Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: 8Jb61lHDDZxERRkYkBWpRGdG+YMfGQ1ErghtNq38ajo=
Subject key identifier: D2:9B:53:5F:01:EC:49:77:A1:CE:F2:11:4D:57:C0:5D:13:D0:BB:42
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01964A0EDE1051F32227817823D22DDA8B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0F40
Signing time: Fri 18 Apr 2025 18:00:10 +0000
Manifest this update: Fri 18 Apr 2025 18:00:10 +0000
Manifest next update: Sat 19 Apr 2025 18:00:10 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: WCJ8J23bGRttxOldGvfw1uBuRWHhxutfRlyI+7n5dAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:de:10:51:f3:22:27:81:78:23:d2:2d:da:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Apr 18 18:00:10 2025 GMT
Not After : Apr 19 18:00:10 2025 GMT
Subject: CN=d29b535f01ec4977a1cef2114d57c05d13d0bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:8f:81:2f:25:1c:02:93:8f:f7:58:37:07:
70:ae:c7:37:3b:86:2d:88:79:8e:3f:9c:f0:90:e7:
6d:f1:24:b3:d9:82:56:f3:18:53:94:2e:eb:9d:5b:
3a:9e:96:fe:17:22:c8:e0:fc:79:b7:c5:c7:6e:aa:
2b:0a:52:62:4b:8b:95:a6:d4:fe:c2:ae:37:dd:c7:
de:51:4e:80:4e:3a:84:d7:49:0f:c3:5f:de:a0:43:
e9:e6:08:c6:1e:04:bb:43:b8:18:aa:f3:be:25:fc:
33:a2:19:28:a0:50:f7:76:31:fb:ec:57:ed:68:0e:
60:4a:03:2d:67:d6:6f:62:3f:f3:21:79:37:d4:d0:
60:fe:01:f2:7e:72:37:75:1a:b4:a3:83:97:47:f1:
1f:a8:a4:8e:d0:6c:42:f2:21:58:d9:74:e8:d1:4e:
cb:ee:84:e8:d3:20:bf:2e:b3:b9:85:eb:e0:e0:8f:
85:70:bc:cb:d3:fe:61:f4:ab:4c:15:ac:4b:95:b4:
2a:54:3c:14:40:60:22:d1:0e:ac:b1:91:b9:a3:64:
89:3f:0b:0d:0d:f9:83:ae:3d:3a:ed:ff:78:f7:30:
b1:c0:1e:24:b0:46:6d:3f:e4:a3:73:69:82:2c:66:
7d:20:e2:7d:db:f7:87:d1:22:74:82:b0:e2:bb:b1:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:53:5F:01:EC:49:77:A1:CE:F2:11:4D:57:C0:5D:13:D0:BB:42
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:a2:a8:df:b1:0c:1b:0d:b2:9b:94:18:c8:ff:b8:45:02:
34:08:4f:da:99:5b:40:52:53:28:e2:d1:21:c5:9d:7f:86:34:
39:d1:4a:fb:94:b0:20:af:cd:e2:01:47:d6:4e:fc:b8:fc:4b:
22:f1:1a:47:b8:5e:bd:95:20:10:2d:45:59:e5:0f:44:65:07:
cb:3a:c3:5f:bd:c7:fd:99:85:a2:03:0d:ba:89:1a:ef:7d:60:
c3:f4:32:07:5b:af:37:7d:97:a3:40:d9:35:66:d3:6b:5d:ef:
c2:92:2d:35:1b:3f:c1:73:c9:8c:e8:d4:23:82:00:77:23:12:
fc:d1:c7:cc:23:b7:2d:b1:14:d2:b3:51:58:16:8b:07:28:c4:
7a:60:cd:97:33:56:22:f0:e3:87:b5:79:5c:8f:76:b7:16:00:
bf:75:85:29:9f:8b:b8:2c:2f:77:75:e2:0c:0d:42:24:d5:49:
eb:c0:f0:4e:e0:a6:9c:a1:c7:59:06:27:68:10:e0:f2:27:f5:
53:48:6b:f6:23:8c:e9:d9:7c:59:02:c2:09:58:17:61:d1:28:
aa:69:73:00:d0:7f:56:3c:7d:4a:9c:ea:f6:46:31:de:e8:87:
e0:98:57:b9:09:06:ee:8a:60:75:2f:00:7e:f6:15:c1:3c:51:
b9:8e:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:35:46 2025 by rpki-client