Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: 3jerhYgPDapzanrOE200jKVHD4m6HqPb+lGnXkDgKdU=
Subject key identifier: 97:40:67:B6:47:56:CC:7F:B2:40:0C:F5:B4:88:E6:DA:DB:5F:C3:7F
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 01958C290995B2640BF9B5D29090C795CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0A93
Signing time: Wed 12 Mar 2025 21:00:54 +0000
Manifest this update: Wed 12 Mar 2025 21:00:54 +0000
Manifest next update: Thu 13 Mar 2025 21:00:54 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: a/7VfYChDuQqdMyUeA0s1hOUdoQBtJOCUjNhI/id5Uo=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:09:95:b2:64:0b:f9:b5:d2:90:90:c7:95:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Mar 12 21:00:54 2025 GMT
Not After : Mar 13 21:00:54 2025 GMT
Subject: CN=974067b64756cc7fb2400cf5b488e6dadb5fc37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:0d:8d:c5:3a:f3:11:4f:97:80:b5:47:b3:
0b:fc:8d:3f:0a:1e:ce:ca:62:4d:28:09:62:29:50:
76:c7:38:2b:d9:6f:91:2d:10:1e:2d:4e:d2:e8:4c:
dd:0d:ab:36:45:55:0a:e0:ee:8e:be:ff:21:d6:a7:
f7:1d:c5:c4:e0:c2:10:c9:37:52:cf:c1:1c:72:e3:
12:d2:75:d0:bf:ac:c2:d9:4d:b3:25:86:54:a4:e9:
31:e5:d8:88:da:83:55:da:b1:ff:11:9c:79:6a:50:
d5:3f:74:f7:68:e1:ee:cf:43:22:e4:af:5d:51:fe:
4b:7c:1d:54:b0:c9:13:08:b9:0f:77:99:70:31:5e:
0c:60:11:b2:0d:b4:4a:a1:73:88:60:1b:e8:d2:4a:
b7:27:c2:55:d8:33:3d:70:a5:67:33:73:c4:cc:33:
06:d5:45:3d:07:d0:5b:d0:c6:b2:50:75:e3:0e:90:
27:24:b8:45:dd:aa:44:7c:be:3d:9e:b6:f5:6b:cb:
de:0f:9e:ef:0d:17:cd:97:53:cd:3e:1b:85:c8:26:
2b:c8:d1:91:98:37:72:81:eb:5b:dd:97:02:dd:35:
47:bb:fa:ac:9a:03:87:ec:67:4c:dc:9d:07:cc:41:
a9:f8:71:25:b6:73:be:ce:5d:3c:f0:56:02:97:a1:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:67:B6:47:56:CC:7F:B2:40:0C:F5:B4:88:E6:DA:DB:5F:C3:7F
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:14:5d:27:9f:bd:92:ba:1d:a0:e5:1b:0d:d6:ce:1d:00:71:
d3:d8:68:01:60:a7:48:6b:81:f0:39:74:fe:e1:28:f6:69:dc:
bb:73:1a:fd:58:7b:e8:a1:0a:95:60:b8:a1:5e:75:60:18:e4:
f4:ef:c5:59:02:1e:bb:94:c8:83:73:ba:05:d2:8d:8c:6d:0b:
3d:e2:63:f5:df:ae:a0:98:09:a2:26:a1:4d:2b:1a:1e:d5:7b:
11:16:bb:e4:6b:1e:63:7d:e8:7f:93:93:c2:92:45:0c:b5:96:
9a:98:80:1d:cd:bc:1c:21:de:de:d5:17:ce:f7:09:b2:e4:05:
12:b6:2f:ec:93:5d:fd:be:1a:53:c8:ee:53:bf:73:fa:44:bd:
2a:bc:d3:53:c9:6a:78:cb:40:a0:38:a3:bd:32:55:32:6d:d7:
4e:a1:6a:fd:84:7d:a7:97:f7:51:cc:dd:bc:71:80:34:cb:22:
f5:ae:99:a9:e6:d5:1e:10:3c:b0:1e:87:a3:4b:41:03:57:a2:
ad:2b:4a:10:aa:37:f3:03:b1:7d:cf:29:b3:88:e6:82:dd:9a:
42:d0:b2:5f:1a:dd:87:7c:ea:3d:85:06:c8:d9:65:42:05:f8:
44:29:4a:8b:2b:da:cd:b2:0d:f5:4d:45:23:4c:49:4e:c7:a1:
d3:ba:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:06 2025 by rpki-client