Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: MpDqblZdwM+dqS51qlMp95s8sP+kQ3gnVgoTOFGgGcQ=
Subject key identifier: 63:1E:1F:99:5D:09:39:6E:BB:EA:1B:02:68:41:BC:65:FD:43:D6:CD
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019640D4E9FA6CD7EAD72E120B3514A9F75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 10BC
Signing time: Wed 16 Apr 2025 23:00:17 +0000
Manifest this update: Wed 16 Apr 2025 23:00:17 +0000
Manifest next update: Thu 17 Apr 2025 23:00:17 +0000
Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: 5ZMKcMI0GKuHKub8X5NUend8cn5nloTlcXcExovi4PY=)
3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d4:e9:fa:6c:d7:ea:d7:2e:12:0b:35:14:a9:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Apr 16 23:00:17 2025 GMT
Not After : Apr 17 23:00:17 2025 GMT
Subject: CN=631e1f995d09396ebbea1b026841bc65fd43d6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:9c:9e:2b:49:34:a5:42:de:db:6e:ce:be:
69:50:e2:d5:22:48:65:39:a9:ed:d4:93:86:30:21:
39:bc:a3:46:a7:0b:e1:3f:5c:b6:e7:00:f3:6b:02:
e0:84:37:a6:f6:a6:75:73:fa:8c:58:12:a1:25:d9:
72:94:c2:bc:c4:d6:e3:2b:87:ff:a7:7b:85:43:d7:
e9:25:39:70:5d:06:1a:17:20:cd:dd:a4:f5:1e:c8:
75:33:24:ae:40:5b:7f:0f:db:3c:f9:4b:ac:1c:cd:
30:f9:dd:95:e5:7c:5b:58:7d:c9:37:7a:ca:d5:00:
55:de:9d:57:5a:77:2e:27:7b:47:43:54:2e:01:bd:
fe:4d:16:c8:22:a0:4c:76:12:72:5e:52:9c:71:f2:
a3:65:f2:da:c2:86:ba:e6:1d:4d:82:3b:12:b8:87:
75:09:e7:84:ce:c0:8c:c2:d9:a7:bf:82:5d:0d:68:
07:af:75:5f:c8:65:4c:a6:13:6e:89:54:99:0f:a0:
ed:44:16:58:a3:cb:ef:8c:c8:76:20:b1:a4:bb:d7:
f0:9f:34:23:d0:2d:06:e2:23:e4:7f:1c:6b:6d:ef:
85:72:f5:5a:0f:49:49:28:0f:7f:9d:29:85:bc:4b:
a3:16:bf:c8:4a:7c:ec:33:0a:de:8d:cf:88:da:9c:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1E:1F:99:5D:09:39:6E:BB:EA:1B:02:68:41:BC:65:FD:43:D6:CD
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:3c:fe:35:96:3b:43:93:84:3e:8d:97:01:57:04:88:5e:
0a:de:5b:00:90:ca:48:ee:89:53:fe:42:46:3f:67:49:ba:6c:
bd:7e:d1:0f:2c:ff:6e:f4:11:1d:3f:cf:c1:74:b2:d7:46:08:
97:d2:e1:b5:ca:ff:3b:65:ff:60:34:bb:d4:65:4d:a6:c5:d1:
80:8f:e8:ac:9a:c9:9c:8d:60:e5:89:73:f0:34:ef:91:e0:6a:
30:c4:55:3f:37:d2:94:a6:5b:42:04:94:6e:cd:47:02:b9:91:
2c:ca:96:8a:bd:74:12:ab:52:62:8f:9f:2b:e1:91:f9:8c:77:
c9:b7:ff:11:11:7c:26:3a:27:70:1f:3e:15:61:6b:21:e6:8b:
ac:62:25:78:60:4a:32:2c:2c:56:c7:88:ef:d4:3e:7d:21:44:
95:d3:13:a5:a7:62:4c:7f:77:dd:d4:01:1a:df:a6:bf:66:bc:
00:6d:a7:69:ea:f0:7a:c2:e6:1c:ab:ff:dc:6f:4b:52:98:85:
bd:fe:92:31:2a:ee:2b:e2:15:c8:ce:3e:9d:c3:29:8d:a7:a3:
37:56:71:a3:55:1e:c2:d2:be:4f:5f:2d:dc:c0:40:d8:77:41:
f6:ae:a3:12:6a:fb:4b:c8:d6:c7:c8:10:95:3b:3e:fb:ab:42:
d7:01:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:14:20 2025 by rpki-client