Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: eOYRdfMNlvDWOEijBl3KSZKyPcU3jed1/L63rBNlQzI=
Subject key identifier: DC:49:AD:C6:9F:06:1F:1C:CA:B6:90:94:37:DF:E0:C9:76:28:28:F9
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 01964AEAEC4C874881F1D80C7DD044DB0BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 01AC
Signing time: Fri 18 Apr 2025 22:00:31 +0000
Manifest this update: Fri 18 Apr 2025 22:00:31 +0000
Manifest next update: Sat 19 Apr 2025 22:00:31 +0000
Files and hashes: 1: q6cfXUDveWHdgQWTYKqVwvvOAe0.roa (hash: BJPMM6GNYN6IqCj9i2G5fXzbZjuTVnz0OtAPd8t+eZk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: 24jL08l3fHUX+g9Rs0arxMJk3tPBYwyO2rShpR3kRT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:ec:4c:87:48:81:f1:d8:0c:7d:d0:44:db:0b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: Apr 18 22:00:31 2025 GMT
Not After : Apr 19 22:00:31 2025 GMT
Subject: CN=dc49adc69f061f1ccab6909437dfe0c9762828f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:de:af:69:03:db:7e:f0:10:14:a0:af:fb:
31:ce:61:06:50:f6:1a:0e:8a:89:8b:22:ef:50:c1:
3a:46:52:c2:c4:66:99:9e:0a:7d:07:2f:07:28:16:
88:6c:1b:95:ee:e1:5a:e7:b9:0e:fd:20:b1:cd:2c:
63:84:c9:0d:61:d2:c8:ce:88:92:0f:10:fc:b2:11:
6a:d0:01:5e:2f:a4:9c:3f:9a:de:1f:aa:3a:c2:4d:
63:b0:0f:a2:34:cd:fe:19:79:56:00:83:9f:34:99:
2f:52:0d:94:23:d3:4b:31:47:ac:1f:d0:be:d0:86:
96:1a:7d:5b:4b:46:e9:f0:01:29:c6:29:e7:9b:6b:
81:19:5e:a7:34:d6:b6:c8:8a:39:3b:df:4e:16:36:
f6:1c:a7:55:a6:97:fc:b6:9f:b7:6d:d6:87:3f:72:
5a:cb:95:f5:5b:cb:94:ea:d8:69:73:e7:88:72:3b:
41:8f:d9:af:7e:c3:49:97:c0:1f:99:48:b4:a0:48:
f4:d9:85:05:b5:87:79:8e:3a:d3:a7:19:38:db:f6:
d9:6d:9b:e3:f8:79:c2:00:4d:1b:90:be:8a:70:f1:
df:63:d0:34:94:c2:b7:b2:ba:d9:63:23:2b:ee:06:
52:e6:d0:8f:b4:e9:da:66:6a:16:25:a3:34:7a:e5:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:AD:C6:9F:06:1F:1C:CA:B6:90:94:37:DF:E0:C9:76:28:28:F9
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:eb:86:dc:95:38:25:05:c2:6c:9b:a6:05:32:d8:5d:52:d6:
51:7c:3e:5c:d6:b2:39:ef:1e:47:a5:f0:23:1d:39:69:fb:ba:
1a:17:49:21:a6:eb:17:65:e6:84:2d:2f:35:0c:a7:aa:62:03:
c1:da:52:a1:2a:17:1c:38:ab:29:fb:9f:6b:62:f3:92:50:f4:
6f:d4:be:bc:0c:0d:ce:eb:71:77:97:47:2e:4d:ad:b0:73:15:
21:3d:bb:4d:bb:a0:3b:78:eb:67:ac:01:08:16:e4:1d:69:d7:
ae:8f:ac:9f:35:df:8f:5a:7d:14:65:c2:f4:95:a4:e2:e6:d7:
67:b1:49:4b:24:f9:84:92:41:f8:61:6a:14:fd:9b:58:47:74:
ba:73:e3:5c:a2:67:e0:e0:8c:67:f0:39:79:be:c0:27:b4:c8:
13:04:85:0c:13:d7:9e:69:f5:b1:ce:f6:b3:93:0a:7d:a9:24:
2d:02:66:82:75:88:a3:8c:c3:9b:ff:ed:b2:5a:90:11:de:6e:
95:ef:c1:57:07:da:f1:62:4f:45:ba:9e:9c:a7:4e:a6:15:e4:
12:75:c9:e0:9a:6d:30:db:d2:f6:04:90:c2:e7:e1:26:07:cb:
65:f2:9e:dc:b1:8b:88:0d:9b:4c:d5:bc:34:c1:81:40:47:5a:
61:5d:de:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:08:58 2025 by rpki-client