:c7:f8:f0:37:29:37:29:
96:20:ff:f4:b9:8c:30:65:f5:cd:20:ca:b5:e8:08:09:fa:fb:
30:b7:07:69:77:34:ef:f4:14:76:08:7b:bd:8c:4d:fc:c9:43:
bc:79:af:56:4d:69:ab:16:ae:a1:af:f3:94:2b:f6:b3:19:61:
48:b2:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:21:07 2025 by rpki-client