Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: GNsBXniq5tztY2inUftvfsojSKoEBWfkKdcT/r1WTQU=
Subject key identifier: EF:F8:D4:01:A3:94:58:AE:E9:DE:D0:BF:AA:46:85:F0:08:09:23:C9
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 01964CA20D2623ABE40950F821B80D5CA9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 06:00:10 +0000
Manifest this update: Sat 19 Apr 2025 06:00:10 +0000
Manifest next update: Sun 20 Apr 2025 06:00:10 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: mpuninzK1j8AbhGofskyNCCIdV/Hs0PrgxTsbPOrwZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:0d:26:23:ab:e4:09:50:f8:21:b8:0d:5c:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Apr 19 06:00:10 2025 GMT
Not After : Apr 20 06:00:10 2025 GMT
Subject: CN=eff8d401a39458aee9ded0bfaa4685f0080923c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:00:8f:40:75:06:86:4d:ca:eb:37:52:47:
36:b9:ba:1c:3e:e7:06:31:6e:c9:61:db:a2:91:61:
bc:ba:46:5d:aa:1b:d3:2a:89:f2:2c:72:1e:c8:a4:
02:04:59:c8:b2:34:22:a0:9d:bd:b0:bd:3b:30:23:
ce:95:b0:2b:96:68:24:92:ef:c9:a6:fc:bd:29:46:
2f:a3:2f:b3:30:22:87:9f:bc:62:42:4e:a0:72:2a:
19:5d:c1:95:b9:64:31:d1:c5:c8:c4:2d:87:c1:01:
65:39:49:b8:cc:3b:82:af:f8:e7:c1:9b:77:6c:16:
ff:00:76:15:09:da:d2:e1:d3:3e:bf:86:ca:f6:b0:
92:b6:59:22:d9:a6:4f:1b:e8:4a:aa:ec:8b:42:dc:
be:a6:af:f7:c2:ce:8b:cb:bb:b6:28:a2:5e:e3:f6:
91:e6:a6:6f:32:a9:a2:51:ce:6a:20:95:2b:34:0a:
d3:20:5d:7a:27:f5:50:61:c4:21:d8:2e:72:88:e9:
d6:d0:0f:7a:39:3b:48:6f:e0:1f:16:79:df:43:b0:
9f:41:07:9a:ca:3b:43:b6:f3:04:6c:79:fa:38:11:
21:b6:3d:39:e0:9e:9c:de:ce:e7:50:04:78:47:b4:
a5:28:32:66:7e:13:29:b6:bb:fb:20:49:c3:00:42:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:D4:01:A3:94:58:AE:E9:DE:D0:BF:AA:46:85:F0:08:09:23:C9
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c5:87:a5:03:92:a3:fe:14:7b:d8:ac:53:d5:91:61:6d:56:
06:21:56:23:39:66:78:5f:87:46:2d:2a:02:4f:41:c7:4e:ac:
59:c8:69:e2:a1:c4:c3:1d:3a:e1:63:40:5f:20:85:fa:64:3b:
8d:ae:84:bb:f0:f4:56:14:8f:a0:7d:84:99:9d:b7:24:ef:be:
48:fc:d1:6b:7b:65:a2:b8:a5:d7:7f:77:3e:1f:e5:c8:a1:5d:
d6:75:3c:09:21:80:50:f2:69:84:cb:92:f4:1a:5b:79:d3:63:
fa:26:dd:c9:89:69:a7:13:8d:2d:58:a3:34:49:47:88:fe:50:
1f:f6:bb:da:a0:1a:ef:98:06:41:47:2e:3c:d0:71:20:dc:67:
40:a8:4c:15:a9:89:9e:b1:88:15:a9:6f:22:de:00:1c:1c:f4:
4a:52:31:19:db:7e:05:3a:77:0d:be:dc:0b:59:c8:14:3b:ef:
ac:e3:96:92:d5:3c:08:df:3d:70:2e:06:e1:d2:10:16:72:40:
73:06:5a:51:23:48:2b:ad:24:a1:96:7e:ca:76:9c:c5:67:0a:
23:cb:f7:63:1e:51:1a:35:eb:17:58:76:23:78:f3:08:89:70:
1d:62:ee:49:60:71:c8:e5:cc:56:4e:61:4d:2f:31:0d:be:ad:
2b:f3:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:08 2025 by rpki-client