Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: MOjBgbEk2wTipHcLHKTaUgwPo4DtDe3ilfy068I88C0=
Subject key identifier: A5:4C:B0:44:1B:4C:30:A8:68:33:CD:AB:88:5C:D6:AA:BE:AC:97:59
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 01961A6CF3C47A5FD81D58E25BBE5214DD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 0233
Signing time: Wed 09 Apr 2025 12:01:10 +0000
Manifest this update: Wed 09 Apr 2025 12:01:10 +0000
Manifest next update: Thu 10 Apr 2025 12:01:10 +0000
Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=)
2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=)
3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: PfzWOHInXSeiUy/I2MZ8ZEFxeUGZOPVcsR2cbl+REPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:6c:f3:c4:7a:5f:d8:1d:58:e2:5b:be:52:14:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Apr 9 12:01:10 2025 GMT
Not After : Apr 10 12:01:10 2025 GMT
Subject: CN=a54cb0441b4c30a86833cdab885cd6aabeac9759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:1b:59:1c:5b:08:01:78:9e:52:ba:59:b8:
45:a8:0b:c5:e8:39:5d:25:b2:66:18:02:60:ac:69:
8a:93:c2:77:69:4a:78:c0:0f:30:cd:a7:a1:21:80:
67:5f:cb:8c:9b:3d:c9:97:d4:07:2e:2a:0f:87:62:
99:0b:7c:cf:87:e3:db:f2:cf:f9:07:b5:6c:51:e2:
61:7e:14:e7:e8:9b:b4:79:9d:f4:5b:d2:ce:8c:86:
4e:c2:d5:4f:f4:f5:ae:02:70:52:d6:1e:b4:03:4b:
de:11:4e:da:1c:85:4b:c3:ab:92:cd:d2:27:94:80:
b1:1a:9d:ba:3b:e1:65:f2:84:8d:c4:e4:e6:2f:c6:
c8:70:1a:63:4e:d2:76:a1:fe:ed:fb:44:20:a6:3e:
75:cd:10:0d:ab:4f:30:dc:b2:58:92:45:11:68:7d:
eb:f5:e2:a1:f3:6f:7e:93:96:71:ec:f8:0d:0b:37:
dd:ff:38:b1:46:bf:e1:de:ee:06:21:a9:ce:3e:8f:
e3:d6:75:b5:88:bd:ba:77:0a:74:f5:a6:48:ef:73:
85:6b:6c:ee:67:33:52:11:eb:72:0e:2b:89:cb:9c:
44:d3:e3:2b:26:5d:78:3c:c1:75:9a:5e:8b:59:f4:
34:58:f6:61:58:0a:9a:17:0a:31:cd:a3:04:17:97:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4C:B0:44:1B:4C:30:A8:68:33:CD:AB:88:5C:D6:AA:BE:AC:97:59
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e4:6d:e9:e1:0e:de:e4:3a:15:ff:b0:cb:49:c9:00:a4:f9:
96:35:e4:3d:9e:07:a2:19:52:ea:a3:e0:00:dd:5d:28:42:25:
ae:0b:75:24:23:8a:bf:f1:6e:4d:5c:46:35:79:d3:70:96:a6:
60:63:f3:b2:7c:ce:ea:41:7c:c2:b2:f6:4c:76:8d:0d:8b:3c:
ad:fa:9c:03:9b:06:73:90:d2:12:1a:21:c8:18:56:f5:b5:b5:
a7:48:66:27:da:11:31:44:e1:24:0a:9f:79:7d:2b:a2:3e:4d:
c5:86:78:15:23:8f:49:4d:9f:96:f6:24:66:7f:05:0e:8e:fb:
3c:28:f2:18:21:b1:46:49:ae:79:51:a3:91:db:7c:3f:57:06:
cc:f2:e7:72:88:14:0d:d8:6c:e5:13:a6:7d:05:2c:54:d4:a1:
54:ce:ac:e5:d6:cb:24:f2:3e:ca:95:e8:2b:9d:32:22:63:36:
10:6f:a5:9c:43:f9:fe:64:99:45:36:60:45:b4:d1:aa:94:43:
26:30:e0:3b:c1:63:35:e6:54:da:c8:2a:d1:52:a4:db:93:61:
c0:b8:8c:27:91:eb:85:9a:bc:27:56:08:71:82:e6:f0:5f:35:
1b:c4:4d:1b:58:8d:d9:6d:fa:fc:0e:91:05:37:ff:9e:20:74:
54:0e:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:51 2025 by rpki-client