Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: emvVlWZ0occXM3k+alwxsDZ2niLyTt7ghM3uvaT9Epo=
Subject key identifier: A8:BB:FA:53:CA:B9:8D:23:DA:56:98:6D:A0:CA:49:A4:CB:E7:78:F5
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019644B20C8366D9EE7C8E1FBF8F1B618BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 17:00:41 +0000
Manifest this update: Thu 17 Apr 2025 17:00:41 +0000
Manifest next update: Fri 18 Apr 2025 17:00:41 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: KOyTzXeGP4B1hhfckbKYxYuHbh/mBiHYuWQWApzeAxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:0c:83:66:d9:ee:7c:8e:1f:bf:8f:1b:61:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Apr 17 17:00:41 2025 GMT
Not After : Apr 18 17:00:41 2025 GMT
Subject: CN=a8bbfa53cab98d23da56986da0ca49a4cbe778f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:0f:88:80:e4:7b:76:8f:1f:36:f4:bc:20:
92:c0:9e:f3:46:1e:1e:f9:27:74:9f:34:cc:28:00:
8d:77:fe:b2:6b:30:bd:5b:25:7e:36:a4:6b:fe:ec:
35:fe:53:e1:fc:c6:2e:0b:1a:65:16:83:6b:21:30:
7e:6d:5f:7c:00:de:f8:d3:42:f0:2d:9a:e5:79:52:
97:7a:db:f3:65:c5:5e:1e:01:5b:b3:b4:9b:7a:39:
92:c9:a2:9a:b8:89:8b:fd:ae:5a:55:e3:b8:eb:1e:
a3:15:32:f9:42:81:ef:10:1c:d0:f0:ae:e2:47:08:
4d:2f:f6:b6:1d:c1:27:43:20:9e:14:f0:bf:08:6c:
3a:e5:b5:9d:f0:bd:41:e1:b1:d2:ce:0f:89:a1:6b:
e9:fe:c3:fc:47:d0:69:e8:eb:32:5f:a5:00:61:f8:
61:e1:a7:cc:35:c2:f6:09:25:47:c2:1c:ba:83:34:
ae:5c:8d:9d:b8:ce:ea:40:3b:80:7d:ea:dc:f2:dd:
e3:39:b1:b9:03:18:e5:bf:78:8c:b7:d1:e9:83:7d:
89:eb:7b:20:18:e7:f4:0f:b8:ec:8f:97:63:d5:84:
62:03:fb:16:90:8a:ff:87:cc:f3:42:d1:c8:b5:1c:
b5:b3:6c:32:7d:f2:bb:06:3e:c8:b8:9f:84:97:7a:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BB:FA:53:CA:B9:8D:23:DA:56:98:6D:A0:CA:49:A4:CB:E7:78:F5
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1e:d2:e5:1d:be:4a:f0:bd:a9:37:5b:9c:c7:b4:2e:e6:bb:
57:f5:27:0f:1e:12:c5:04:47:7b:5a:49:d6:68:fe:48:2b:dc:
67:f9:c5:51:db:b1:82:6f:9d:66:82:08:2d:42:84:7e:d1:ac:
ed:76:fa:70:0c:ee:60:f8:1d:5d:c2:f3:e2:21:ab:87:a1:4d:
81:66:5a:6d:bd:5d:84:ed:20:36:62:1a:87:ee:41:6a:ab:1a:
d4:ad:d4:4f:2c:a6:2e:dc:7e:26:61:7b:b1:6c:56:48:60:18:
2d:49:59:05:83:80:1f:6f:99:18:13:61:d0:7f:50:76:0f:e0:
c1:bb:b8:f7:da:01:b3:02:eb:17:81:e8:dd:a4:4b:79:66:9d:
d5:70:91:91:83:c8:db:b5:73:c8:9e:f3:b6:b5:0e:a8:1e:41:
db:b1:f5:a5:b0:4b:09:59:73:ab:91:38:13:f9:fe:7a:f8:d5:
54:30:24:47:a7:d7:70:7d:c1:aa:9c:36:db:ad:b9:5f:79:1b:
6e:56:de:f1:46:5f:59:f2:8c:30:14:88:ec:c4:43:23:4e:1b:
38:7b:76:56:ce:05:4b:b6:54:da:b6:55:35:79:fe:7f:d7:7d:
a3:21:a9:f5:8e:d5:00:4f:a3:18:24:1a:6b:7b:62:b3:73:0f:
b5:4b:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:40 2025 by rpki-client