Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: yhwwZ6Q4HPxcu1hNm1sTaCBWlDdWiQugm5I/LEYsIao=
Subject key identifier: 2E:88:34:06:E7:DA:B6:7A:F9:D8:CD:03:EB:63:0D:71:CB:65:64:5A
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019652DB65E92CEA23CF4ED6A411AB49C511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 11:00:32 +0000
Manifest this update: Sun 20 Apr 2025 11:00:32 +0000
Manifest next update: Mon 21 Apr 2025 11:00:32 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: crxhVjTrx34IKzDvm38KlJn3+SDoDB25lezhMrW99U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:65:e9:2c:ea:23:cf:4e:d6:a4:11:ab:49:c5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Apr 20 11:00:32 2025 GMT
Not After : Apr 21 11:00:32 2025 GMT
Subject: CN=2e883406e7dab67af9d8cd03eb630d71cb65645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:c2:3f:0c:b8:c2:a4:79:d9:f7:ef:49:7f:
99:2a:76:99:e0:88:b8:7a:65:0e:b5:98:58:92:cc:
56:28:a8:67:7e:69:ad:4d:77:0a:07:5f:06:19:3b:
51:aa:b5:8a:52:f9:3a:7b:51:d3:a8:da:fc:26:37:
b2:2b:1b:3e:ff:4a:6a:43:d0:00:13:3a:b7:c6:8d:
f4:6b:59:17:92:35:37:fb:55:3f:3c:68:18:f1:9c:
2a:ce:30:94:16:b4:40:93:eb:fc:ba:d6:7f:a0:ff:
87:d3:f8:e9:22:21:b6:58:29:b9:6e:4f:8a:e4:29:
bd:49:c9:7c:05:7f:49:8b:bc:a8:a9:2c:93:04:84:
f0:bc:a3:19:14:65:25:36:4d:eb:ba:dc:e6:f4:57:
be:d7:6e:1b:f9:61:79:ef:97:04:8c:1b:ce:64:77:
95:22:5d:45:70:5c:53:d9:e7:0e:0b:bf:5c:0d:02:
c8:cf:37:d5:3d:a9:41:fd:b1:79:bf:3b:b4:e7:f9:
da:4b:82:b4:f0:1f:eb:83:be:49:e2:e4:48:6f:92:
65:24:68:43:23:81:55:bd:39:14:dd:2f:02:dd:0e:
c5:fc:8b:ac:a0:ce:87:a4:32:4b:8d:65:82:5d:14:
a8:9e:c4:d4:b2:9c:85:81:13:d5:e8:36:bf:8d:de:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:34:06:E7:DA:B6:7A:F9:D8:CD:03:EB:63:0D:71:CB:65:64:5A
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:48:e1:4c:63:a3:67:64:6f:08:20:ed:1e:da:31:7d:22:e3:
3e:5a:b9:f8:98:3c:44:36:3b:2a:c6:b2:5b:46:f3:11:51:bd:
71:c7:d3:1e:26:08:27:40:10:20:53:20:95:a3:c0:06:69:7a:
c0:fb:04:b2:9a:17:3e:ef:7a:59:ba:6b:cf:26:34:14:0e:39:
ab:da:3c:ae:ee:68:a4:1b:6f:d7:e5:27:df:7b:33:97:8c:a5:
f6:11:6a:55:c2:dd:a2:40:a6:c8:db:31:87:ce:9f:1c:d3:2a:
1f:23:a9:1d:ef:dd:4c:82:67:a4:45:29:4a:41:57:b4:a9:56:
26:51:5d:52:8e:be:54:3d:bc:b0:a5:72:3b:90:35:01:ff:ba:
de:ed:0c:58:88:40:15:05:85:76:de:3d:bb:bb:9e:2d:a7:7b:
97:3f:80:99:3e:8c:e2:f8:be:8a:12:da:b5:e9:2f:37:00:93:
ce:c4:17:36:0c:36:df:5b:38:9c:7f:fb:04:d0:58:48:96:1a:
9d:b3:1d:a2:5f:58:f0:7e:64:b9:2f:ff:81:f3:fc:25:14:08:
d0:67:5f:2e:4f:df:05:e0:e4:66:3b:3c:f3:d5:b9:34:84:34:
4e:d3:2b:9b:30:8d:70:54:5c:67:82:7d:ff:d4:2d:3e:4e:93:
89:d7:31:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:41 2025 by rpki-client