Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: +nHHIfb49mPA7a5gVjPyKzzI4TGA5FMalW7lM7k0tCo=
Subject key identifier: 8D:58:60:0D:23:04:D7:EF:9A:65:B5:7E:6B:F5:73:E4:47:8B:77:1B
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 01958F2A94032EC9EEABE65C2882CAF4A7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 135E
Signing time: Thu 13 Mar 2025 11:01:27 +0000
Manifest this update: Thu 13 Mar 2025 11:01:27 +0000
Manifest next update: Fri 14 Mar 2025 11:01:27 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: Ga4jP6w7YkSac6BIv+RUPIvGriqhuBy4LoYiNAiydYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:94:03:2e:c9:ee:ab:e6:5c:28:82:ca:f4:a7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Mar 13 11:01:27 2025 GMT
Not After : Mar 14 11:01:27 2025 GMT
Subject: CN=8d58600d2304d7ef9a65b57e6bf573e4478b771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:0a:b4:1f:ee:5a:54:7c:fa:0d:e1:37:af:
7f:70:67:63:06:01:83:cd:91:9c:bc:70:2c:52:ed:
37:d4:c1:75:28:72:28:0e:32:b0:b0:51:0c:8d:23:
a0:49:61:f3:5d:1f:ea:1c:63:26:12:b7:65:ec:78:
f8:79:bc:94:41:32:2f:0c:b9:ce:34:1b:81:75:3f:
71:34:dd:69:bc:ce:a9:53:3f:af:7b:40:70:bf:c5:
30:d0:66:70:15:31:7c:1b:c4:b4:86:04:3e:55:7d:
f6:78:1e:73:38:28:f8:5b:86:d5:cf:3f:98:c6:ce:
3f:26:79:9d:c3:d2:b8:57:3c:b0:be:37:87:7c:91:
10:03:4e:d9:c6:80:f1:01:85:20:22:60:9f:3e:26:
23:aa:25:ae:63:da:4d:cf:f3:59:e8:6c:b1:8f:2a:
39:05:3d:e9:d6:2e:75:db:46:14:aa:c9:b8:09:1e:
b8:33:42:15:fa:d3:b5:e1:28:28:d2:80:73:34:f4:
04:30:6c:ab:e2:c0:c5:67:94:28:0d:62:02:d5:eb:
ba:33:83:d0:6f:f1:cc:59:3d:c3:13:21:54:53:f0:
6a:46:d5:26:25:5a:97:36:38:ba:db:d1:00:0e:58:
a8:0e:e9:a4:30:94:47:12:7d:b0:54:56:79:fe:75:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:58:60:0D:23:04:D7:EF:9A:65:B5:7E:6B:F5:73:E4:47:8B:77:1B
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:39:b2:4b:d7:a9:35:70:de:c5:31:be:90:49:bb:b6:81:
84:da:27:d1:e3:f3:c2:ee:d8:68:e8:1f:54:8e:d5:64:3e:40:
33:fc:ec:a3:31:64:21:25:c2:cb:74:81:6f:86:d5:b5:27:0a:
d7:74:57:d0:72:85:4b:09:da:1d:ed:a2:db:06:79:94:b8:9b:
b8:e1:d2:82:49:fc:e6:4c:7b:2f:af:e8:14:a0:cd:4f:6c:eb:
09:34:5c:2d:98:81:13:ab:71:fc:c1:81:a0:1c:8f:44:79:a2:
0c:9f:90:c6:e7:97:86:ae:9e:e0:d6:d5:c0:26:8f:ba:4c:e9:
77:20:b0:30:68:32:03:d8:c3:b6:ff:ed:0f:59:18:97:ae:bb:
31:5a:dd:69:73:94:a2:e3:4c:e7:e4:da:c0:d4:ef:d0:30:78:
43:10:c2:f6:33:e4:28:65:d5:8e:2b:86:c9:78:67:8d:11:3a:
6a:95:36:25:a4:77:68:cb:2e:6a:2a:af:76:94:d5:33:0b:a2:
6b:7b:65:67:5c:77:f8:c3:ff:8d:fc:a7:69:08:9e:9b:d1:d4:
d8:ce:7e:1b:69:c1:3b:89:e3:20:cd:37:8e:7f:60:3e:e5:d1:
72:a2:8e:4a:1a:b6:02:28:01:54:1c:7f:a1:10:fa:cc:0d:f5:
8e:26:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:21 2025 by rpki-client