Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: 6y9gd4FY39oyiNGK2Y54PoM+Pei0icLGJoOhoXL7Q/4=
Subject key identifier: E8:EC:7B:4D:5C:8E:D9:EF:09:91:6D:1E:BD:C7:8F:37:68:7D:6E:FE
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019649333438BE7CCB2EC8FDE40BB41DD568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 022E
Signing time: Fri 18 Apr 2025 14:00:14 +0000
Manifest this update: Fri 18 Apr 2025 14:00:14 +0000
Manifest next update: Sat 19 Apr 2025 14:00:14 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: FNXXDWn4ZEi6x3QPamt28Ld1uruARnnihkX9x8bpDOc=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:34:38:be:7c:cb:2e:c8:fd:e4:0b:b4:1d:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Apr 18 14:00:14 2025 GMT
Not After : Apr 19 14:00:14 2025 GMT
Subject: CN=e8ec7b4d5c8ed9ef09916d1ebdc78f37687d6efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:09:af:06:de:d7:07:58:8f:6a:b2:8a:a6:
1e:ec:7e:5e:05:bd:0a:19:4b:89:f6:26:f9:2d:b8:
dd:b3:8c:7e:83:71:c5:33:f7:b1:11:47:74:ac:38:
3a:0c:13:e0:27:72:d2:c4:ec:a2:6f:b7:68:ea:db:
22:16:f7:2d:c0:81:fb:5e:4d:fb:fa:5e:81:47:33:
34:a1:67:d7:8f:15:ef:c2:ee:27:12:fd:7a:e2:dc:
2b:5c:c5:73:47:f7:fa:45:1e:59:82:bd:c9:58:45:
5c:c6:f0:88:30:86:1d:46:4d:6c:13:d4:0a:99:e1:
30:77:34:4e:0c:ed:4e:dc:7c:ae:2e:16:2d:a9:dd:
aa:06:4a:07:92:9f:cd:9d:4e:31:6b:31:81:c7:2e:
a2:4e:b9:c8:05:3f:b9:c3:8a:cf:00:4c:69:77:7e:
52:43:9e:08:b3:1c:51:d5:2d:39:73:a7:b2:55:22:
16:ac:ef:aa:92:a7:56:6d:e9:ca:de:be:dd:b8:18:
11:cc:1e:e0:c3:dc:17:82:ae:9e:b7:96:4a:d1:13:
57:94:dc:19:02:4e:e0:78:b0:6e:06:fb:84:d5:2c:
24:f1:f4:51:65:b7:7c:1d:94:85:23:9a:8f:b6:65:
c3:8d:dc:d0:6c:55:a0:b4:4f:75:1d:b0:50:a5:3b:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:7B:4D:5C:8E:D9:EF:09:91:6D:1E:BD:C7:8F:37:68:7D:6E:FE
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:83:c0:27:d8:f1:3e:58:f6:f0:0b:69:83:77:d7:70:b4:2e:
03:87:42:84:20:56:8d:ad:22:5d:c0:39:64:62:59:e9:3a:17:
31:00:4e:e6:98:eb:24:4a:6e:32:76:16:f5:c5:61:ea:40:db:
34:ba:fd:5b:ef:78:46:9f:f2:97:55:41:0f:23:4f:8f:02:72:
16:32:6a:06:ef:46:ce:e5:17:db:30:de:da:35:cd:ce:c9:fa:
e4:f9:c9:2e:dc:35:48:33:19:7d:a5:d9:2c:cc:0b:04:a6:4b:
ad:b8:4d:59:b2:03:76:f8:37:23:a7:ba:ab:30:01:ae:11:6a:
39:e4:29:0b:e1:ca:34:fc:39:f0:cc:f8:7f:d1:fe:46:df:87:
c8:3e:40:9e:7d:d0:a5:29:e8:c6:0a:67:d6:fb:d4:94:6c:64:
26:a2:fc:83:67:25:79:09:4b:90:d6:8c:c5:c9:12:78:cd:f5:
47:b8:bd:f7:4f:43:9f:98:da:e8:92:17:95:95:f0:ef:94:d0:
c1:38:66:f4:5b:5b:47:d8:4b:bf:eb:2d:8a:bc:b8:5f:9a:89:
be:23:a8:52:eb:44:9d:af:e0:d3:62:d7:a0:fa:e3:f8:03:af:
52:20:ce:0f:4a:cb:bd:43:13:f9:25:3d:aa:ba:ce:01:89:2e:
27:7b:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:56:50 2025 by rpki-client