Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
File: YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft (raw, json)
Hash identifier: 0hvK39/iMcdNXvi2Tj06aozSpskK60/TWuBsGpDEDVY=
Subject key identifier: C0:B9:77:78:02:73:B4:76:D0:AB:06:98:67:2C:80:93:B2:39:70:25
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 01960DFAD98DBDA6EF390D1709EB82298E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
Manifest number: 14FF
Signing time: Mon 07 Apr 2025 02:01:05 +0000
Manifest this update: Mon 07 Apr 2025 02:01:05 +0000
Manifest next update: Tue 08 Apr 2025 02:01:05 +0000
Files and hashes: 1: A3E9_0So1p68noM0QrlWLwSLDPk.roa (hash: KQBTWnGwwV4bwGGk8PYYtdjAlC6Mu1JxzVvAgRxQl4g=)
2: YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl (hash: kcRd1/jSEexD2n9DqeaOIVawrKL8q2WFcaV9qXRENw8=)
3: bnAPUFuvdJnnmwNhr7IXOo7sGhw.roa (hash: 0IawnZvl2KO6IBFWtgqQ5CQJq1k/KdlykID8F7AM6kQ=)
4: qqE_Ngb0aIs9tQpiJ_Nq_h7NWR0.roa (hash: WxGoQEuON6PfFsBakqCHNtSE8H3fTHChCkzgmpOGNbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:fa:d9:8d:bd:a6:ef:39:0d:17:09:eb:82:29:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Apr 7 02:01:05 2025 GMT
Not After : Apr 8 02:01:05 2025 GMT
Subject: CN=c0b977780273b476d0ab0698672c8093b2397025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:2f:4d:b0:9d:16:2d:04:f7:b8:cb:01:1c:
97:10:8e:63:0c:b2:a2:c2:49:b2:28:42:9d:02:3d:
f1:95:43:33:e8:46:20:72:c3:d9:a3:ec:80:d1:bc:
dc:3e:bd:cb:ab:a6:0a:33:33:4d:c4:e4:5b:e6:e4:
61:ba:1c:a3:d8:cb:2b:6d:c6:91:99:c9:d6:2a:65:
9d:e0:c6:5e:a7:b0:13:4b:e7:ab:55:2e:b1:2c:ac:
d3:6b:9c:44:7a:27:8f:a1:8a:7d:23:67:9a:9b:d0:
92:df:0f:27:ee:f1:39:63:ed:1e:bf:88:c2:48:d6:
c0:90:15:06:3e:9e:a7:15:d1:bd:8e:34:de:8d:10:
99:70:1b:b2:59:bb:52:b8:a9:94:44:b7:c2:53:ad:
66:a7:b3:7c:42:c7:64:a0:7a:9d:7f:70:0a:25:5a:
32:09:63:a3:e9:b4:31:45:7f:6f:bd:2e:a3:f9:32:
27:cc:ee:56:5e:1b:d6:de:1c:74:87:17:e5:f4:2e:
10:71:67:db:92:f7:a1:d6:78:e7:26:3d:37:eb:3e:
78:35:c0:3b:20:fd:33:39:b0:38:b9:e7:ce:32:7a:
b6:9e:c7:a2:08:f4:e1:b2:a9:43:14:a6:35:72:67:
37:4c:15:c8:0a:cb:83:24:74:c7:da:98:02:95:5f:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B9:77:78:02:73:B4:76:D0:AB:06:98:67:2C:80:93:B2:39:70:25
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1b:b8:99:f1:ad:df:9e:ac:66:81:05:9a:e1:75:d8:e0:b5:
a8:5f:00:41:30:f2:9c:2a:da:5d:1c:69:4c:b9:38:e5:9f:72:
69:e0:59:2c:36:6c:28:2e:96:1a:a2:c1:5c:aa:b7:a1:89:36:
89:41:cf:24:b2:5d:2e:3e:a1:2f:36:c9:27:ff:2f:c2:e0:bb:
1e:2a:27:0f:4e:89:60:03:a3:91:70:ad:8b:61:fc:d8:34:7f:
c9:15:5c:c3:dc:73:da:4b:42:f1:68:44:56:57:6d:c1:ed:e2:
5c:d9:0a:cd:6a:84:d4:7d:98:85:11:66:5f:a9:4c:87:59:71:
f0:f5:17:92:2c:a2:50:1e:2d:64:60:d7:d8:18:4d:46:28:f6:
5a:64:c0:62:5f:bc:6b:97:9a:2a:f6:58:d8:41:15:22:ed:92:
62:72:5e:bf:e8:86:61:28:61:d6:29:1c:84:3b:e1:83:ce:cc:
bb:2c:49:ac:63:29:d4:fe:e2:75:4a:0f:be:4f:17:7d:49:07:
72:2b:29:24:60:98:1e:1d:04:7d:ff:59:f7:94:ef:8e:96:43:
72:70:96:98:fd:f9:5e:ab:a0:e5:6a:8d:5e:c0:63:b8:c7:cb:
0e:06:fe:89:1e:89:15:2d:49:4c:e0:7d:54:6b:99:ea:1f:4e:
fc:b9:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:11:04 2025 by rpki-client