Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: h3k58yd08i3FgrvzBWKBDwPauHHueP6WTjMpMo1Lf2U=
Subject key identifier: B0:92:4F:88:39:A5:9B:67:76:C6:02:97:10:7D:77:0C:26:0D:E4:AD
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019652A4DAB93091D97C40B74F8E6AC64924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 123A
Signing time: Sun 20 Apr 2025 10:00:57 +0000
Manifest this update: Sun 20 Apr 2025 10:00:57 +0000
Manifest next update: Mon 21 Apr 2025 10:00:57 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: EY7ck6/cmvFGeClTHBH3aV+Tg/SgrQdjlH0JiTLmRgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:da:b9:30:91:d9:7c:40:b7:4f:8e:6a:c6:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Apr 20 10:00:57 2025 GMT
Not After : Apr 21 10:00:57 2025 GMT
Subject: CN=b0924f8839a59b6776c60297107d770c260de4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:4d:fd:41:2f:b4:0b:e8:4e:d7:f2:ae:b7:
ce:0b:be:cd:85:94:ff:b6:9c:2c:a3:96:98:6f:09:
f0:f9:b1:99:53:e6:e2:95:53:4d:9e:a2:1a:6c:f0:
a2:8c:e0:29:30:5f:3b:0a:7f:ec:9d:75:a0:ec:4d:
21:af:35:c0:c1:47:bb:99:81:3a:ca:89:dd:7b:26:
5b:39:8a:88:f0:bb:26:7c:e7:4c:9d:0b:16:1e:6e:
6d:3c:58:6f:e1:19:84:ba:55:39:5c:d2:01:2f:83:
aa:c2:26:71:b4:d0:79:1d:65:84:c7:d8:11:6b:75:
05:b2:0f:42:fa:38:c7:6f:6b:97:5b:5f:82:34:b5:
26:81:95:b1:ea:8a:b1:40:8e:66:00:7e:67:70:85:
f6:40:8b:7b:08:05:58:7f:60:d0:47:ce:eb:a2:de:
5c:a4:5b:ce:25:d9:2d:38:9e:bd:f8:43:e8:a2:af:
ca:fa:19:04:e4:ea:b1:dc:66:9d:79:f1:b5:07:1f:
e0:6b:f0:20:6b:34:27:2d:14:69:f4:11:64:2c:f5:
96:79:bb:48:9b:bf:ce:8c:e7:8e:23:e8:ef:bf:61:
e0:cf:27:b2:4e:46:69:b8:60:9c:8e:00:60:8b:e9:
83:11:eb:1c:13:75:ce:75:4a:86:fb:c5:99:3a:c8:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:4F:88:39:A5:9B:67:76:C6:02:97:10:7D:77:0C:26:0D:E4:AD
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:83:6b:21:a2:b7:17:a8:f8:fc:a0:e7:fe:59:11:96:37:
c3:57:cc:af:2e:d1:07:f9:3b:5d:be:45:8b:d5:2a:ee:14:c9:
13:fe:21:f8:80:2c:6c:3a:45:6b:98:fb:ec:c9:e2:a2:63:08:
f0:4e:ad:51:4d:1d:8d:1c:1f:1c:a7:cf:2d:33:c6:04:12:42:
ae:57:4a:b8:45:f8:45:52:d4:97:7e:ce:ac:03:2a:59:b7:73:
a0:5c:3b:b5:8a:0f:2f:8d:cf:a8:66:35:00:8c:3b:6e:23:7a:
94:ad:02:3b:14:85:13:06:7f:0d:6a:d0:fc:45:06:ca:d4:fc:
ef:2c:a6:29:e1:d8:93:a6:40:83:f8:1d:da:00:e4:68:65:64:
93:a4:06:04:12:a7:ae:77:83:d3:f4:e6:09:47:7f:b9:8c:b0:
08:cd:dc:8f:14:7a:41:00:84:a7:75:a2:15:a7:fc:2c:72:b1:
47:bc:80:98:a1:1f:2f:62:5b:4a:9c:51:99:af:14:f7:6f:08:
2c:b0:33:20:00:92:06:32:07:9b:09:fc:ad:ec:b6:1c:1d:15:
47:35:b3:f1:28:2f:16:e8:a7:02:a9:dd:96:ab:57:47:26:30:
d5:4b:3d:71:85:fa:49:66:c9:e5:15:2c:e4:d9:4f:0f:e6:a3:
21:60:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:38 2025 by rpki-client