Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: 9Q3WWndCQC1wSj6mgiCTjxg1r40GEN+g0vCYyLvkKrk=
Subject key identifier: 4A:22:3F:88:2D:EE:F3:BA:51:55:5E:D8:58:26:E0:ED:D5:2E:3C:92
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 01958B8478055958ED7161FE431215932364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0CF1
Signing time: Wed 12 Mar 2025 18:01:09 +0000
Manifest this update: Wed 12 Mar 2025 18:01:09 +0000
Manifest next update: Thu 13 Mar 2025 18:01:09 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: BjHWaf89c6dL78kmQYNL8gC6ika7y+btXIam0Z262e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:78:05:59:58:ed:71:61:fe:43:12:15:93:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Mar 12 18:01:09 2025 GMT
Not After : Mar 13 18:01:09 2025 GMT
Subject: CN=4a223f882deef3ba51555ed85826e0edd52e3c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:3d:f6:13:5d:52:d2:7a:a5:a7:dd:77:13:
d6:af:66:82:05:c4:f1:3d:4e:ae:04:fc:e9:99:f1:
c2:72:e6:c5:16:f9:7c:89:e1:a8:49:a5:65:9f:dc:
03:66:41:e9:68:b2:24:28:4f:11:52:1e:d5:fa:65:
17:71:2f:5f:90:99:a5:d4:e5:8c:be:09:c6:b4:55:
3d:73:00:f8:56:e0:32:c2:64:17:81:ec:11:0c:73:
4b:1e:cf:b6:58:12:ed:20:bc:f2:e1:ea:ab:e1:0d:
70:73:a2:09:fb:9e:f0:b0:6c:39:8e:67:c4:b0:44:
91:74:f3:b5:e9:13:0e:d8:ec:3d:a8:24:72:10:e0:
a5:e2:7f:f1:93:d1:eb:1d:ff:9b:08:d7:18:94:e3:
f4:64:f3:98:20:a2:b0:09:e6:6f:a1:be:87:df:61:
65:96:30:f0:79:1f:3f:1a:c7:99:cf:29:36:f4:98:
22:b4:a6:1b:7f:49:cd:9b:2c:14:ad:f6:1a:5a:d0:
8d:66:c6:ba:1f:aa:31:dc:95:84:2b:f6:e3:f8:70:
b5:43:bb:f9:f0:b8:9c:91:90:39:ec:84:c4:5c:e3:
7a:5e:26:a1:75:d2:60:bc:9d:46:b6:0d:f1:ce:09:
a6:2e:a6:63:6a:30:d4:c3:26:54:a4:6a:c1:79:4d:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:3F:88:2D:EE:F3:BA:51:55:5E:D8:58:26:E0:ED:D5:2E:3C:92
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5e:be:6e:03:b0:63:08:a3:f5:94:fe:25:50:22:fa:53:57:
6b:17:98:0f:9d:83:d8:bc:4d:8f:f1:4d:cb:72:b9:c4:83:14:
43:60:72:f5:63:a4:c9:0b:d0:5f:5e:44:2a:00:e5:13:1c:dc:
4c:2a:89:f5:fe:42:e7:c5:98:5d:79:bf:c8:6e:3b:13:c6:5f:
1f:d9:b5:e7:82:d7:86:9a:41:0e:e9:ed:55:93:0d:cd:ac:38:
0a:c8:78:6b:fd:44:1a:0e:c4:a2:fc:16:25:89:bd:73:83:f8:
b7:71:d2:92:b8:f3:ea:cf:99:7a:59:2b:b9:39:d4:19:da:88:
66:c3:a0:e0:c9:8b:c4:ff:13:4a:0e:b3:7d:cd:c8:18:9d:81:
40:a7:d0:4c:42:2c:65:c1:13:0e:f4:b5:5d:b0:c6:ab:aa:70:
c3:12:bf:d5:64:f0:dd:1d:40:af:1e:2d:b4:10:be:32:b7:0e:
c0:d3:0f:25:57:f3:3c:80:eb:85:bf:32:4e:69:45:eb:f6:70:
8c:2b:12:2a:f7:13:4c:8f:e7:f6:f9:37:68:80:63:d5:5c:a1:
a1:c1:95:d0:40:26:e6:17:4d:d5:e6:2e:d4:93:fb:37:c8:4e:
17:78:f8:75:61:41:f3:4a:b4:ac:0d:0c:b8:66:d4:ab:63:91:
cf:ce:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:46 2025 by rpki-client