Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File: YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier: raibiCp9emPWziMdoZmohFbW3xHOVukGAKjvpij9jYk=
Subject key identifier: F0:8F:FA:1C:CC:8D:D7:22:D7:6B:94:1E:ED:EF:FA:11:91:71:74:FE
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 01960F7B904462D59CD2B97397E50B50E34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number: 13BC
Signing time: Mon 07 Apr 2025 09:01:18 +0000
Manifest this update: Mon 07 Apr 2025 09:01:18 +0000
Manifest next update: Tue 08 Apr 2025 09:01:18 +0000
Files and hashes: 1: BZgRuxw6XN5JK6FOhunyeY0a9Fc.roa (hash: yKRC8CuGjayGobPtwmCDX6ktnCZk3RWj3tDYbdA547A=)
2: KidBmSJQC90WWlzzX6-raLlPkBk.roa (hash: UjIj4BCKN2Yzl+7rl6tYpEx3eAYndxpux9jsq4JXQKM=)
3: Y33-idsN2IrHbXJmRfchF8SWRjM.roa (hash: Qhp5Guy5ylBt3xJaF8ORUseIHpCiXnCFbO+p2dIHmtY=)
4: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: b9YVW5VaNUQ4pJQDIUNFY3Y3OP3J3L93ZL9+QuPo5wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:90:44:62:d5:9c:d2:b9:73:97:e5:0b:50:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Apr 7 09:01:18 2025 GMT
Not After : Apr 8 09:01:18 2025 GMT
Subject: CN=f08ffa1ccc8dd722d76b941eedeffa11917174fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:0c:21:1d:55:2d:7c:c2:1f:84:d0:11:5b:
68:3f:8d:0e:37:09:1b:37:83:f3:f7:ca:77:df:1f:
d8:ae:5d:d0:db:88:78:f2:78:07:33:b9:e8:5a:0c:
70:40:48:96:f0:8b:f9:b5:e6:25:43:be:a6:c6:d7:
db:31:3e:a8:81:be:f5:22:96:54:0d:e5:a7:c9:97:
cc:f5:37:80:19:f0:14:9d:7f:40:2a:df:e5:7b:02:
ee:25:ad:fe:1e:d4:64:96:35:e6:92:86:2e:e2:ad:
8a:c6:78:e3:72:9e:f7:84:36:ad:5a:bc:f4:f5:b5:
b9:9c:bd:76:44:8f:36:c0:cb:3d:25:a0:53:97:1d:
2e:fe:54:5c:68:1a:f6:6d:15:b3:68:f4:c2:2c:b4:
a7:5f:7f:53:c7:db:e4:2e:2c:de:f0:c2:9d:aa:94:
2c:9e:be:43:34:52:34:97:00:dc:23:8f:df:cf:af:
e7:0a:b5:f1:16:3f:3f:fb:82:92:0b:44:c3:17:c1:
5a:75:c3:07:0b:92:5f:4c:c8:cc:43:2c:d9:95:c3:
8a:b4:d3:a5:4f:d4:0a:f4:fb:50:fd:b0:e4:2f:84:
6d:ec:e5:3f:27:be:64:a6:3a:02:09:df:d9:6a:3d:
59:5f:0c:62:71:f2:9e:ee:0f:82:11:91:74:14:26:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8F:FA:1C:CC:8D:D7:22:D7:6B:94:1E:ED:EF:FA:11:91:71:74:FE
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:c8:37:f0:5b:3e:b2:be:9b:bc:18:f6:ff:91:ab:40:58:
12:97:a9:9a:36:76:59:1d:80:34:46:a3:9d:e9:d5:72:e4:5f:
f3:d5:2b:09:95:24:33:07:92:82:ad:ae:44:39:6b:f9:1b:65:
25:cb:5e:59:d1:bf:a7:a1:c5:65:92:2b:ac:a1:04:92:53:e2:
37:72:21:14:4c:b4:9e:a6:23:33:c9:9d:99:70:64:8d:34:72:
e5:f7:d7:32:c1:ea:f3:c8:2e:d0:37:0e:38:1b:5e:67:9c:f1:
51:89:d4:03:21:f4:b2:fe:24:d7:b1:9d:ee:49:f7:46:ee:2a:
43:28:be:bd:82:15:ab:0d:ea:f1:41:3c:8e:75:d1:e6:11:1d:
08:14:d9:3a:ed:38:e8:21:70:7b:7e:33:e2:ba:59:1f:b7:2f:
88:01:1a:65:f6:24:6d:c8:a2:da:c8:d9:7e:12:11:f8:fb:7e:
c9:dc:fa:75:58:f9:88:5d:77:f5:c4:3a:94:af:8b:3c:cc:16:
d7:62:51:30:25:b1:be:51:41:bf:d5:d6:5d:83:6c:a5:ad:36:
0d:8e:0f:a9:2a:76:3e:bc:fb:c5:1f:07:ef:24:25:1c:91:a7:
43:f6:ff:50:f6:cf:16:de:71:89:8d:f4:fb:07:dc:12:3a:cb:
98:5b:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:08 2025 by rpki-client