Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: VTuingX7jlgAr0ZLO73xnwt5ArVTHBXuq1+lVwPSXDM=
Subject key identifier: 8B:AE:1F:C9:8B:E0:19:98:AA:39:01:32:34:E2:5E:54:8B:AD:85:1E
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 01964A46A58E37ACD1FB8E3D2E7BFFC2BB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 19:01:05 +0000
Manifest this update: Fri 18 Apr 2025 19:01:05 +0000
Manifest next update: Sat 19 Apr 2025 19:01:05 +0000
Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: aWtgzU1YLmCuRCu3smu7SKPBwOlYtPJuusmwGafBw6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:a5:8e:37:ac:d1:fb:8e:3d:2e:7b:ff:c2:bb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Apr 18 19:01:05 2025 GMT
Not After : Apr 19 19:01:05 2025 GMT
Subject: CN=8bae1fc98be01998aa39013234e25e548bad851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:d7:1c:cf:e1:c6:25:5d:4a:96:d8:5e:51:
6f:c1:50:f9:f7:1d:94:e8:80:47:f8:ec:a4:8a:c7:
1c:f8:0d:ee:8a:b8:ff:14:33:b2:7f:0d:3c:3b:a6:
ad:56:6f:22:05:d4:6e:f5:7c:ab:61:42:1f:ed:7f:
a4:0d:45:33:20:ec:4e:92:f6:a4:79:9a:a5:99:52:
17:93:78:97:ec:15:39:67:6a:1c:3d:eb:bd:a5:7f:
a6:64:7a:a1:f5:32:f1:93:57:68:14:b2:cf:8b:98:
7a:62:e7:33:09:f0:4d:d7:fc:2b:4b:29:be:5a:7c:
f9:34:d0:31:7a:31:d7:53:0a:a2:0e:92:4e:10:7b:
d3:d5:d4:ac:d5:c3:c3:9c:76:e1:2c:14:75:87:61:
82:5c:67:01:78:2e:86:14:e9:5c:a5:19:02:55:f9:
63:fb:d4:0e:89:55:e3:6c:c2:86:f4:6b:7a:06:6a:
84:e7:e3:f5:a7:89:0d:a1:55:35:b1:fc:9c:43:1a:
0a:28:6d:96:27:28:3b:13:f3:26:96:83:e0:74:ee:
6a:d3:88:81:36:82:40:53:85:cd:b6:5a:97:dd:7d:
ff:c7:69:24:b5:5b:99:de:b0:96:68:ea:04:c0:8b:
24:e9:35:59:f3:ed:ff:62:65:d6:99:5d:b6:19:5c:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AE:1F:C9:8B:E0:19:98:AA:39:01:32:34:E2:5E:54:8B:AD:85:1E
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1f:bf:65:c7:91:0b:9f:a8:71:75:8f:4e:3a:9a:c9:e3:53:
6c:e3:df:f4:00:d4:a0:4e:17:6e:c3:3c:62:8f:de:1c:a6:b4:
c8:ef:e4:07:48:86:e8:1c:b8:5e:11:33:23:ed:af:76:52:fe:
ab:03:07:09:e4:19:3f:1f:ac:c2:a7:21:bb:e1:40:15:ba:97:
0b:6e:b3:41:e0:54:30:d4:6b:c7:be:20:ad:81:d4:92:74:32:
d1:bc:3f:e5:10:c8:d7:63:ba:ea:5b:77:5e:ba:66:68:cc:81:
a9:19:b2:8b:47:f1:4d:90:6f:a5:79:a2:93:24:9c:dd:63:96:
8c:a0:c9:95:95:58:4d:31:20:22:85:a4:6f:f8:f2:74:75:d9:
d4:ba:52:b1:27:c0:bd:fb:4f:19:ea:8b:2b:f2:3f:22:22:0d:
1f:6d:01:b1:13:6d:bd:2b:fc:dd:a1:e0:e3:fb:ea:1b:44:16:
39:a2:79:f5:28:7f:4c:d1:74:41:3a:c0:b4:86:14:a7:ca:76:
74:da:cd:ea:40:a2:16:52:d3:93:1b:78:d2:55:31:9f:6e:8b:
40:ee:ec:80:9d:c9:22:a8:e9:b8:28:1d:98:0f:0a:b5:67:8c:
a4:ac:9f:58:39:1b:64:29:26:f9:6f:49:c2:1b:db:c2:c7:75:
c4:1a:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:15:11 2025 by rpki-client