Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: amWLUyT7wfRM5JGArMYAKt2R5lslfHr3UHstKCtp9mc=
Subject key identifier: AC:4B:67:81:00:89:5D:BE:38:B6:20:E6:94:97:A6:36:32:12:56:E7
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0196561312AC03DEB21F704F1950B2E3D8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 094C
Signing time: Mon 21 Apr 2025 02:00:12 +0000
Manifest this update: Mon 21 Apr 2025 02:00:12 +0000
Manifest next update: Tue 22 Apr 2025 02:00:12 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: PKRgLAPCYc23rxrjpcy2jzDCO9HGkAHn7pMYSV+tWug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:12:ac:03:de:b2:1f:70:4f:19:50:b2:e3:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Apr 21 02:00:12 2025 GMT
Not After : Apr 22 02:00:12 2025 GMT
Subject: CN=ac4b678100895dbe38b620e69497a636321256e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:a4:1c:d1:30:f8:30:34:de:8f:e4:73:03:
ed:59:64:a9:42:f6:55:dc:ba:b1:51:75:65:00:7a:
39:05:12:05:42:20:29:3b:88:de:a1:86:9f:c3:bb:
e1:47:6d:1e:ad:81:7f:75:5b:41:af:0d:67:f2:8d:
71:5c:15:e7:c2:5d:4a:a3:9a:2e:1b:e4:ee:ad:6b:
4f:26:f6:6a:45:11:1b:be:f6:59:cf:ca:62:51:24:
e5:08:b7:1e:15:06:a3:1a:95:a8:1b:03:43:eb:13:
c9:6e:e8:ca:d0:f5:ab:f4:54:5c:b2:7a:7c:ee:a0:
97:12:5b:ec:66:4b:85:ac:e2:48:b8:60:d4:bb:cb:
70:80:fa:64:bd:54:57:8d:e8:bc:95:25:07:b5:03:
12:dd:fb:cb:44:cd:fd:a1:dd:3f:01:4e:77:fc:7c:
3b:37:54:18:a6:14:91:16:3d:40:4f:37:5a:ed:2e:
cb:1f:7b:b5:2d:45:45:07:13:6b:2b:68:f7:17:4b:
2d:8e:4d:9a:4d:ee:be:f5:35:b2:a2:52:8f:34:11:
63:54:d3:f4:97:ee:13:a8:80:d2:54:b4:de:c0:24:
76:3d:58:19:2d:ec:f2:0e:e4:89:c0:48:b8:03:27:
4f:97:da:0e:5a:20:e0:16:ac:22:9d:48:3b:66:19:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:67:81:00:89:5D:BE:38:B6:20:E6:94:97:A6:36:32:12:56:E7
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:57:c1:14:ef:15:06:b3:8a:01:da:3c:5c:b3:be:38:46:
49:43:3a:74:79:8e:a7:5e:b6:7d:aa:67:8f:9d:80:98:ac:30:
60:92:36:2a:8e:6c:c5:e0:62:ae:7b:8c:23:20:b8:3c:a8:c3:
5d:fa:2a:ea:4c:fb:84:be:9c:31:a0:18:6a:e0:5f:15:c2:13:
b0:93:1b:1b:9d:53:bd:7c:d7:44:7c:22:6b:62:5c:04:21:56:
46:53:58:19:ab:7a:fb:7f:94:bb:2a:28:21:fc:a9:14:50:24:
e4:81:68:21:93:26:93:e5:15:fc:cc:6c:5c:96:2d:ef:7b:7a:
22:bf:f5:48:a8:17:5e:4c:3c:c1:71:7b:57:f4:fa:aa:dc:03:
4b:6f:ab:a4:28:a4:05:c4:9f:02:46:57:52:01:2e:0d:08:d9:
3e:89:c0:8e:0c:f5:2c:1f:00:23:6d:cb:c8:ca:6c:ed:60:1e:
48:aa:5c:0e:10:e8:c3:a2:a3:54:a2:b8:5f:ff:91:ad:56:99:
5f:c8:95:19:14:cb:34:cf:77:e9:6c:a5:ab:cc:82:36:69:dc:
8b:c5:5a:65:bd:f3:69:ee:08:79:11:a5:1f:79:d7:b2:1b:0c:
d3:99:82:88:34:df:b1:09:97:9c:15:ba:34:c1:18:2f:6d:e0:
09:6f:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:05:38 2025 by rpki-client