Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: OopkA4Ga/wtNPbxbn398N9i1ZfreA861R6rHGJ0sOuE=
Subject key identifier: BC:6B:81:54:A7:8B:72:70:27:2D:9F:AE:11:81:65:CC:D3:F8:0D:6D
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01965011850FCB9AEFA8E8DD27E0D90AC202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0D1C
Signing time: Sat 19 Apr 2025 22:00:47 +0000
Manifest this update: Sat 19 Apr 2025 22:00:47 +0000
Manifest next update: Sun 20 Apr 2025 22:00:47 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: 15hImrZmRtCoGhdRihr7CRT9M4zPWkeT0bC7C//YqFs=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:85:0f:cb:9a:ef:a8:e8:dd:27:e0:d9:0a:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Apr 19 22:00:47 2025 GMT
Not After : Apr 20 22:00:47 2025 GMT
Subject: CN=bc6b8154a78b7270272d9fae118165ccd3f80d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:9b:db:92:88:7d:db:71:66:84:38:03:b1:
fb:05:f5:29:61:55:97:d2:28:79:71:4c:4c:cf:00:
ae:3e:ee:b5:a7:6e:98:37:06:97:ef:3f:e6:d7:44:
4f:3b:f0:b1:5d:25:99:40:69:b8:a9:d2:8f:b6:65:
6f:1d:0e:cd:90:66:b0:fa:6a:f4:37:4f:38:c3:68:
ff:86:63:5e:03:1f:d2:8e:36:b7:2e:5e:c9:0f:e9:
c2:dd:59:45:8a:5d:1c:48:a5:de:31:99:3b:ea:58:
51:66:77:be:2b:e3:60:0f:85:3e:fe:c0:5e:66:e5:
72:a8:23:4c:6d:e4:07:03:a6:0f:1e:15:c1:cd:24:
a8:7e:4d:c5:1c:af:bd:98:3a:54:33:55:5a:74:62:
c0:63:f5:e0:f2:1e:6a:e1:60:44:01:94:bf:05:47:
26:bf:d8:7a:94:92:58:99:05:18:ab:c5:45:00:12:
b3:8b:16:d6:6b:64:a1:a7:1d:ca:15:52:41:b5:63:
1d:90:e7:65:f8:15:83:a5:96:c8:01:45:4c:d5:58:
8c:21:a7:28:51:1e:bd:0d:6c:1f:6d:3b:db:50:f3:
72:56:e6:99:00:74:d4:b3:50:3b:8e:17:20:e1:50:
d4:29:89:bf:49:30:56:df:1b:54:61:4a:ec:7d:d7:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:81:54:A7:8B:72:70:27:2D:9F:AE:11:81:65:CC:D3:F8:0D:6D
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0d:07:cc:eb:56:10:de:c8:e0:1e:6e:19:ce:05:c4:1f:3c:
9e:9e:67:55:8e:d9:dc:14:b0:ba:d2:a4:3a:13:5b:0f:34:ae:
b7:85:d4:9e:44:38:ae:e7:60:db:06:c8:f0:bc:93:d4:2e:94:
cb:c5:d0:21:0a:8b:e1:26:b0:97:95:b4:26:bf:19:e7:85:4c:
14:17:7c:d3:12:27:05:0c:63:2d:6f:88:96:a2:ac:0f:b9:1a:
9e:a3:e6:f8:f9:72:bd:c4:32:65:d6:95:17:2c:8a:c5:50:c3:
1b:57:e1:88:0a:97:c3:3a:90:6f:5d:92:1c:3f:0c:97:fd:97:
ba:a3:a1:cd:d4:9b:3e:86:cb:27:e7:f0:d7:ac:87:38:1f:7c:
f2:ce:6e:58:f2:2d:bc:1a:18:a1:c6:91:aa:46:00:02:28:e4:
f6:28:8a:bf:b2:b5:ce:57:f7:ad:4d:ee:9c:b3:7b:dc:b8:b7:
47:a5:7d:2d:c4:e9:d2:b1:0d:a2:6e:a0:e3:53:ef:39:35:66:
97:a8:89:84:33:b6:af:df:8f:ea:83:ee:0a:66:51:80:f4:d3:
f4:6f:48:dd:ff:22:86:12:75:b6:72:2f:ca:aa:53:93:68:f9:
b0:7c:df:ce:46:87:12:4e:9e:33:bd:84:21:3f:7b:5e:60:87:
db:16:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:43 2025 by rpki-client