Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: 2/hHuev/TxYHN6AGe/MjlMKBKRKPpgOEAbj4GUt5OXo=
Subject key identifier: 88:D2:A6:85:03:2B:94:0A:DB:DB:FB:1A:55:18:F5:33:32:10:2F:FA
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019647450225998B36634E33CE0EC76BA294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 05:00:26 +0000
Manifest this update: Fri 18 Apr 2025 05:00:26 +0000
Manifest next update: Sat 19 Apr 2025 05:00:26 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: IKDtP8S0dkgODyyQUG+9CuYnED1nFAVHEG23cJx+o/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:02:25:99:8b:36:63:4e:33:ce:0e:c7:6b:a2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Apr 18 05:00:26 2025 GMT
Not After : Apr 19 05:00:26 2025 GMT
Subject: CN=88d2a685032b940adbdbfb1a5518f53332102ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:dc:6c:fa:f5:08:86:81:fd:45:76:93:b7:
59:cd:a4:02:f5:92:bf:dd:0c:45:d2:59:14:5f:7a:
b3:1a:58:59:30:d4:fd:32:41:ad:fc:08:c4:bf:ef:
8d:73:07:9f:a0:49:a0:de:cb:40:16:27:df:0c:fb:
45:d5:52:86:b8:d3:42:a0:32:ed:8b:29:c9:77:9c:
48:98:b0:50:54:f1:39:7c:33:1e:f2:29:30:04:97:
2b:7a:83:bd:75:3f:b3:b6:34:63:6b:c5:ab:3b:56:
46:8e:9f:ec:27:7d:5b:02:bf:3b:84:78:4c:4c:9c:
4b:e6:74:8d:3d:e9:94:ac:4d:bb:52:51:d8:fe:e8:
dc:97:fb:75:61:23:13:51:b5:2d:84:9d:8b:89:a8:
9f:17:d7:7d:75:7d:dd:6a:2e:45:0b:14:4a:33:02:
d4:f4:d8:a4:d2:f4:67:45:13:8c:38:b5:ca:44:a9:
6b:23:ae:90:30:50:85:17:5a:93:d2:55:ef:b4:d7:
d4:38:bb:00:c8:09:22:63:15:7f:73:7d:f6:61:1f:
28:58:a9:98:4b:99:72:34:a4:1a:7e:1e:50:a2:88:
01:9d:81:8d:c9:fa:e5:53:5c:3d:e8:e9:e3:cc:02:
ae:b4:33:1b:31:1b:7c:a4:78:75:a5:86:35:b3:eb:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D2:A6:85:03:2B:94:0A:DB:DB:FB:1A:55:18:F5:33:32:10:2F:FA
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5d:75:38:b3:2d:7c:38:95:e8:b5:54:69:45:c6:b4:65:1c:
8c:df:ad:76:05:32:08:2d:90:b1:f2:43:89:6b:81:41:18:e7:
08:73:17:88:a0:07:dd:a0:6e:e1:62:33:74:9c:4d:f9:37:b3:
a1:e6:6e:77:4a:aa:a8:30:06:fc:30:e7:cb:84:10:93:f2:d5:
15:12:c3:e3:d7:f5:7d:22:db:59:3c:cc:64:29:0b:d3:53:f3:
e4:00:65:bd:85:e7:f0:f7:b1:e0:c7:b6:1f:40:1d:b8:a3:c4:
cf:3c:25:72:b2:31:49:2e:a6:4b:4a:16:ea:7f:12:f1:e7:c1:
34:b5:0a:85:56:2d:8c:b1:62:bf:c7:b7:f2:ae:09:0e:69:f7:
0d:a9:a4:42:88:e2:ce:89:29:7a:8f:bf:5f:cd:e5:94:48:5b:
74:7c:37:76:31:5e:c7:4f:8c:99:bd:88:ec:a0:a9:9b:a2:a4:
ea:8c:2a:72:a5:32:41:58:ca:a8:3b:f1:43:bb:d5:5b:a9:31:
a9:ba:9c:ce:c8:70:0f:6b:2b:97:06:00:3d:40:b9:20:07:74:
32:40:65:97:59:67:dd:cf:14:ae:18:13:96:77:e7:d3:4f:d6:
00:71:bd:96:ae:7c:24:6e:bf:73:d8:b3:de:bf:2e:3f:a6:f3:
d7:46:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:59:52 2025 by rpki-client