Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: cVB5V0doQDv1QfG6fNbU0pObFOPjjgYQ6W4w2WaSXrU=
Subject key identifier: 9E:16:57:4C:C9:64:5A:7F:38:DE:AB:A6:61:3F:C0:CD:A2:F3:2D:8A
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01965493116661E29865A877A46D33E60E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:46 +0000
Manifest this update: Sun 20 Apr 2025 19:00:46 +0000
Manifest next update: Mon 21 Apr 2025 19:00:46 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: AHS88wowAOD6nDforfWRNTqh3PsVOxnGBRSl8UrW6as=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:11:66:61:e2:98:65:a8:77:a4:6d:33:e6:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Apr 20 19:00:46 2025 GMT
Not After : Apr 21 19:00:46 2025 GMT
Subject: CN=9e16574cc9645a7f38deaba6613fc0cda2f32d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:ba:6f:eb:59:ca:10:e9:12:27:c0:2d:7f:
df:31:8d:71:31:9f:24:e3:71:14:59:85:e0:de:5d:
a4:d6:3e:e2:6c:1f:e7:fe:52:1f:b0:14:5c:21:bb:
eb:92:ae:a0:fe:6d:b1:b8:54:99:f6:b8:ad:b8:0b:
8a:16:08:a4:80:61:0a:0b:0a:5f:e0:96:b9:75:a9:
c2:07:a4:4d:7e:72:fe:c6:b6:2d:2f:65:ec:f3:d5:
76:64:ed:83:25:34:6b:a0:e5:0b:9a:95:f8:58:20:
ca:ed:32:b6:c5:6a:94:13:bf:aa:e7:09:09:29:1c:
df:5a:da:ab:90:bd:8d:54:9c:c6:55:05:b2:d5:e5:
1d:41:30:1d:28:ab:01:22:1a:68:2f:a7:ad:2d:84:
eb:10:c1:68:a5:96:c1:b7:8b:1c:ac:a9:7a:c3:30:
25:d2:db:c2:9c:3b:f1:ad:54:a7:ea:8a:d4:b5:23:
ea:35:b7:ef:41:7d:25:01:2c:0e:6e:f2:26:1a:4d:
f0:a2:c8:d2:58:c3:be:12:71:db:65:8d:67:94:74:
a6:6d:af:c3:65:47:38:2f:43:c3:d9:fe:37:d6:f3:
6a:02:ee:12:37:fb:e5:53:d6:e5:b9:a4:71:30:fd:
1d:54:6b:f8:e7:9e:0c:e6:5f:21:26:8b:84:6e:6e:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:16:57:4C:C9:64:5A:7F:38:DE:AB:A6:61:3F:C0:CD:A2:F3:2D:8A
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fd:c6:a7:32:91:74:d5:19:90:30:e9:71:6d:9f:32:09:70:
02:da:2e:42:c1:70:db:0f:0c:a6:03:03:f7:d5:fc:3e:96:d4:
2a:01:bb:83:6b:04:a2:7f:0c:48:7a:93:0f:c7:13:2f:c7:36:
9f:e9:11:b7:dc:1e:ff:b1:15:85:ad:48:6d:e7:a7:8c:2f:07:
f1:8f:15:4a:5d:80:7e:31:41:98:47:56:b8:dc:00:0e:d1:39:
3f:2a:58:65:7a:09:09:e5:0b:b7:5f:9c:b1:91:39:c1:ef:f4:
b6:7d:df:48:6f:2a:3d:87:f1:61:5a:3b:6a:0a:3f:33:5d:26:
38:cf:74:87:f6:e9:96:38:40:ae:b0:c8:00:5e:cf:cb:c8:65:
f2:99:ae:e4:36:ad:0b:4c:d8:30:15:18:86:76:7f:a5:d1:82:
bc:59:37:54:ac:fa:ad:c0:59:64:98:0c:3f:f7:ea:4b:94:6d:
72:ff:10:44:c1:59:71:be:ab:91:bd:1a:b1:30:fb:cf:3b:04:
89:ba:c3:bd:bb:e3:ad:df:93:c4:1d:64:de:9f:d0:d2:4a:f9:
e2:d4:ff:28:c9:b1:5b:cb:df:ef:57:b7:2e:62:3a:c9:ea:fa:
a4:92:7f:0e:a6:75:4a:25:fa:33:91:3f:e5:67:80:02:6e:0d:
7f:85:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:06:09 2025 by rpki-client