Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier: A6pKW/Jv/f6BvmpyicMH0mRf3wfq/xRqNgGo4ZMONfI=
Subject key identifier: B2:D1:92:60:C4:EE:3A:F1:90:AA:F3:EB:BA:70:A2:2E:EC:E2:89:AD
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial: 01963EAFF6657B6096AA05DD292A31489153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 13:00:41 +0000
Manifest this update: Wed 16 Apr 2025 13:00:41 +0000
Manifest next update: Thu 17 Apr 2025 13:00:41 +0000
Files and hashes: 1: O8Js1mgAF0iv_PSwJLDMH2LqzNs.roa (hash: uCecidRlrlebYe8zpAxIMGUV7GE/OrG+H65AT04t1PQ=)
2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: N/KxDQLFZrRiHy4lpchQ5ct0EXLbJ6ABYI45U9wz/KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:f6:65:7b:60:96:aa:05:dd:29:2a:31:48:91:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Validity
Not Before: Apr 16 13:00:41 2025 GMT
Not After : Apr 17 13:00:41 2025 GMT
Subject: CN=b2d19260c4ee3af190aaf3ebba70a22eece289ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:2e:e9:5d:66:a8:1b:39:ff:ee:0a:8a:d1:
8b:77:7a:36:86:68:4b:3c:31:7c:f2:c1:91:ca:e4:
7c:4f:e6:d9:d5:07:9a:21:6b:15:f5:05:09:4b:8c:
19:1b:44:f4:ce:2f:9a:82:12:b2:d9:c4:7c:d9:8c:
43:2d:ae:cd:4e:6d:ff:9e:99:cb:7e:a9:d1:f7:ac:
e9:ee:31:d2:64:79:04:21:1d:cf:95:f2:00:ea:47:
13:e7:fe:69:d5:24:13:84:38:47:94:d4:1a:54:fd:
b9:cf:ee:12:df:9e:d0:0f:9f:01:80:06:a8:b4:cb:
65:34:43:5d:f2:6b:da:41:a9:49:3f:8b:21:63:1e:
5a:6c:36:31:aa:73:a6:53:f9:78:4b:67:ff:b9:11:
ac:1c:14:ed:cb:27:32:fb:7f:ea:f2:03:a1:e5:13:
47:1e:c6:b4:f0:9a:ff:0e:5a:6f:a1:86:c0:bd:46:
52:b3:01:97:c0:a8:8b:67:14:ef:4f:a3:ec:1b:68:
59:39:2d:2b:9f:b1:02:48:48:95:36:47:be:8a:f1:
f8:dc:66:fa:a2:38:9b:b3:ef:77:4d:12:25:b9:17:
36:83:f8:73:57:32:53:c3:f5:83:bc:e7:cc:10:17:
77:08:f7:eb:35:bd:a7:f8:25:1d:30:1b:47:47:04:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:92:60:C4:EE:3A:F1:90:AA:F3:EB:BA:70:A2:2E:EC:E2:89:AD
X509v3 Authority Key Identifier:
keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:c7:d3:ba:2f:03:06:2e:53:c1:03:07:5f:60:9e:5e:6d:
66:44:9e:30:17:c7:6f:13:3c:3f:1d:e3:f3:d6:1e:ff:81:84:
8a:b7:20:b6:68:5b:ec:fd:16:2c:73:f1:65:c0:ee:5e:a3:58:
ba:9a:a7:8b:64:97:3e:79:e9:11:af:35:8a:40:4a:fe:f9:81:
60:5b:c0:b4:35:4c:e7:a9:8f:ef:78:94:da:93:87:19:01:f3:
ab:5c:f9:07:b3:11:dc:a2:3a:60:c1:4d:9e:21:09:72:ea:1f:
2f:72:fd:cb:aa:c4:74:1c:f2:10:99:f0:27:03:c0:fd:36:ec:
b0:ee:54:0c:d7:58:6c:b4:0e:ae:e7:53:70:6a:c0:9d:d4:5a:
c5:b2:14:2a:77:7f:75:4a:34:1a:e7:78:99:56:f7:29:58:61:
8d:1b:c0:07:80:dd:79:0c:68:49:ff:90:06:fe:ae:89:ba:3e:
71:94:87:c4:6a:20:a1:4e:9c:16:52:f2:76:43:7e:8c:f3:95:
25:23:a0:b3:e8:7e:ef:94:54:35:a6:8d:89:46:0d:9a:f1:06:
2a:29:5e:6f:ba:3a:de:68:87:53:20:52:aa:a2:8c:94:f3:f0:
7b:94:5b:b6:27:6b:1d:f1:3e:4e:25:28:eb:1d:78:57:ac:8e:
e9:b7:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:24:14 2025 by rpki-client