Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: Efu89Zro/dHzTvq/2Ai16g5tiLVVC49lGJjn78lYEww=
Subject key identifier: 78:B3:8C:F7:17:00:79:2E:22:EF:87:A3:91:9C:C0:6F:04:50:B7:66
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 01965A5DC5F1B37BBD3236AEE377E1A47B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 22:00:17 +0000
Manifest this update: Mon 21 Apr 2025 22:00:17 +0000
Manifest next update: Tue 22 Apr 2025 22:00:17 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: NiT+1L2x2PEX4AeRtI+AIQ1PDoRUB9jggnmfR3DCmIU=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:c5:f1:b3:7b:bd:32:36:ae:e3:77:e1:a4:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Apr 21 22:00:17 2025 GMT
Not After : Apr 22 22:00:17 2025 GMT
Subject: CN=78b38cf71700792e22ef87a3919cc06f0450b766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:01:20:b3:69:27:5c:a6:1e:14:6d:54:58:
3d:6d:78:cd:0f:d5:51:d4:63:8f:ed:9f:11:a4:c9:
03:fa:ef:ab:a8:63:85:44:15:36:36:a4:ba:d3:31:
41:ba:13:8f:2e:37:55:52:d5:24:f5:a5:f1:a3:ca:
c9:59:5a:fa:2b:b6:ef:38:7e:f8:88:b7:73:b8:0f:
df:7f:a3:41:d1:9b:4d:36:69:66:a6:56:9b:2e:e7:
d5:2f:f6:81:98:1a:c7:e1:79:3e:bc:a8:7b:5e:c3:
1a:f3:2e:82:be:f4:09:2b:5e:1f:24:63:4f:25:b2:
a0:35:96:c4:1c:02:ea:3b:97:db:cd:f0:29:0e:03:
a5:cf:c6:70:a6:db:49:fb:09:de:19:04:72:ef:da:
04:bd:d3:a7:cf:ad:00:2d:39:5b:25:b2:64:a3:9a:
95:fe:0e:05:f8:7d:79:e2:a7:de:b9:c1:42:4d:ac:
35:c4:53:2a:a7:94:2e:6c:3d:4e:2f:e3:a2:05:61:
b6:e8:f6:20:58:57:60:c2:45:53:93:29:b3:02:07:
8d:46:fa:7f:ef:2c:6d:07:30:2a:34:1c:fa:df:b7:
9a:d6:43:5a:69:5c:34:35:45:6f:df:4a:b3:a4:60:
78:bb:47:be:f0:a4:7c:13:60:df:7d:34:a5:c2:bc:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:8C:F7:17:00:79:2E:22:EF:87:A3:91:9C:C0:6F:04:50:B7:66
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ca:07:4f:51:62:dd:76:b3:19:1f:70:a2:ae:a2:d9:1c:7e:
7c:97:f1:d1:ec:a2:7a:f9:82:be:67:da:c1:2e:1e:d3:43:d9:
38:fe:8a:71:4e:a6:ab:f0:5d:a1:15:11:18:cc:88:9a:6a:42:
27:8e:66:e3:5b:f2:34:5a:37:27:43:3a:82:c4:11:bc:a6:23:
af:71:aa:4b:82:13:8a:12:7c:d5:aa:8e:bc:c4:ac:63:3c:5f:
53:29:86:30:ac:66:59:c7:56:42:a3:ca:b6:a8:6c:7c:0f:8d:
01:32:e5:0a:f5:bf:fb:ac:0c:5e:8c:32:96:6b:be:5a:6a:a1:
0a:46:56:8f:85:18:fd:74:a2:a9:4a:6f:e7:8b:64:8a:9b:8b:
1d:c5:96:44:92:10:29:7a:e9:07:61:4c:56:ed:78:31:9f:43:
27:43:82:7a:83:cd:ec:ac:88:ab:0a:db:9a:2a:fe:98:1c:2a:
2c:84:f5:d0:71:55:f0:43:04:80:87:fe:ab:0d:f2:67:d5:49:
33:fa:24:1c:68:a5:82:82:44:af:d9:d1:34:94:2d:6a:9a:23:
fa:25:e7:6a:c0:70:d6:58:9e:58:fb:e8:03:71:31:5a:de:ba:
eb:cb:34:08:e4:fe:0d:d1:5c:f5:56:ac:ed:c1:05:f8:a1:6c:
49:ca:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:58 2025 by rpki-client