Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: GPIatRzyO/lejKCx/f6uhZJgqsVHFQond27sKWwnnO4=
Subject key identifier: 38:8D:B5:48:3A:70:94:87:05:37:AC:61:57:69:FD:D8:61:17:48:9C
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 01965B709EA307BD390668389DB2E9451E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: EC
Signing time: Tue 22 Apr 2025 03:00:29 +0000
Manifest this update: Tue 22 Apr 2025 03:00:29 +0000
Manifest next update: Wed 23 Apr 2025 03:00:29 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: 9tI7YF2VRkz6dj7IV00HOm5sFGkQaTQ/4nrzJ0CY5a4=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:9e:a3:07:bd:39:06:68:38:9d:b2:e9:45:1e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Apr 22 03:00:29 2025 GMT
Not After : Apr 23 03:00:29 2025 GMT
Subject: CN=388db5483a7094870537ac615769fdd86117489c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:d3:9b:ca:25:31:d3:ae:23:4c:d3:52:39:
1b:0d:4e:9a:b1:4b:6d:8a:5e:e9:d6:7c:b3:02:2e:
20:d0:3b:cb:ad:13:7e:55:ae:83:4b:68:b8:d2:c8:
eb:9b:b0:b4:96:cb:ad:ba:0e:e7:9a:05:f2:ba:57:
14:89:ae:c4:33:63:74:8b:f4:32:fb:dd:e6:f0:61:
67:e8:12:48:cc:09:b5:59:a1:3f:32:cb:7e:6c:86:
7f:ee:db:d5:cf:e8:23:f1:4c:59:f1:31:f5:d4:8e:
14:29:1b:4c:35:ca:5f:b8:3a:44:83:bb:0d:bb:69:
c8:27:f5:d5:81:00:88:3e:e2:63:80:c4:88:df:77:
71:1b:ef:be:fe:59:57:46:7e:06:21:30:4f:98:b3:
57:46:31:7b:35:b5:cd:f3:88:c9:85:3e:8d:c6:2e:
e6:9e:36:ad:ed:f8:11:8a:cc:1b:05:d2:b7:85:4e:
49:c5:41:c4:a3:1e:71:80:15:2c:d8:9e:54:95:57:
bb:4b:2c:34:f4:06:15:68:9a:c6:f8:1d:d0:c3:7d:
a3:fd:be:ba:e0:0a:ce:ed:30:c5:85:9e:9a:4c:2d:
0f:67:d3:d1:ea:e7:08:bf:c7:c4:5f:9a:d4:8d:c9:
39:09:3c:07:e3:7c:fa:87:b1:cc:72:19:cd:a0:97:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8D:B5:48:3A:70:94:87:05:37:AC:61:57:69:FD:D8:61:17:48:9C
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:91:13:1c:ae:db:dd:ab:30:be:62:da:8e:2a:7f:73:43:5e:
a4:2c:1d:b8:c0:e8:bf:5a:5a:49:61:94:7f:4e:88:48:37:33:
d8:79:29:86:85:8a:9a:e6:8b:49:1c:56:c7:fb:bf:f3:b2:43:
db:74:fe:0a:45:16:05:a2:c3:e3:34:25:b5:6b:4b:4d:2a:91:
15:fc:f3:ca:d4:eb:30:7b:37:27:48:b4:da:1b:f4:82:ee:1d:
94:a2:8e:15:57:05:4c:7f:91:2f:0e:fc:d0:e6:7c:c0:16:c0:
53:4f:7e:3a:10:8b:3c:2f:28:8d:96:30:a7:01:8a:a0:c8:1a:
84:59:97:6a:7f:81:b5:f2:7a:aa:d4:17:71:a1:c7:28:0f:35:
fa:eb:63:51:69:46:83:5f:3b:b4:b8:93:5a:b1:f5:12:62:a7:
e7:8e:18:c6:44:b3:04:a1:2a:36:64:49:ba:9b:3c:eb:29:6b:
5b:00:fe:65:fb:fc:40:37:61:f2:98:0d:09:49:88:9b:e9:4c:
41:cb:6b:d5:d9:50:0f:e9:95:1f:d6:2b:a8:bb:1b:cd:a5:39:
25:26:d0:0c:d2:e3:49:a3:a6:ba:29:bc:03:20:d0:2c:23:56:
c9:0b:4e:a5:78:1f:d4:95:4c:b9:8e:d3:f0:80:34:14:c6:74:
c6:fa:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:20:52 2025 by rpki-client