Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: oeKCwXhSmxKgQThvwZi1XxLGnc+SxWBKP8l3VWtyH94=
Subject key identifier: 1A:BC:70:51:69:8A:15:B8:DF:46:4C:A2:36:DC:77:0F:03:EF:26:9C
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0196553844F85064221519ABF5FA6623D30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1399
Signing time: Sun 20 Apr 2025 22:01:13 +0000
Manifest this update: Sun 20 Apr 2025 22:01:13 +0000
Manifest next update: Mon 21 Apr 2025 22:01:13 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: iUCB5ggTCL0RUKe0r4vWFCTh6d0IuaGxrrizRwla9aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:44:f8:50:64:22:15:19:ab:f5:fa:66:23:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Apr 20 22:01:13 2025 GMT
Not After : Apr 21 22:01:13 2025 GMT
Subject: CN=1abc7051698a15b8df464ca236dc770f03ef269c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:bf:81:0e:7d:04:41:48:86:7d:bf:b9:02:
57:b3:82:58:cd:f1:75:7f:54:a5:24:40:5f:39:bf:
db:ec:67:02:73:5a:83:85:33:18:84:22:3a:f3:dc:
dd:c1:73:53:76:8c:75:cf:86:ce:21:cc:76:22:96:
2b:15:44:d9:21:0e:f4:4a:9e:43:70:43:99:60:80:
0a:b7:ab:6d:17:0a:0d:51:b3:c1:e8:1a:28:94:fa:
50:2a:b4:61:6d:1d:69:40:5e:df:1b:32:cd:b6:3c:
ed:ea:74:ad:4b:02:d9:fb:68:76:39:a4:b2:67:29:
0c:4f:2e:84:e6:c6:cf:1c:8d:03:39:ed:ac:45:48:
e6:c9:e3:0c:50:16:8b:c6:54:39:64:24:f8:fe:3e:
59:25:b5:3e:08:39:ef:18:2d:f7:a1:61:72:41:8d:
a1:11:23:97:3b:2f:0c:0f:e8:79:1d:63:55:fc:66:
74:59:1a:06:81:94:6d:75:83:b2:5a:18:18:0c:f9:
f9:bb:31:02:a7:06:86:b7:22:d7:56:54:80:bb:7f:
87:9c:5a:64:e4:f2:de:6f:a4:71:17:a4:d9:c8:73:
b7:ef:b5:c8:e5:38:61:87:c7:96:ab:c7:5f:36:f9:
ed:36:cf:ae:1f:36:28:b6:62:b4:69:33:20:56:d5:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:70:51:69:8A:15:B8:DF:46:4C:A2:36:DC:77:0F:03:EF:26:9C
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f0:ab:07:07:d9:c4:59:9b:0b:47:6b:36:a3:4c:12:c3:bf:
2d:c1:cf:03:c5:a3:a1:6f:23:55:f5:db:15:38:e3:5e:68:a5:
36:cd:08:78:da:c4:23:6d:72:78:cb:11:a4:7c:65:84:3a:02:
fa:0d:51:50:19:bb:d7:96:39:0f:76:8a:68:62:1b:7d:9c:19:
3e:54:28:e4:77:ab:1a:3a:e1:e6:41:f4:38:b4:da:e0:e2:b7:
41:d0:38:9a:2f:34:67:47:75:2d:73:3e:b8:79:d5:86:92:c3:
de:2c:d2:e4:cb:37:20:28:ff:99:50:c4:00:6a:e7:3c:c5:dd:
7e:76:f3:59:36:ad:eb:b7:15:87:e1:a0:cd:ed:ef:87:a2:68:
80:ef:01:65:74:15:6b:48:8d:d3:e4:17:90:92:db:49:0b:1a:
bd:44:3b:91:97:c1:fa:af:9d:50:89:93:47:0d:e0:48:a2:61:
48:08:59:16:b7:7c:57:cf:78:3f:c5:c8:bf:88:80:18:dd:2c:
1a:44:f2:69:74:2a:59:9b:88:42:17:43:37:d8:d4:76:7b:c2:
0d:d8:0b:74:d2:43:20:98:d3:93:6c:26:34:4b:54:86:38:ac:
1c:9f:88:aa:b5:60:f9:4a:2a:54:05:3f:0e:2e:53:eb:02:64:
a8:bf:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:18 2025 by rpki-client