Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: 88VyuYWKwo6tLkRwj/mgykgURFzgm01b0zqaUHNaHj8=
Subject key identifier: 0F:5A:2A:DC:6A:91:1C:41:06:91:70:35:A3:A3:C3:26:89:22:49:00
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01962B978CDD3B2D805C696F99F61BEA70E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0DCC
Signing time: Sat 12 Apr 2025 20:01:14 +0000
Manifest this update: Sat 12 Apr 2025 20:01:14 +0000
Manifest next update: Sun 13 Apr 2025 20:01:14 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: Uj5VQZ6b6oKxwVvDN0EBZ4rsNGw.roa (hash: 8PKTi26pIQ4VombiOrobgWJT6wPpzYb/vk0bG6N7UuM=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: yWu6YilyZdIF8/SX5RTG5u9zdiAWn4TEtv90Gp8134I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:8c:dd:3b:2d:80:5c:69:6f:99:f6:1b:ea:70:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Apr 12 20:01:14 2025 GMT
Not After : Apr 13 20:01:14 2025 GMT
Subject: CN=0f5a2adc6a911c4106917035a3a3c32689224900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:79:08:39:06:26:73:a4:84:c8:6f:cf:a8:
59:6b:1e:9f:e6:19:2b:de:ec:04:57:d8:1b:3c:a6:
67:36:8a:e8:58:26:09:6f:08:38:36:62:60:07:c9:
a7:f7:06:8c:c6:38:0f:86:69:c8:d5:53:0d:48:51:
61:a5:0b:d2:84:01:84:bd:fa:97:0d:60:3f:17:ef:
0c:6e:59:b4:5e:e7:d3:b2:07:e6:a6:8f:2c:47:5e:
79:42:e4:53:ec:f0:b4:12:d6:ed:77:a6:a1:80:40:
35:85:f9:cd:2a:6c:d7:47:86:ae:3d:61:8b:42:74:
07:f9:a0:3e:23:5a:25:7d:dd:3b:c3:d2:af:ff:4b:
55:fd:4d:c7:8f:2a:ba:72:65:45:ee:d6:f0:e7:0d:
7b:f3:22:3d:40:e6:17:23:22:b8:40:e4:6a:5b:b0:
de:d2:3e:95:0b:3b:a2:dc:09:b9:7d:44:77:f3:ec:
66:9c:26:3e:24:09:dc:3c:0b:65:ac:4b:96:20:38:
e5:2a:55:59:06:4a:15:6f:46:4f:7f:23:b5:8d:b8:
77:f3:37:2d:c7:7d:3f:43:67:ca:45:02:1c:d6:0b:
29:b0:20:3a:78:c5:a6:56:99:72:a9:ff:08:38:80:
4a:79:9a:11:cf:42:26:d1:7c:4f:5c:cd:e3:d9:6e:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:2A:DC:6A:91:1C:41:06:91:70:35:A3:A3:C3:26:89:22:49:00
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:c0:6d:36:85:2d:d8:6f:3c:c2:ae:7e:30:6d:82:0a:54:
93:bd:35:d6:e6:04:d9:bc:0e:89:8f:27:2e:0b:99:64:27:da:
0c:63:d9:1d:d5:a4:c5:5e:fa:86:2a:8e:cb:62:a0:f5:1e:ff:
1a:76:8f:6e:de:41:21:1c:c9:51:0b:72:aa:04:d9:62:06:da:
5e:59:de:68:ea:c1:5b:3b:3e:5b:80:fb:57:ab:25:4b:6b:45:
20:73:1e:7b:9e:60:f6:d3:68:53:56:08:5a:63:23:2f:90:e5:
b0:fc:27:82:10:12:42:8c:20:35:6c:8a:5e:b2:81:57:af:8f:
6a:55:d8:fa:10:ed:58:04:b9:04:fe:94:eb:68:fd:5f:85:f9:
37:49:17:fd:ff:46:2c:43:dc:4a:fe:af:bf:15:2f:ec:98:d5:
f6:51:b7:00:97:06:0f:f1:b7:a6:b3:10:90:d8:9a:01:0e:28:
97:16:86:cd:b9:93:95:46:b1:cc:53:ab:72:96:f8:3f:4b:ad:
f1:ec:82:43:79:16:8a:90:0a:49:b0:51:c9:c5:da:f4:0e:42:
01:06:b5:bd:59:01:44:fc:36:e9:e4:03:6f:f0:a4:88:19:4d:
d8:e5:aa:73:45:02:e2:cf:53:13:ab:e1:41:ad:f2:a7:3e:bd:
8b:ba:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:09:26 2025 by rpki-client