Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: kGGh9ZpLJbE6bgcSR6rqGoA/YdTT7avgNT2aGdslYMg=
Subject key identifier: 92:D1:F5:BF:8C:4D:79:C6:38:D2:47:EC:E9:10:BC:EC:0B:9C:66:9B
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019643D683BEFCF4DA345EEB68ABC35E188B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0CBA
Signing time: Thu 17 Apr 2025 13:00:53 +0000
Manifest this update: Thu 17 Apr 2025 13:00:53 +0000
Manifest next update: Fri 18 Apr 2025 13:00:53 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: tlkUdTJ1REg/pPpX/fxPT6RmQ2s7zDlx54+kTnTlaPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:83:be:fc:f4:da:34:5e:eb:68:ab:c3:5e:18:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Apr 17 13:00:53 2025 GMT
Not After : Apr 18 13:00:53 2025 GMT
Subject: CN=92d1f5bf8c4d79c638d247ece910bcec0b9c669b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:1e:00:0e:19:7f:5e:69:f6:25:68:a6:56:
26:50:c2:ff:71:ed:5e:0f:14:26:b3:dc:f8:24:17:
7f:eb:7b:f0:6f:bd:af:73:fd:f1:ed:d8:9c:92:a9:
08:ba:8c:1c:13:b2:65:12:c9:d0:e7:7e:85:11:2f:
ca:2a:5e:38:d0:c6:dd:17:84:fe:19:ef:53:64:35:
bf:4c:02:1c:3c:b2:b0:4e:34:03:df:86:17:e2:67:
9f:b9:41:01:4e:8e:5f:67:68:6b:41:96:6b:84:ce:
14:48:d3:cf:8d:f4:91:6f:81:f7:29:9b:59:e2:73:
4d:56:88:7e:d1:61:12:77:44:51:7b:df:5e:fa:7b:
fa:d3:1a:c2:95:7e:3c:dc:a9:ce:2e:9c:b7:9b:6c:
67:6a:82:17:1a:b3:10:7c:d8:2e:6c:ba:3c:78:2a:
36:e7:18:9c:12:e0:fa:ee:9e:6f:b9:b3:24:55:34:
7b:d6:27:7f:c6:75:c5:b6:f4:7e:80:e5:78:8f:80:
c0:54:81:a4:ba:bc:f1:94:79:e2:1f:ed:c5:90:1d:
88:43:72:65:b0:c0:b2:a2:b9:2e:52:26:5f:d2:7b:
c0:2f:6f:79:f1:7c:d0:ce:69:f6:76:14:0f:26:d8:
c4:82:06:20:77:46:7b:28:6c:c1:74:77:46:e8:b4:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:F5:BF:8C:4D:79:C6:38:D2:47:EC:E9:10:BC:EC:0B:9C:66:9B
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a7:13:39:82:2d:1c:23:ed:01:6e:59:e1:d2:c9:71:4c:fd:
5c:4c:2b:2d:45:a5:0d:51:df:68:12:10:cb:bb:15:8a:a9:cb:
62:fd:d8:9d:34:dc:d5:c3:1e:22:b3:7a:e5:ac:4d:25:35:04:
ca:28:ae:17:70:2f:10:c6:67:e0:cd:cd:d8:cd:bb:d7:a2:f9:
61:5d:22:6d:5b:8d:77:56:f6:42:71:b8:25:95:e5:ff:7c:4f:
d8:91:81:2b:dd:db:34:25:e9:0b:49:5e:97:ec:77:ba:d7:44:
4d:b4:0c:bc:ef:2f:33:f9:7f:20:1b:4e:7c:48:ba:67:61:7a:
da:b5:e3:a4:98:68:00:e6:f7:13:a0:ce:a5:4d:3a:b7:7c:d5:
be:58:d8:10:6f:7e:5d:f5:e1:f2:13:bd:10:66:a6:43:b9:c7:
ec:39:a9:28:82:54:41:c2:54:1e:71:04:c2:93:e8:c1:13:ed:
4c:4a:4a:8f:28:8c:ee:c2:13:bb:2b:86:4f:31:8c:20:d6:d6:
34:61:6c:a4:94:aa:2a:1c:a0:8d:9b:c8:ba:2e:63:dd:d5:44:
c6:58:d5:8d:05:79:36:26:07:5c:66:ed:51:df:a9:3b:79:25:
b2:ec:ac:4f:08:d1:b6:4c:42:51:48:27:6a:e3:64:b6:f8:33:
4f:c4:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:04 2025 by rpki-client