Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: wO0dN5AJ+0s/TkhfiloqrzYdIVy8Ri84aZNn3v7ppOA=
Subject key identifier: 40:2F:06:95:70:CD:FA:49:FE:F8:33:79:42:AE:56:40:0A:00:CF:66
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 01964AEB4DE1FEB5B016C51631ABC3DEAE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 14FE
Signing time: Fri 18 Apr 2025 22:00:56 +0000
Manifest this update: Fri 18 Apr 2025 22:00:56 +0000
Manifest next update: Sat 19 Apr 2025 22:00:56 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: 6B8J2Y+6uJp20FXmn9q0PGNGblmYreMhnbWvPaxWjl8=)
3: hPjtiwCLC1o0j8AvpBmtBQU028U.roa (hash: HOlWkUmkwwPkAjP8XtxdcNr70UoyoWRPwYz3VVAT2tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:4d:e1:fe:b5:b0:16:c5:16:31:ab:c3:de:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Apr 18 22:00:56 2025 GMT
Not After : Apr 19 22:00:56 2025 GMT
Subject: CN=402f069570cdfa49fef8337942ae56400a00cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:4c:55:eb:bc:d5:86:86:91:ce:5e:8a:e5:
07:8c:ec:f1:e8:ac:ff:ff:b6:ce:0f:9f:29:60:52:
2a:6d:f7:f9:8c:83:cb:1b:85:7b:a6:9d:5e:32:28:
75:3a:8d:45:d2:db:91:8a:0a:8d:b9:f7:ab:0b:fa:
1e:9c:f8:22:b8:7e:5b:d3:92:8e:99:e1:db:f0:39:
4d:69:98:d5:3c:b3:6e:b9:e7:d7:0e:62:a1:1a:90:
44:2c:01:b4:8e:f1:71:48:34:cd:04:4f:63:2c:f5:
2d:8f:c9:b8:3e:52:3b:86:9b:ba:cb:60:0f:8f:a6:
c9:b8:02:65:64:cd:19:40:94:f6:ce:d8:db:29:ad:
53:6e:0e:8c:ce:7e:71:95:0d:ea:a0:34:f6:65:58:
6d:ca:40:95:15:a3:67:c2:1a:b6:9d:e1:6d:ed:16:
4d:ee:34:5e:de:f7:47:31:09:04:e2:6a:d3:0d:62:
fe:7b:b9:27:eb:db:ff:ae:81:1c:ce:d1:01:53:fb:
76:42:0f:d7:39:f4:04:a2:a4:3a:8c:71:6b:f8:e5:
9c:78:4d:f5:62:35:ba:1b:91:af:eb:e1:b5:3c:47:
41:37:c7:0e:8c:7b:fa:d4:4a:59:d0:a5:c8:12:fb:
ed:8f:f7:21:f7:e2:29:23:ba:4f:6e:f5:65:f0:77:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:06:95:70:CD:FA:49:FE:F8:33:79:42:AE:56:40:0A:00:CF:66
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:6e:a2:b5:b4:89:6e:c7:2f:36:97:1a:46:e3:cc:d2:47:
f1:08:b1:4f:48:ec:b4:d8:1a:01:c5:49:49:33:dc:44:7d:e4:
2b:98:e8:da:ab:11:be:b9:78:00:3e:6c:20:0e:7f:9b:24:77:
61:6a:2b:17:ba:8a:00:60:71:4e:40:a1:bc:42:b6:90:e8:f9:
3d:57:cd:58:19:6e:11:6a:3f:5d:a8:0a:17:79:12:cb:46:66:
48:1d:f3:6c:f1:47:34:9c:b3:b6:77:6e:2d:cc:69:0e:76:6c:
c5:d3:99:68:d7:9a:c9:75:65:25:42:51:07:99:c2:31:7a:f2:
f7:d1:49:f5:2e:36:0d:97:6b:1f:37:31:e9:9d:ca:47:33:90:
aa:e9:7e:db:57:69:cb:e5:1c:e2:10:32:cf:56:3a:9c:8a:71:
bb:d5:80:d7:b2:b0:ac:33:71:75:5d:55:e5:62:37:4b:b4:d3:
81:ed:e5:85:74:6e:26:09:ae:20:3b:8c:fb:26:70:4e:d3:5b:
fc:48:35:7a:c1:29:b4:54:a7:1f:99:5e:12:f5:49:60:4e:e7:
d8:b4:af:fb:33:26:5e:6b:23:f8:76:f9:aa:af:2e:b4:15:1c:
50:db:c0:1b:70:c3:99:ec:12:3e:fd:c1:e2:5f:93:83:6c:c5:
de:36:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:19 2025 by rpki-client