Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: j4QEmYzZwaQlRTkF/rc8YrXHVCkPnPiJTI1cE4qXu3A=
Subject key identifier: D1:18:6F:1C:3D:E0:3C:4C:FC:6B:CD:CB:33:3D:BF:C6:2F:33:9C:28
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 01965A94BDEF3B7BE9F35A0B1FAFB17A388C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1248
Signing time: Mon 21 Apr 2025 23:00:19 +0000
Manifest this update: Mon 21 Apr 2025 23:00:19 +0000
Manifest next update: Tue 22 Apr 2025 23:00:19 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: fbmMnWR7UTPI6pXAjmU05hvY78UQs35ohE+aqzGMgFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:bd:ef:3b:7b:e9:f3:5a:0b:1f:af:b1:7a:38:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Apr 21 23:00:19 2025 GMT
Not After : Apr 22 23:00:19 2025 GMT
Subject: CN=d1186f1c3de03c4cfc6bcdcb333dbfc62f339c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:43:de:ac:8c:cf:c4:18:0b:b2:c7:e6:37:
74:f2:b4:6e:3a:d9:91:9a:71:49:3d:78:33:b1:ed:
79:7a:4c:13:fe:2e:09:8f:e6:75:6c:ee:be:a9:88:
79:8f:6c:68:2a:68:c5:e9:c9:dd:7d:cd:34:3d:b0:
a2:b3:0b:7f:e6:3b:de:14:d9:fe:00:7f:28:df:93:
65:3d:5e:86:0f:2d:57:a4:a3:9c:23:f5:07:4c:33:
d6:13:14:3e:f6:0c:74:7a:9a:af:29:cd:41:9c:1b:
ec:93:be:53:2d:18:e1:af:de:c0:3e:e1:a3:66:63:
28:5d:b8:30:f8:a2:a4:3f:62:03:e8:64:3d:12:5c:
fb:fe:e6:e5:dc:37:e0:94:3f:a7:2e:4c:a3:20:29:
32:45:89:ce:b2:e1:08:94:21:06:dc:c7:5a:81:ec:
ce:78:0f:27:02:fd:18:a0:d0:70:d4:16:5a:a5:2c:
b6:d2:13:0e:0d:bb:60:6c:4d:d8:f7:94:94:63:0a:
30:2a:a3:ef:86:fb:e8:20:f2:fb:09:c9:ce:86:e0:
10:f1:77:aa:72:0c:32:e0:b2:da:da:36:ab:ae:c9:
cf:6d:11:25:7c:e7:87:de:85:05:bc:aa:22:71:a3:
ba:15:4c:e0:d0:d8:76:43:12:e3:4a:f9:88:28:ce:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:6F:1C:3D:E0:3C:4C:FC:6B:CD:CB:33:3D:BF:C6:2F:33:9C:28
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d4:93:06:f0:c6:ed:9b:88:a1:fa:16:88:5b:a7:28:07:34:
63:d8:97:30:a3:d1:bd:2a:dd:0b:6f:21:35:e7:cb:3f:4f:81:
59:ea:59:5e:66:97:cf:88:84:64:6e:15:25:34:57:14:c7:c0:
0d:cf:ce:ce:24:0b:23:1b:9a:4f:95:92:d4:e4:21:1c:6f:6c:
b0:e4:59:b9:20:b6:7c:e6:4d:f4:59:d4:85:1b:d3:47:8a:dd:
d9:12:a7:98:7b:77:81:bc:c2:de:df:fd:c5:2f:de:9a:a5:5a:
db:6f:d5:ec:ee:58:6f:7b:01:e4:b5:62:91:08:6f:3d:a8:9a:
92:bd:54:82:18:d5:45:52:8d:35:23:b9:7f:b1:70:9a:39:10:
d0:55:f5:b4:4a:9d:d4:96:17:9c:32:bf:83:8a:b5:c7:5e:a4:
c7:b6:eb:cc:da:8b:27:61:40:e3:1c:ce:64:a9:8a:f9:a6:76:
4d:a3:48:5a:05:64:0c:f1:3a:d4:f4:fd:d9:c1:13:20:c9:ea:
c7:09:0e:d4:a0:c7:e2:89:b3:74:fe:7b:d7:8d:06:39:ff:c5:
74:7e:d2:d2:02:bd:f2:48:12:2d:41:ba:45:f4:41:e4:b7:2d:
76:c5:7f:61:3c:ef:36:a4:8c:eb:28:9a:53:46:ff:35:6e:41:
d9:df:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:30:15 2025 by rpki-client