Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: YQJWlA+UM0eI7la/sPR3/vxFoTAmMrB3O95DVO/cqrk=
Subject key identifier: 7C:75:E1:30:DA:8A:B0:29:D5:E1:3F:95:CC:3D:D0:5F:C7:DC:62:17
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019656EF1A02EF4CF9EDEF931D3C743D50A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 06:00:32 +0000
Manifest this update: Mon 21 Apr 2025 06:00:32 +0000
Manifest next update: Tue 22 Apr 2025 06:00:32 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: wsr4MOoAFkpHjAH1BAQiME6Osu2vEIqIHvzcOqOBDhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:1a:02:ef:4c:f9:ed:ef:93:1d:3c:74:3d:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Apr 21 06:00:32 2025 GMT
Not After : Apr 22 06:00:32 2025 GMT
Subject: CN=7c75e130da8ab029d5e13f95cc3dd05fc7dc6217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:42:85:05:c7:e9:35:0e:fd:0b:0d:b1:de:
ff:05:05:3d:e8:73:2b:ba:b2:8a:2b:72:da:76:38:
62:89:37:6f:70:08:83:d9:85:c6:20:88:71:21:14:
c7:0b:7f:4a:6c:14:b9:40:fb:af:da:2e:0e:cd:f6:
ad:3d:06:4e:8c:6d:10:2a:5e:11:52:9a:2f:28:29:
4b:65:4d:ad:84:a4:c5:d9:87:38:c0:f9:46:dc:42:
93:1b:f1:b4:43:32:f2:10:bc:a2:4d:8a:35:3b:bc:
02:b8:9f:9f:83:6d:ce:25:e3:e9:3b:39:2d:a8:e9:
a6:bf:a4:55:72:c4:34:83:6c:63:07:f4:81:11:ed:
f8:44:63:6d:13:ce:26:6c:8b:5a:31:2c:d1:df:73:
17:df:19:0b:62:ec:c0:8d:4b:22:bc:89:56:23:c8:
5e:63:46:93:bc:47:08:a9:a6:fc:2a:86:61:2d:4e:
f2:52:45:b7:a3:57:30:9c:c0:40:85:a0:b7:e5:0d:
3f:31:f2:28:19:dc:22:31:ff:89:56:12:ea:a4:c9:
79:35:0b:04:31:b5:e1:d3:c7:82:75:84:c4:e1:a0:
91:71:96:43:91:5d:21:f8:e7:b7:03:ac:f6:80:88:
e6:5a:4c:71:e8:e1:ab:d2:4c:93:8d:97:13:05:d2:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:E1:30:DA:8A:B0:29:D5:E1:3F:95:CC:3D:D0:5F:C7:DC:62:17
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cc:0b:8a:46:65:74:6a:1b:f4:1d:38:19:a4:ec:d7:c2:8f:
84:aa:65:54:e5:ba:d5:44:2a:e7:45:31:4c:49:8e:01:4d:af:
20:4d:49:54:7d:cb:15:70:c1:13:60:24:45:cc:83:92:63:bf:
b8:54:f9:4c:33:96:46:10:d3:32:43:48:d4:f4:0e:ea:88:bb:
64:89:6c:01:43:a0:b0:62:b4:8b:9a:73:11:60:67:bf:cb:3e:
bc:6a:0f:35:3b:e6:3d:df:61:ee:f8:0b:70:05:3d:ba:ee:dd:
af:81:40:09:fd:11:f9:2d:07:e8:b0:b3:01:3d:bb:c7:71:2f:
59:6b:1d:a5:07:88:65:65:12:30:46:63:91:fb:72:eb:82:f9:
7a:0a:da:0e:cc:f3:ff:ed:a7:66:74:ab:3d:79:01:c1:02:97:
29:50:cd:fa:1a:e7:ce:7b:99:c9:55:e2:2e:36:8c:b8:49:1a:
78:a8:ae:84:d8:80:14:78:e0:98:10:0b:91:d0:a3:48:e1:c1:
0f:84:57:a9:8e:a4:0b:8d:4a:72:1a:3b:05:b5:77:af:d9:40:
57:15:7b:e7:59:6a:ab:ab:37:44:7a:ce:86:03:fb:f7:bf:8f:
4b:45:1b:5c:c1:77:17:04:5c:ca:02:b6:57:87:c1:a2:1a:95:
08:be:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:52 2025 by rpki-client