Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File: Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier: rIlMLRN5jNMYoXcAcHC7lccVgNxQmTP4PGZID1gOeYc=
Subject key identifier: 21:A8:65:74:9A:8A:C5:D1:43:B8:14:96:1F:BD:E1:C2:63:E2:3F:11
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 01964EFE7AFD11DC404B822869E03BF67A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number: 11FF
Signing time: Sat 19 Apr 2025 17:00:22 +0000
Manifest this update: Sat 19 Apr 2025 17:00:22 +0000
Manifest next update: Sun 20 Apr 2025 17:00:22 +0000
Files and hashes: 1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: aVc/N8wxQNMAs2j9C1oNaaD8PWQSSUDiMiYt0kQCn8I=)
2: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (hash: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:7a:fd:11:dc:40:4b:82:28:69:e0:3b:f6:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Apr 19 17:00:22 2025 GMT
Not After : Apr 20 17:00:22 2025 GMT
Subject: CN=21a865749a8ac5d143b814961fbde1c263e23f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:3a:91:72:09:2b:68:59:ce:c9:1a:4f:27:
e1:90:cd:a6:e8:78:25:cb:46:da:4a:71:ae:6f:f2:
b1:17:a1:df:92:33:bc:96:ba:04:5b:64:18:bc:c2:
40:4b:8f:ad:d6:70:0b:38:cd:ed:0a:88:6a:24:fb:
ff:1e:ef:f7:8e:a6:97:be:b8:b1:73:e6:af:52:32:
73:44:a0:d5:10:e7:b4:f0:c8:02:5b:46:03:a0:a2:
73:d8:bd:58:e1:95:31:81:3d:01:d4:76:14:7c:c9:
d4:52:88:0b:8f:50:ad:6c:b0:a5:65:62:d5:3a:0e:
43:81:72:64:49:e6:0f:12:23:e8:71:32:fc:16:17:
d5:84:e1:84:35:d7:dc:14:28:e9:a7:4a:ff:4a:a4:
fd:2f:c9:b9:05:3b:e8:5f:68:12:86:c8:9d:0b:d1:
59:d2:ff:00:df:02:8d:41:af:a0:8f:c2:b6:b8:a1:
69:1e:03:f5:eb:31:6b:bf:3c:c5:92:de:eb:e0:56:
c6:4d:c1:98:37:ba:0e:82:7c:39:bf:08:ff:d2:a4:
fa:ea:ba:d6:87:4d:38:da:6a:69:2e:f8:b0:d9:90:
d4:83:89:99:ef:49:58:68:c5:58:79:90:89:df:9d:
91:46:20:a5:84:31:3c:da:8b:53:86:93:0b:4b:ba:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:65:74:9A:8A:C5:D1:43:B8:14:96:1F:BD:E1:C2:63:E2:3F:11
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:49:44:9a:5f:81:0e:7a:03:dd:40:ed:3b:16:37:ce:22:
d3:1f:f6:cc:c3:43:fb:50:1b:e4:fc:5b:82:f1:54:54:ee:36:
3b:c8:be:ca:b6:32:30:86:36:71:ab:96:5f:1b:55:63:96:ff:
3e:82:fc:44:b7:8a:e0:08:1c:97:7a:d6:2b:31:b6:07:fa:ed:
0b:2e:8d:c1:b6:0b:92:20:16:b2:98:ad:b3:7b:22:01:06:b1:
f2:9b:a4:1c:4c:64:a8:dd:23:44:48:cd:bb:43:77:95:9c:8c:
00:74:1c:71:09:e0:e2:15:2c:c8:f5:57:cf:ee:e2:66:46:18:
e0:f6:c8:1c:56:52:5e:64:9d:7b:ca:97:0f:d9:3b:78:38:ec:
90:cf:f6:37:0b:85:cf:c4:82:fa:02:29:85:be:7b:07:21:1f:
26:96:d3:b2:48:c2:23:11:39:2c:52:70:b6:f2:9b:75:04:b0:
dc:99:0f:fe:ba:21:23:f4:1d:fc:9c:30:b9:82:4d:e6:2e:7e:
e1:f1:35:5e:df:1c:61:c8:8d:f9:79:97:3e:2b:7d:83:ea:cd:
0c:f2:88:f7:4e:93:7f:35:97:eb:06:de:57:2b:88:33:3e:89:
1d:ff:e8:9d:d2:c5:26:66:0e:89:45:ed:8f:1a:ef:44:0d:8d:
30:ef:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:06:54 2025 by rpki-client