Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: NBYMG+9OJ6LLvuMoOmg6KINkhY1UekkxxhIO86Trc3g=
Subject key identifier: B4:86:92:36:2E:B7:3E:8C:E1:5F:CF:8E:24:70:27:FA:97:83:EA:8A
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 01958C60FDF5325A89B8D41BCB33C8B8EEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 08F9
Signing time: Wed 12 Mar 2025 22:02:01 +0000
Manifest this update: Wed 12 Mar 2025 22:02:01 +0000
Manifest next update: Thu 13 Mar 2025 22:02:01 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: MUddG0scTBqpA4NB+TsW0eKCrVSSG1qxCcidmZ+k5Ls=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:fd:f5:32:5a:89:b8:d4:1b:cb:33:c8:b8:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Mar 12 22:02:01 2025 GMT
Not After : Mar 13 22:02:01 2025 GMT
Subject: CN=b48692362eb73e8ce15fcf8e247027fa9783ea8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:f9:68:43:1f:60:88:f7:cf:59:9b:50:31:
59:ed:09:cf:ab:ee:b8:4d:40:0e:fe:ab:e5:65:bd:
a7:24:23:be:80:3e:f2:1e:1b:1f:eb:34:cc:d9:fe:
9d:a7:e4:a6:1a:09:b7:c3:31:26:94:ae:87:33:18:
bb:46:3b:c8:e5:dc:ca:14:48:e6:fc:00:52:9d:48:
98:97:e0:64:cc:b7:8f:a9:cf:6d:d1:f3:ee:53:e6:
b0:b1:8b:72:34:fb:9b:b4:1b:bf:87:9a:31:99:02:
43:2c:37:bd:b3:01:8a:b6:61:de:d6:15:b0:4c:93:
84:f3:67:31:37:67:83:c9:20:97:b3:d8:45:4d:97:
d7:46:21:f1:13:23:95:7f:93:ed:83:9b:e3:14:6d:
2c:b5:5c:fe:48:6b:60:9f:9f:1a:87:2e:79:41:f5:
fc:a2:86:a2:86:7f:93:77:5a:1d:1c:34:40:96:6b:
ba:e0:f6:aa:ce:50:27:a1:1c:63:64:7f:6b:8f:80:
d8:bd:4f:a2:3f:a5:f5:eb:56:cd:38:5b:b2:78:ad:
7c:12:b9:39:b0:42:e8:7b:56:fe:09:c8:ec:c4:a2:
d6:9b:f1:01:aa:8b:c3:79:71:da:bd:f4:9e:bc:6e:
79:28:11:7a:cc:85:77:e6:4d:ef:96:5f:a6:da:1d:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:92:36:2E:B7:3E:8C:E1:5F:CF:8E:24:70:27:FA:97:83:EA:8A
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bf:04:fb:45:64:53:46:32:80:6d:97:58:68:3f:59:01:27:
a4:4a:f6:ab:ae:79:ef:36:77:47:13:2c:f2:83:0b:2e:a2:e5:
22:73:31:9e:48:81:1b:c1:3b:28:6b:ff:ce:af:d2:6b:73:6f:
f6:09:d7:ca:88:65:12:49:d5:63:bd:59:d5:2d:af:65:07:ff:
a9:8e:08:46:2c:25:02:9a:56:3b:5f:22:25:59:b7:c2:db:92:
79:07:9b:14:9a:f6:7f:fe:d6:65:54:2e:aa:10:db:52:24:59:
0f:54:27:dd:97:d2:aa:2f:7e:b1:4b:ed:57:62:0b:a0:40:cf:
4f:c8:21:6b:a1:32:4e:a6:2a:62:94:96:d3:41:f6:c6:82:01:
9d:35:c3:76:be:c0:37:b2:d0:41:7a:ce:11:26:c9:25:54:da:
bf:40:d9:5d:a2:e8:47:d6:bc:38:ad:48:cf:79:32:8b:62:a4:
59:be:c3:4d:a4:ff:b5:76:5d:3c:c6:e5:6b:77:25:b9:7a:5e:
56:95:a0:e0:9d:9e:5c:47:3c:02:bb:47:10:75:89:06:b3:ae:
2f:0c:90:0d:63:92:8f:ee:1b:12:20:4d:34:ec:c6:72:17:db:
49:45:96:07:2f:d2:87:07:40:cb:d7:78:d9:85:39:ec:0b:af:
a0:ee:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:07 2025 by rpki-client