Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: cnp8S6sjG/QZ7xauwhc6xgNn31+hnEM0UShXW3enK2g=
Subject key identifier: 01:42:D4:62:44:0E:25:41:DF:D0:8D:8F:46:0B:F1:3F:62:AF:6A:63
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01965801EB48202ED958CD71392C1891D867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 142B
Signing time: Mon 21 Apr 2025 11:00:42 +0000
Manifest this update: Mon 21 Apr 2025 11:00:42 +0000
Manifest next update: Tue 22 Apr 2025 11:00:42 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: F5q2wVuANI17AI2PjeTC/0B9BDcLHaU3TnBxN4mazYU=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:eb:48:20:2e:d9:58:cd:71:39:2c:18:91:d8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Apr 21 11:00:42 2025 GMT
Not After : Apr 22 11:00:42 2025 GMT
Subject: CN=0142d462440e2541dfd08d8f460bf13f62af6a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:8f:11:e4:8e:e7:12:58:67:0c:02:63:b3:
37:69:71:19:80:84:27:81:b3:66:d3:5d:00:7f:5d:
bb:6b:94:87:80:53:82:81:8c:a9:83:d7:ed:50:4c:
c1:07:c5:d5:e2:c7:ef:4c:b7:37:d2:57:8a:ce:3c:
b0:be:35:e2:16:09:df:d1:63:23:8d:e2:d9:24:83:
58:c7:9f:cb:9a:ab:de:a6:30:92:7c:ca:64:7f:63:
7c:4a:fd:24:65:ba:38:87:be:e4:1e:fb:e9:50:dc:
da:f5:11:38:36:0a:93:94:74:53:65:b4:10:ee:64:
0a:0e:84:78:31:30:3d:c0:e0:ed:9a:d9:1f:de:de:
5b:71:28:c5:c0:ac:48:a5:b3:6f:1d:b3:94:fb:5e:
3d:62:75:59:02:59:23:48:cb:e6:42:e9:eb:a6:9c:
5d:30:1d:23:c1:ce:3a:0a:98:c4:34:72:33:fd:2d:
ad:9e:39:1e:8c:ae:26:19:48:ab:eb:88:6a:99:71:
da:db:fb:78:aa:2d:c6:23:28:07:95:b0:33:43:86:
06:0c:ae:80:02:c0:72:54:93:57:09:cd:31:12:92:
d1:0a:81:12:90:d6:a4:bf:57:d1:49:5d:c3:e4:8d:
82:19:90:19:50:07:cd:2b:f4:21:31:5b:00:5f:05:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:D4:62:44:0E:25:41:DF:D0:8D:8F:46:0B:F1:3F:62:AF:6A:63
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:45:bf:f3:77:b5:45:48:b0:5a:4a:12:30:eb:c9:06:de:a5:
8a:0f:a1:1e:8a:19:82:47:7f:2d:70:bd:c3:5a:64:76:e9:d9:
96:be:9c:88:5e:4e:74:be:93:e1:a7:07:db:4b:0e:e4:60:13:
f0:eb:2a:d9:79:0b:4a:56:44:c6:2f:66:18:99:ff:a7:ea:c0:
3d:19:46:8f:4d:a6:23:ce:3c:9d:cb:47:f3:e9:2b:b9:17:29:
59:92:27:ef:70:49:05:2e:65:56:aa:45:e9:c2:aa:1d:b1:95:
61:6d:bc:c2:22:0f:e8:f2:6f:4e:7a:70:fa:f8:ed:93:30:4c:
1d:b9:8d:23:2e:4f:c1:31:ee:78:16:1d:1b:05:b4:ec:25:fb:
92:df:04:13:11:f2:04:cd:7f:40:5d:63:2e:1f:d8:9a:1d:6f:
ea:25:7e:4a:12:3b:8e:8e:82:14:bd:c0:41:23:19:9f:24:42:
d7:3b:b4:10:28:7b:13:a3:df:6b:7a:d9:d0:df:23:34:fd:8d:
64:6d:4e:23:3e:81:13:8d:b9:a1:bf:98:1a:3f:85:c9:80:db:
13:be:37:16:0b:77:b5:2a:82:09:86:9a:04:30:89:9a:8c:e9:
8a:b5:f9:a1:3c:0e:ac:74:9d:77:ab:69:8a:b8:23:cc:c2:28:
eb:59:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:18 2025 by rpki-client