Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: Hi9i0iGdDV22KYwX2Pz1dTYUUKyk7+yxUyJTTXo8a24=
Subject key identifier: 4A:AA:63:EF:46:D1:BB:60:9A:AF:A1:10:7D:AA:78:91:3A:D1:93:F8
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 01965492BEA8F90DA492FBD193F0FEFBB8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 08EB
Signing time: Sun 20 Apr 2025 19:00:25 +0000
Manifest this update: Sun 20 Apr 2025 19:00:25 +0000
Manifest next update: Mon 21 Apr 2025 19:00:25 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: JZrIpOUMPAvHOydyyndzl7KxNbgyZToWt/ZRCiIiSDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:be:a8:f9:0d:a4:92:fb:d1:93:f0:fe:fb:b8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Apr 20 19:00:25 2025 GMT
Not After : Apr 21 19:00:25 2025 GMT
Subject: CN=4aaa63ef46d1bb609aafa1107daa78913ad193f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f2:56:61:fc:ca:30:7e:81:5d:49:87:52:f0:
05:b5:1a:90:29:5a:1d:25:aa:5c:2e:ca:39:ed:69:
43:90:3e:00:40:ba:2d:d9:25:fd:60:52:da:f7:df:
e6:4d:ea:d6:37:be:75:d9:9f:47:15:b5:8f:ba:31:
04:1b:ef:03:06:7d:a7:a2:e4:88:59:fc:28:ac:f1:
77:36:cc:f1:4f:a5:72:74:bd:fe:7d:bf:ed:4c:1e:
7c:3d:ee:ab:4f:80:cf:2f:c4:be:b4:89:d0:63:39:
25:02:20:ce:07:95:9b:2d:4d:6d:65:6e:64:93:d1:
32:ca:a2:cc:66:05:39:dc:84:b7:82:10:d8:82:bd:
33:03:96:34:84:64:14:2a:00:11:d3:81:41:6a:6a:
0b:92:25:7c:90:d9:02:a1:de:f5:ef:d9:02:bf:12:
28:22:82:5c:83:80:ff:a6:5c:47:37:97:93:f9:96:
a3:78:9e:ee:98:59:9c:c0:00:f4:9e:c6:0c:fb:a3:
f6:e9:40:7b:df:b8:a2:8b:3a:c0:aa:45:44:0a:52:
8c:2a:6b:19:fb:51:88:db:2c:6c:dd:46:c1:98:70:
15:85:47:ba:37:55:3a:78:65:b9:21:0e:22:68:c0:
fc:6b:ea:48:a5:83:76:a2:4c:94:65:5f:47:6f:54:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AA:63:EF:46:D1:BB:60:9A:AF:A1:10:7D:AA:78:91:3A:D1:93:F8
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:72:6f:64:50:42:bb:84:b1:b0:b0:3c:f7:cc:60:65:04:
98:3e:d8:b1:d3:01:e7:cc:0c:b2:a7:13:82:f9:3a:95:6b:c0:
fd:7b:4f:1a:8f:c3:08:37:82:25:4e:c9:88:6f:7e:07:2b:3c:
b3:5f:21:22:e6:98:66:17:46:61:76:00:5d:2b:32:56:33:4f:
c9:8c:a6:48:55:2c:de:39:73:84:12:d3:6d:28:97:06:d4:c3:
76:40:e9:da:6d:ef:79:7c:40:17:ba:76:50:bc:85:94:b5:63:
5f:a4:59:f6:cc:e9:f4:69:76:6a:b6:4c:0f:cb:e9:4a:08:d8:
59:b2:32:8e:d6:a9:83:d6:1d:08:b1:e9:e1:cf:1b:a6:89:dc:
ab:8d:5f:9f:2e:a1:36:62:27:0e:42:b2:7c:8b:db:d5:79:b3:
5e:33:e2:cd:3f:74:0e:7c:81:d9:0f:94:0d:3e:58:0b:cb:2b:
08:76:f5:04:73:31:0e:71:d6:82:d0:a7:15:e4:2c:9a:0d:04:
84:52:13:26:4e:09:4c:85:f2:96:77:37:a0:87:27:59:86:e7:
07:51:a9:05:ea:a3:f9:42:dc:c5:47:eb:65:26:ca:ae:21:01:
40:07:48:25:3f:3e:bf:9c:df:fa:93:55:be:b8:70:3f:a2:b6:
bb:25:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:22 2025 by rpki-client