Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: imU2IqDuP8b12m1nMvpjP1hkS20WidUiKNFdilE5sOM=
Subject key identifier: 0F:A0:00:43:49:4B:1B:61:24:41:EC:29:93:6A:FB:26:4C:C8:91:BC
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 01964BFDBCB459A449B98DDA9C2B10B93F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 0FD9
Signing time: Sat 19 Apr 2025 03:00:42 +0000
Manifest this update: Sat 19 Apr 2025 03:00:42 +0000
Manifest next update: Sun 20 Apr 2025 03:00:42 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: cW/c13MCqbRD7fofhyrmzcFkYJTbwS1ziy+G2q2OH7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:bc:b4:59:a4:49:b9:8d:da:9c:2b:10:b9:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Apr 19 03:00:42 2025 GMT
Not After : Apr 20 03:00:42 2025 GMT
Subject: CN=0fa00043494b1b612441ec29936afb264cc891bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:d7:2a:62:6a:ac:dc:0f:10:53:0c:eb:91:
79:a4:79:69:a8:c3:79:2e:13:9e:dc:81:2f:43:fa:
b2:53:c5:eb:a3:15:2a:5b:a4:77:60:1d:f0:e7:cc:
c6:dc:86:76:dd:f9:8b:86:91:bc:0a:b1:ea:2e:fd:
f6:31:17:06:8a:e7:23:90:01:87:0e:ed:2e:b5:47:
45:60:5f:4f:1b:c6:4b:9a:bb:ec:21:08:dd:7a:b9:
c9:3b:9e:1a:08:0f:5e:3e:21:11:56:ca:d1:b3:bb:
86:4a:85:2f:3c:5e:49:50:ad:13:45:ac:be:e1:19:
fd:d1:56:48:cb:71:42:bd:12:aa:8b:cf:64:57:76:
73:a9:47:5a:f6:38:1b:87:ee:43:7b:46:27:a4:2c:
39:d3:ab:26:74:85:59:b7:e6:a7:d8:d2:2c:ed:c4:
16:4b:c2:24:38:5a:88:f6:7e:cb:6c:ae:b2:1a:83:
57:25:05:33:48:11:9c:7c:0f:c5:8f:20:b7:33:cd:
ac:d4:9c:65:67:9a:55:54:50:7b:4d:5d:45:12:d6:
dc:b1:94:d4:df:e5:0f:05:94:88:8e:82:52:95:d9:
91:ac:92:ad:f5:48:c3:7b:d7:e6:c3:0f:64:e8:c5:
53:a4:4f:75:84:94:18:48:d8:04:4f:d7:6a:3f:54:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:00:43:49:4B:1B:61:24:41:EC:29:93:6A:FB:26:4C:C8:91:BC
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:4d:eb:c0:59:0d:d5:57:71:eb:06:09:b0:86:db:6b:80:
2c:03:1f:12:5c:11:48:8c:9a:27:40:09:3f:1e:33:0c:36:5c:
8e:94:2c:8e:4b:fb:66:03:c7:57:09:6d:4c:87:03:1a:7f:ea:
ac:5c:5f:4c:b0:3a:fa:46:2b:ab:04:8f:9f:26:db:51:d3:97:
0a:c8:5e:26:b4:1b:02:9a:08:af:a3:ef:7e:56:41:e5:d9:aa:
f6:ba:3f:8f:11:89:ad:73:1a:02:8b:54:6f:73:81:93:07:25:
ee:c8:aa:2e:76:32:d6:85:f1:ed:7f:a0:15:f4:cf:6f:90:10:
50:1b:74:8d:92:ae:ab:21:61:7a:1f:f8:1e:8f:d8:f6:b7:1f:
73:ff:82:89:d6:43:8a:4c:5c:5a:0c:9b:a8:7e:7e:92:d9:90:
68:df:57:3a:a6:19:e2:b7:6a:c9:e2:7b:cc:92:74:d3:67:6f:
be:e6:4e:72:5d:5b:12:39:40:06:97:8c:98:a3:34:83:08:97:
b7:26:13:6a:b7:c0:b4:93:d6:56:83:02:6b:79:bf:59:84:76:
d7:06:89:dd:bb:e0:a6:c6:6a:a1:d2:37:9d:65:24:54:58:ca:
b3:42:77:8b:94:5a:31:0b:f4:d5:86:3a:a0:f7:dd:50:ad:de:
e9:bf:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:32 2025 by rpki-client