Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: G79MzCQHRt4RuHm8CkG82Z+sVshyaZRqEKFZM2qSr7o=
Subject key identifier: 60:02:0A:08:AD:EF:62:41:7C:12:C9:00:1F:C3:4F:54:27:6D:68:D8
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01964F6CE5223CB0BF40ECB73CDA233090FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1501
Signing time: Sat 19 Apr 2025 19:00:58 +0000
Manifest this update: Sat 19 Apr 2025 19:00:58 +0000
Manifest next update: Sun 20 Apr 2025 19:00:58 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: MUVh7WBw1C3+iQHb+zpFUP8CbLpdeC11j71xNDrLgjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:e5:22:3c:b0:bf:40:ec:b7:3c:da:23:30:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Apr 19 19:00:58 2025 GMT
Not After : Apr 20 19:00:58 2025 GMT
Subject: CN=60020a08adef62417c12c9001fc34f54276d68d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:59:5e:31:97:93:2c:2b:2a:30:32:96:48:
f0:c2:c5:3b:aa:ba:6b:68:1d:e2:42:05:cd:27:39:
d2:e3:1d:70:20:11:7f:b2:be:39:c7:ba:17:a0:e1:
ee:21:97:f6:0e:b9:c5:97:94:d5:4e:74:c7:c8:3c:
04:d5:dd:de:3a:72:82:7a:db:43:45:f5:fc:ae:41:
a0:80:c5:e9:f5:2a:59:24:1a:59:d7:97:5e:b5:37:
aa:19:b2:99:24:17:69:ee:0d:4b:6f:b4:ce:9a:be:
b8:f2:59:1b:70:9e:8d:a8:03:41:c3:b7:d7:86:9d:
30:dc:7e:4e:f4:9d:24:ca:07:f9:e6:9a:14:45:e1:
9a:43:45:ba:0e:37:78:74:0a:6d:63:8e:93:f0:8a:
8c:f2:a8:6f:ce:86:53:c8:f9:c1:93:50:7b:2b:b5:
3c:b7:f9:ec:cd:97:43:73:50:ae:9a:c1:ea:1c:9d:
a9:e1:0e:ff:0f:a2:cd:73:1d:55:e5:09:30:a3:5e:
bf:8f:61:84:9e:f8:4c:7b:17:72:0d:6f:e7:0b:e8:
72:0e:95:a6:5d:f2:d8:62:2b:c7:56:7a:05:38:30:
24:ff:82:27:22:fb:e1:3e:89:9a:df:43:7b:f9:3f:
b8:22:48:85:19:9b:5c:c1:38:2e:54:7c:13:d6:95:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:0A:08:AD:EF:62:41:7C:12:C9:00:1F:C3:4F:54:27:6D:68:D8
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:0a:28:cf:17:ef:83:e6:38:ec:16:fe:9f:65:24:3d:18:
14:7c:ab:71:21:9e:ac:de:0f:7a:35:af:a2:70:6d:f2:61:8d:
60:4f:c1:94:55:d5:56:7a:3b:c9:c8:4a:44:66:85:fa:6f:db:
19:33:e2:62:92:2c:e7:bf:8b:e3:9c:01:5b:03:39:7c:36:b3:
85:70:52:19:5a:2f:59:5d:2a:c3:11:35:de:87:83:1a:44:51:
22:d7:ff:d2:17:c5:d8:2d:e2:0d:46:28:1b:f0:4e:bc:00:3b:
88:8c:01:0f:4f:67:ed:eb:d0:35:61:39:6d:95:50:9b:bb:c5:
9d:e1:df:46:7c:57:c2:41:c4:39:f1:65:b9:5a:93:0c:0d:bb:
fc:64:26:d9:0c:be:18:a0:6d:d2:c8:43:ea:92:86:12:5a:e6:
5b:fd:b8:75:f9:fc:20:89:52:c7:37:3b:e4:71:73:15:75:43:
c7:66:92:03:6e:5c:02:91:bf:7e:4f:28:32:0d:12:cb:a8:05:
64:c3:1c:33:60:65:3e:27:4f:88:3b:13:3a:df:53:0a:d9:70:
9e:3b:35:6f:ae:06:aa:9d:69:62:d6:7c:27:57:0b:d4:72:3d:
bd:55:d4:59:06:2d:b6:bc:fa:5a:f8:5e:8d:ba:17:ad:47:5a:
d8:1e:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:12 2025 by rpki-client