Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: 6ZjEEICBfaa6+M8Beo2N1fxj36mvirzu8lC9Bz6stq8=
Subject key identifier: 3E:4C:CC:13:3D:91:45:18:37:E3:CA:BA:43:F5:EC:56:84:00:A2:84
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 01958F97E96EA4837D7546A6B9AE7EF38842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 14A9
Signing time: Thu 13 Mar 2025 13:00:52 +0000
Manifest this update: Thu 13 Mar 2025 13:00:52 +0000
Manifest next update: Fri 14 Mar 2025 13:00:52 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: RzQHGzniTvx1Il7ekbfNGRk0SDQU/Gb732OGqjyTh78=)
3: lmtLzOVEBCMJmFDW97nmpW6PzFg.roa (hash: iVAnqzIcFvJJNH7mwFr2Z4NAC8vfHKTonzu7qSoeFDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:97:e9:6e:a4:83:7d:75:46:a6:b9:ae:7e:f3:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=3e4ccc133d91451837e3caba43f5ec568400a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:d5:b2:39:b1:38:28:9a:7b:42:38:3b:a5:
53:f6:e9:32:1e:b5:0f:5a:3d:4d:08:9b:dc:df:b7:
4a:19:b6:a5:d5:40:44:b1:af:c1:5a:8c:63:1c:ec:
2d:36:45:27:38:53:28:d6:89:54:f8:53:90:bb:53:
49:99:5d:ba:80:a5:c0:9e:38:4c:48:48:3f:7a:ee:
63:38:4a:4f:37:42:54:d9:81:b5:2d:98:1c:30:bb:
20:56:cd:7f:5a:54:bc:26:55:b6:15:95:26:fd:db:
1b:a4:65:ea:eb:5a:0e:94:8d:67:c9:b9:58:fc:34:
96:8c:1c:b2:eb:81:7a:1d:54:a6:d6:7d:aa:bd:e1:
16:b9:d7:fe:c2:97:e1:33:d6:d5:83:7c:15:31:96:
58:35:74:ea:38:32:f8:24:85:91:5e:5f:e2:d6:ed:
7d:bd:5c:1b:d5:40:d2:db:cb:3e:79:a8:b7:4d:f0:
a7:3e:07:b4:a2:60:17:74:35:fb:ac:df:59:8a:67:
89:16:54:40:3e:de:9c:40:9d:f6:f0:b7:52:c6:e0:
45:83:28:ef:4d:3d:a2:15:9f:7b:42:d0:f4:62:ad:
32:06:92:f8:39:3d:de:ba:16:94:c6:f1:39:6e:9c:
e5:23:40:da:38:26:00:f6:3f:16:62:69:cd:e5:42:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:CC:13:3D:91:45:18:37:E3:CA:BA:43:F5:EC:56:84:00:A2:84
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:12:29:df:af:c0:70:da:76:64:0f:a8:92:48:1b:4a:1f:a4:
c4:7c:87:bc:89:40:21:af:bf:02:00:9d:54:78:73:43:65:aa:
04:34:87:0d:c7:38:eb:93:a2:fe:42:ea:ec:c3:48:8c:af:30:
e6:a4:20:74:0a:ea:a9:82:6f:a1:e7:f4:5d:71:e6:db:6c:0d:
71:8b:72:39:c3:04:e8:92:b9:c2:a5:12:56:10:54:2e:a3:48:
51:af:0b:9b:b2:1d:34:89:38:ac:4e:70:70:a1:4c:c5:a1:32:
f2:8f:c4:5d:ca:a1:be:ee:87:88:ba:52:6d:e7:17:08:22:c6:
11:d1:b1:ed:fd:05:f0:91:69:db:6e:5d:22:34:e0:27:8f:61:
43:52:6f:47:78:90:e2:7d:3f:0e:ec:b2:66:a3:58:48:a1:85:
e8:16:0f:36:90:12:99:8b:97:36:1e:df:a0:04:4a:c1:0b:cd:
1e:40:83:a2:bd:4c:01:b6:e0:35:1b:0e:21:fa:85:6c:29:af:
4c:da:05:db:0f:ba:05:8a:4c:a2:95:e8:34:3d:e2:50:df:a8:
f6:ca:bc:69:e0:d1:38:f9:b1:39:0a:32:18:b8:ea:38:07:59:
f4:bc:c2:f9:7d:d2:1e:6b:2d:61:bb:ad:08:48:a3:6d:cb:08:
57:54:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:42 2025 by rpki-client