Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: FkqLspEPfy4LNLqKSECQ5atB6Kw4gpcmnaUxxTiCTuY=
Subject key identifier: F8:8F:F7:BA:C8:7F:52:C7:57:90:3C:51:2B:F2:69:EF:DB:57:52:F8
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 01964FDAE0B49F6BE6D808FFF32B5191E524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 21:01:06 +0000
Manifest this update: Sat 19 Apr 2025 21:01:06 +0000
Manifest next update: Sun 20 Apr 2025 21:01:06 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: NqY03svCmBqWfKbK6+1AKS9Zcjax4Hm1JjHeOaA+9Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:e0:b4:9f:6b:e6:d8:08:ff:f3:2b:51:91:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Apr 19 21:01:06 2025 GMT
Not After : Apr 20 21:01:06 2025 GMT
Subject: CN=f88ff7bac87f52c757903c512bf269efdb5752f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:e2:29:64:c4:37:13:38:35:e1:74:b4:35:
88:4b:8e:c0:a5:29:c4:a0:db:19:3e:53:3a:6d:5a:
fa:87:14:45:ce:29:43:66:71:91:f5:6c:1f:ee:1a:
bf:d1:95:d7:bc:1b:c7:ca:dd:cc:67:0d:e0:17:89:
a4:28:a6:83:21:d1:bc:99:1a:db:ba:da:b2:c1:81:
cf:a7:1a:31:fc:44:f5:64:ec:e0:1b:73:93:15:4e:
d8:64:1e:20:be:db:39:bd:83:39:13:bc:6d:a6:1a:
67:51:cb:29:be:b5:6c:c2:68:2b:f3:74:e1:73:cb:
1c:fe:09:e2:0c:54:ae:62:b6:3f:a2:9c:44:0e:fe:
a0:2f:e7:df:f0:8b:5a:9d:f0:f9:ac:09:78:bd:cb:
f0:b1:40:f5:69:96:b8:a6:fb:8c:95:e3:8d:e2:69:
56:8b:54:02:6a:7f:a6:dc:ff:e1:37:f4:0c:83:cd:
d0:ad:a9:95:97:47:02:9d:78:7d:56:30:e5:43:aa:
f5:c9:fe:fa:2a:d0:ab:19:6c:45:77:bb:a2:d4:e8:
69:66:37:a8:61:1a:9c:2c:f0:ef:28:28:f8:e6:fb:
4b:5c:11:f5:87:ed:6b:78:26:44:b5:b5:73:49:26:
a1:80:b8:b4:26:c5:11:d4:03:13:87:60:d7:c7:71:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:F7:BA:C8:7F:52:C7:57:90:3C:51:2B:F2:69:EF:DB:57:52:F8
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:0d:9e:7c:d1:26:bc:c9:37:17:8e:15:6e:4c:6a:1f:5d:
a4:ce:36:ca:4e:3a:9f:eb:ba:bd:d5:af:ea:6b:ac:a9:fe:27:
07:5c:c8:70:e3:ec:c3:d9:6b:77:3d:b5:6f:58:eb:9e:58:29:
d8:32:c2:e1:40:94:f4:81:20:99:43:97:a7:47:62:e1:9f:bd:
1e:37:7f:41:1c:f5:8f:d7:e3:26:5e:fc:db:a7:7c:91:4e:00:
40:01:cc:65:62:f3:49:9e:16:a1:bf:77:16:b6:ca:0c:89:c2:
34:34:f2:85:cb:84:26:f8:76:48:8c:a0:38:30:36:7a:03:f0:
3f:87:50:08:dd:fd:c1:0d:14:b1:ab:9f:48:60:38:33:1e:7a:
6c:03:3a:2e:94:7d:11:a3:3e:2a:5e:be:95:f6:a5:cc:f9:8c:
02:54:da:8d:38:42:c4:24:df:1b:d4:c8:a8:55:6c:b8:08:81:
6e:0e:e9:2e:11:8a:46:26:af:a3:21:aa:34:c3:be:70:7e:1e:
c4:ba:27:33:f2:db:49:eb:57:69:78:c1:61:30:71:cc:2d:11:
54:c7:00:e7:34:38:47:a8:13:53:d3:10:2a:3a:d2:5b:b8:cf:
d2:8d:52:f9:c4:57:09:6e:0f:d0:0b:b3:52:db:02:c9:ff:06:
e5:40:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:15 2025 by rpki-client