Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: VKLSbYD+pXonrBx9gjSDCvfryETa4ox0NSp9lzNzq18=
Subject key identifier: 42:DB:C9:85:3C:32:11:23:5C:B7:34:6E:82:24:1B:93:81:9C:BD:DF
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 01958BF26F3EF452C22831E75FF151C508EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 07A1
Signing time: Wed 12 Mar 2025 20:01:15 +0000
Manifest this update: Wed 12 Mar 2025 20:01:15 +0000
Manifest next update: Thu 13 Mar 2025 20:01:15 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: WMg+m9wAV5OgNLnzXnY71fx8JmNogFVVok0LiWvA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:6f:3e:f4:52:c2:28:31:e7:5f:f1:51:c5:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Mar 12 20:01:15 2025 GMT
Not After : Mar 13 20:01:15 2025 GMT
Subject: CN=42dbc9853c3211235cb7346e82241b93819cbddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:19:ef:b7:d8:5a:1a:ab:2b:0a:d3:0f:ff:
bc:31:b5:fb:5a:07:e4:ce:b1:9d:cc:ab:e2:51:03:
ed:41:ad:5f:7d:ca:d6:70:b2:09:69:f7:8b:40:d0:
31:3a:8b:48:c1:b7:17:1a:34:8d:e7:db:ae:d6:4a:
3e:e8:13:d4:8b:29:e4:cc:06:be:ec:2e:f3:de:f4:
96:21:4b:b8:4b:ec:fe:14:19:c4:87:5d:66:8e:70:
a1:bd:ed:ac:46:29:90:ae:30:1e:ae:ae:b2:b5:3e:
db:a2:bd:1d:d6:66:62:6b:6e:3e:0a:08:a3:cb:f9:
f9:17:e1:ae:0a:0c:5a:54:c1:a9:41:6d:3e:75:48:
34:7e:32:b5:91:b1:a3:0b:0d:94:bf:2d:f8:34:0f:
60:65:f8:ae:31:16:21:e9:c2:24:cb:a6:b8:28:64:
f8:c3:ef:c3:aa:6d:fd:19:ad:a0:86:ab:40:50:3a:
aa:a9:c5:4f:e3:4b:40:0d:4d:95:2c:35:d0:a6:03:
8a:55:02:ce:30:30:4a:04:bf:23:4e:97:3f:6c:60:
7a:2e:b4:15:fc:54:90:47:cf:67:21:09:d1:4f:83:
88:29:c7:47:2a:b8:22:16:bb:fb:07:32:7b:44:48:
99:68:34:46:26:61:a5:9c:b9:26:ed:4f:3d:90:3e:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:C9:85:3C:32:11:23:5C:B7:34:6E:82:24:1B:93:81:9C:BD:DF
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:19:59:c1:31:a0:f4:b9:c5:46:df:0b:5f:27:57:94:e6:7c:
f5:e9:54:f7:9b:28:3e:24:35:2d:53:89:63:a8:55:9b:47:39:
1b:07:f7:ea:e8:a0:7c:34:5a:8c:e8:aa:99:3a:a2:2a:c1:2f:
20:69:00:52:f4:d1:3d:70:b1:4a:59:ef:c8:2f:9b:0c:f9:2f:
bb:27:ca:9d:de:62:8e:21:2b:7b:89:bb:0f:33:94:98:94:59:
77:e2:f3:cc:83:94:0c:ab:52:d1:32:40:4e:07:92:e1:05:5f:
42:8d:8f:ed:b1:e1:ad:6d:5d:f2:f8:ec:74:68:f1:0d:a8:21:
08:5a:23:22:77:a1:e4:5e:dc:6b:d1:e9:8b:87:78:64:8f:89:
fb:0b:d8:d9:81:56:b8:b9:bb:dc:63:8f:64:86:5f:82:1f:a8:
cc:6a:8e:aa:06:73:5f:b0:78:62:49:77:b0:5b:0e:fc:eb:ab:
50:b1:b7:02:19:30:ab:dd:c8:71:ec:ec:b7:44:82:2f:1a:3f:
0c:dc:94:ac:35:2d:38:58:9e:c0:0f:3e:e8:03:80:92:37:9c:
5d:cd:48:07:64:12:e0:87:88:d5:e1:e8:d8:9c:08:74:f3:64:
1a:9e:12:88:87:fd:df:d2:6a:73:6b:2a:c0:f2:bd:72:32:04:
80:16:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:14 2025 by rpki-client