Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: W1oUD6gl08xOW1E3Ixf8qdhOscI0ZlsNPrQPkcqXyX0=
Subject key identifier: 91:D1:90:EF:41:F2:3C:2F:DD:80:1D:97:AC:A5:E2:02:2C:28:8A:E7
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0196545BD0A0123503D4AF0527FD1A9F5AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 18:00:25 +0000
Manifest this update: Sun 20 Apr 2025 18:00:25 +0000
Manifest next update: Mon 21 Apr 2025 18:00:25 +0000
Files and hashes: 1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: 6ceIhXQWXpJYX5rTlyb1jLe7OOOhB2AuPWkSQUreOMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:d0:a0:12:35:03:d4:af:05:27:fd:1a:9f:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Apr 20 18:00:25 2025 GMT
Not After : Apr 21 18:00:25 2025 GMT
Subject: CN=91d190ef41f23c2fdd801d97aca5e2022c288ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:b3:03:6e:0d:98:68:b3:72:4f:d7:c9:a3:
26:9a:4c:99:68:a5:27:d4:6c:61:57:94:a2:b2:d6:
a7:7c:47:63:b5:6d:35:18:3c:f0:73:ca:d2:a7:98:
32:8c:01:54:93:0b:60:92:4f:01:9f:65:f5:fa:3f:
a0:71:e0:16:b5:0a:f5:c2:e3:9f:62:b1:6b:57:16:
a0:23:a9:cd:0c:8a:41:f1:3d:b5:97:10:ba:a7:8f:
3e:b7:79:62:01:c6:5a:80:cd:2e:3d:6b:b0:c1:97:
96:32:7b:bc:66:70:c8:a0:b0:70:50:fa:3c:78:b0:
20:48:47:6e:64:6a:40:d7:05:ed:ea:d2:c8:20:0c:
be:43:4e:1f:7a:02:18:10:01:22:20:90:a1:9a:16:
1a:70:4c:d9:cb:7d:ca:20:35:ba:5d:60:7f:da:3b:
26:97:43:95:0c:df:76:8a:15:6f:16:c6:78:3e:ab:
62:97:58:d6:57:81:f0:51:40:91:87:c2:fb:41:c5:
34:22:bc:83:03:8c:13:42:89:d4:ab:11:7e:99:01:
37:0c:fa:a8:4d:fd:b8:6f:ab:82:1c:0c:e5:42:6d:
f0:3c:e8:a6:bc:41:31:f3:f6:c5:01:31:b3:6d:7d:
a3:f7:bc:d6:4c:7d:50:b1:79:43:81:29:8a:de:cc:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:90:EF:41:F2:3C:2F:DD:80:1D:97:AC:A5:E2:02:2C:28:8A:E7
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:65:8a:79:4f:ff:9b:f9:73:d1:58:01:da:03:9e:21:d8:
9f:d2:c9:e0:77:dc:19:48:f6:76:91:77:96:e5:06:fe:56:7f:
ff:0e:8a:e2:4d:6c:19:c9:3b:05:6c:72:62:3d:81:53:d0:ba:
e4:8f:0a:e1:db:07:a2:4e:cf:7d:7c:5a:94:5e:36:18:a6:ee:
8d:ce:e4:97:fa:44:45:b3:af:45:d9:a0:75:55:d2:d2:65:01:
23:0d:3c:28:d4:68:ab:8f:71:3e:6c:b9:40:3f:4a:75:a4:c5:
02:c5:d9:3c:23:98:f4:99:f7:41:73:48:b4:72:b8:45:44:24:
ae:c2:7f:ec:fb:5d:fb:41:c0:bd:c3:46:f8:aa:cf:bc:3c:82:
75:ea:63:7d:ad:7a:a2:58:71:f6:16:be:66:fd:b1:d1:01:a5:
77:65:15:f4:4a:dd:fb:54:ac:8e:f6:50:f0:ba:d2:4e:72:48:
f2:6a:92:85:23:74:d7:9c:6d:f6:49:a1:6c:45:9f:bb:03:54:
16:04:2c:4a:56:39:58:dc:ac:39:d8:6d:99:cb:43:e5:0c:95:
ed:23:24:9d:f4:18:ea:5b:a8:5d:20:f5:8d:ad:96:ef:0e:8e:
f6:a6:f2:9c:3a:0a:9b:2c:71:90:f0:f7:20:3e:24:f1:c4:ff:
ce:eb:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:51 2025 by rpki-client