Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: igIMlOX+SvTQJMDrAP8cAsBZxou+tEFKShEmhyuj2eI=
Subject key identifier: 75:0E:95:7B:A2:39:6C:16:79:F7:88:E1:E5:BA:37:1A:76:0C:C8:7D
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 01965538487430EC9B2EB627A162E89B0606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0519
Signing time: Sun 20 Apr 2025 22:01:13 +0000
Manifest this update: Sun 20 Apr 2025 22:01:13 +0000
Manifest next update: Mon 21 Apr 2025 22:01:13 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: x1Tgc3/uvmpsR7s00eb/P4fruxeXrpVimILXapaWqsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:48:74:30:ec:9b:2e:b6:27:a1:62:e8:9b:06:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Apr 20 22:01:13 2025 GMT
Not After : Apr 21 22:01:13 2025 GMT
Subject: CN=750e957ba2396c1679f788e1e5ba371a760cc87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:50:e1:1b:39:a3:09:a1:54:47:d8:6a:09:
4e:44:48:a1:17:cc:bf:d5:2d:be:f0:34:a0:01:91:
10:e7:48:3e:09:30:28:4a:de:0e:63:92:c9:0d:32:
a2:0d:92:5c:a8:4e:b8:09:69:36:0f:57:d2:74:c1:
e3:e4:fa:53:f3:53:22:18:73:17:60:8e:2e:97:33:
65:8d:f0:9a:0a:f4:dd:6f:b3:84:05:da:df:f5:05:
16:41:29:66:f6:98:53:a9:70:4d:0c:ce:37:33:ff:
37:f7:02:e1:b1:d2:0a:b9:4d:64:d2:7a:93:bb:0d:
b1:2d:78:aa:d0:1e:b7:4a:75:1b:11:83:ca:9c:8a:
68:e3:c4:7d:3b:a7:c8:cd:39:78:2f:95:a9:ef:a0:
6d:b9:1b:5d:47:11:10:3e:59:e9:0c:92:62:87:a1:
24:67:5c:8e:23:e1:53:30:e7:cd:93:15:0c:4e:89:
3c:09:42:0d:95:ed:c3:6f:0f:0d:54:b7:2c:06:fc:
8a:7a:84:2b:d3:ef:93:91:36:f4:1c:f9:37:62:80:
c2:74:78:47:3d:85:18:32:ec:d8:32:e3:da:d8:5a:
99:1a:50:24:78:0f:ee:50:9a:29:d3:66:fa:19:89:
a0:56:cc:b6:19:8e:46:5c:10:04:25:5f:6c:be:50:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0E:95:7B:A2:39:6C:16:79:F7:88:E1:E5:BA:37:1A:76:0C:C8:7D
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b6:5d:97:5e:1d:e1:ff:29:3b:db:60:b0:e8:ee:25:43:81:
6f:62:c6:a3:ee:dd:31:08:e4:88:a6:f8:28:9d:26:d4:d1:3a:
c8:77:b2:b6:c2:a9:28:68:38:9b:5b:4d:a4:1f:65:df:36:84:
d6:1f:4d:d0:e8:d7:00:67:60:84:45:80:81:63:f9:1b:b1:2a:
7e:29:f5:5b:23:63:4a:9e:97:9a:26:26:90:11:89:1f:15:3d:
89:89:ce:3c:fa:73:27:b7:b9:3f:d4:db:73:f2:d5:0a:01:b0:
fc:4d:8f:b0:6c:95:c8:fd:f2:31:33:9c:00:f0:3b:d3:1b:dd:
36:66:21:4b:2e:90:f9:8e:c6:72:c5:c9:13:f9:32:e6:65:5e:
85:db:6b:cb:89:9e:11:d9:4d:4e:dc:56:72:14:2c:f3:d0:6a:
18:1a:69:f7:6d:cc:e7:73:22:8d:fd:ac:ec:b6:67:a8:a7:8a:
e3:42:27:cb:54:fd:90:99:12:3a:f3:23:f4:bc:51:4a:b6:c1:
8f:4d:ba:c0:75:21:46:52:de:ac:0f:94:13:61:7f:a2:93:54:
1b:0f:60:21:bf:1c:80:04:ca:d9:92:a9:9e:0e:98:6b:d9:83:
3b:9b:c4:e2:e5:c5:ae:f8:61:a3:c9:f0:fb:5b:a4:d7:7f:23:
42:99:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:46 2025 by rpki-client