Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: AsPz13FMtJoj4h3cuI4h9DQXdc63/+XBG1FpTTqkVhs=
Subject key identifier: C3:2B:B8:58:35:01:0F:67:DB:69:07:D2:C0:9E:53:0D:A8:2E:B3:EC
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0196594B82E2CFFACF1E3362ECE88D6AECB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1492
Signing time: Mon 21 Apr 2025 17:00:42 +0000
Manifest this update: Mon 21 Apr 2025 17:00:42 +0000
Manifest next update: Tue 22 Apr 2025 17:00:42 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: pjHQMvoGvdn2wo75WWGKt8D9vftveseFrFkK6Z4hZ3w=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:82:e2:cf:fa:cf:1e:33:62:ec:e8:8d:6a:ec:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Apr 21 17:00:42 2025 GMT
Not After : Apr 22 17:00:42 2025 GMT
Subject: CN=c32bb85835010f67db6907d2c09e530da82eb3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:16:1e:da:82:78:7d:ed:db:f1:01:df:31:
45:4d:1e:a4:5a:e3:13:61:e2:b3:55:c2:d6:33:47:
e0:b2:3d:86:f0:55:e8:af:cc:29:34:7d:7b:c1:11:
8f:b0:d0:59:97:00:77:ef:94:d8:7b:5f:ba:85:9c:
da:3e:45:c4:73:c2:f3:bf:9c:3d:39:fd:4e:5a:40:
0f:fc:33:8c:26:2a:b9:85:ab:7d:d7:bc:a3:1c:2f:
57:3e:11:7e:2e:fa:aa:8a:3c:e8:63:5f:cf:cb:37:
57:26:b8:c2:c1:a6:87:a1:f1:30:f4:3e:67:ac:ad:
69:23:7b:a6:b4:ce:97:4d:89:2a:22:e1:fe:16:d2:
98:73:32:a5:b0:4d:80:af:5c:69:a9:ed:7b:b5:cc:
77:f4:22:ff:2d:74:04:b2:3b:00:2e:29:aa:44:5d:
bd:3b:01:b9:a3:82:87:06:e5:fe:87:c7:47:79:2a:
d3:72:b3:ee:73:b3:77:ca:03:79:3b:96:83:15:33:
47:de:03:10:8b:fa:23:1b:ec:0c:50:3e:4a:f1:03:
d0:fc:b9:c1:51:a8:31:44:9f:f4:ca:99:09:79:e7:
40:56:7c:f3:06:dc:0c:fa:bf:b0:94:5d:34:10:71:
01:4b:a2:db:b6:b1:ea:f0:e3:30:d7:24:d7:9d:f1:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:B8:58:35:01:0F:67:DB:69:07:D2:C0:9E:53:0D:A8:2E:B3:EC
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:53:3a:1b:33:04:5d:d6:f9:7a:91:47:b4:5e:a4:65:a0:8f:
e6:f5:92:ee:9c:22:9f:4b:ce:d0:ce:a3:9d:b4:da:18:f0:ee:
78:d4:b2:c1:f4:1d:cb:4b:c4:3f:f0:66:80:81:42:74:4e:5f:
fc:e5:9b:9e:31:ed:b4:9e:80:d1:8b:a6:00:86:be:3e:44:8b:
90:b0:41:01:f7:da:64:4e:5a:86:2c:a7:49:b2:4f:ec:bb:8f:
44:a7:80:3f:b3:f9:cf:68:40:9f:73:73:c0:9c:fd:25:08:10:
07:13:f1:ac:6b:c6:6b:2a:13:b2:8a:a2:64:93:bb:3b:8e:85:
30:5b:e7:d5:0c:23:b8:09:f4:da:31:02:cc:84:b8:8f:b7:b3:
24:ae:74:8b:25:4a:ef:f3:41:ae:e2:19:9a:ea:b9:81:63:2c:
7c:c9:f9:ad:b0:9b:ec:a6:b2:65:3c:5d:bf:6b:e1:c7:52:0e:
83:ff:6d:42:3a:e8:9d:17:71:e5:2f:e8:14:51:7b:1f:4c:a9:
c8:ec:99:d7:6b:87:bb:a8:3a:23:b3:5f:bf:dd:ed:a4:72:62:
88:96:95:81:82:f7:0f:73:6b:81:cb:7f:0a:2f:b8:05:d7:9d:
14:6c:e7:12:83:a8:2c:23:33:08:2b:ba:5e:2d:31:41:82:02:
0e:cc:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:08:04 2025 by rpki-client