Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: 3DTqEOuMvItejGs3pYuKcDZFU/gkqtlvI1tUpF7sb0s=
Subject key identifier: FF:1F:80:7A:FA:42:DE:96:31:25:6E:5C:2B:67:27:61:15:09:83:6B
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 01965A5E21150FDAE89E76CFBBD3B951B135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1495
Signing time: Mon 21 Apr 2025 22:00:40 +0000
Manifest this update: Mon 21 Apr 2025 22:00:40 +0000
Manifest next update: Tue 22 Apr 2025 22:00:40 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: HF4YY89xnQi64Ti4h6CXfnUHoHXqX5VTdeXEM9Xzrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:21:15:0f:da:e8:9e:76:cf:bb:d3:b9:51:b1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Apr 21 22:00:40 2025 GMT
Not After : Apr 22 22:00:40 2025 GMT
Subject: CN=ff1f807afa42de9631256e5c2b6727611509836b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:43:95:62:c9:a8:46:b1:cd:bb:7e:38:42:
0a:06:53:fc:3b:57:57:60:ec:04:61:cb:27:49:70:
03:46:ff:76:69:ef:f8:cd:b3:18:38:21:11:5d:50:
54:09:d6:60:f2:6d:c0:31:d9:81:dc:16:19:ee:86:
96:62:e8:fe:0a:bf:2b:4c:52:81:27:74:6b:ca:84:
8e:09:8f:41:b1:17:31:3a:49:09:f0:c9:ea:ac:1b:
09:fc:d8:28:7e:20:d8:8f:c2:9e:42:02:7f:72:ca:
53:1f:b2:fc:84:1a:e8:50:a3:61:a8:9d:2d:2b:01:
7b:85:98:5e:57:da:0f:02:94:c1:43:8c:ac:2b:0f:
8e:1b:6d:83:88:30:7d:99:1d:cf:d8:cf:08:9a:df:
28:52:b5:29:3e:9e:f6:2d:bc:c0:d8:97:12:90:08:
5e:01:ef:0d:5b:6f:47:27:8c:eb:f3:bc:33:37:c4:
bb:a7:d4:3c:10:b9:0b:e3:e6:ee:c9:51:ad:88:68:
4b:ac:e7:8f:ea:96:b2:d7:f7:27:53:2b:a6:87:29:
f7:1c:26:70:1f:f0:dc:fc:53:98:d2:d5:7c:47:9a:
c9:fc:61:53:f5:f2:de:f4:93:5b:cb:05:83:72:fc:
b3:56:cb:a7:ef:ce:ae:40:9c:a2:96:54:e0:7d:a0:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:80:7A:FA:42:DE:96:31:25:6E:5C:2B:67:27:61:15:09:83:6B
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c5:3e:6d:b8:cc:0e:78:ed:0d:96:f7:63:02:51:c2:08:74:
bc:8b:b7:d3:e0:8f:b3:06:ab:e8:9e:f2:ff:25:d0:8a:81:cc:
04:3e:e6:4f:73:ba:69:40:2a:69:69:ee:3b:ef:73:7f:d4:0e:
a2:d3:fa:1f:34:6f:90:d1:57:ae:72:81:b0:8f:e1:77:b9:8f:
8c:cc:5d:c3:9a:60:90:ed:f5:68:f4:7f:cd:e1:d7:08:57:44:
e0:a5:5a:9a:83:11:f3:f9:77:1b:dc:e3:2f:c2:08:45:1c:49:
e6:5b:c8:c6:76:33:fa:7c:47:c5:7b:eb:fa:ad:ae:06:48:4e:
14:a9:44:5a:c4:b2:47:64:11:77:13:cc:c8:f5:73:9a:5e:3c:
12:60:d1:68:72:37:20:41:4a:71:03:2d:ec:35:8e:a4:f6:b0:
d8:a3:b8:36:40:99:f6:40:4d:fd:f1:69:cd:67:d7:2f:35:3a:
d3:af:cb:f6:13:3b:67:c3:b9:fe:4b:ff:42:a3:e0:49:fb:3f:
bb:07:24:e0:40:f4:f3:e8:4c:ff:b7:2d:34:f2:38:38:41:6b:
fb:95:e7:4c:94:f4:1f:fe:73:60:91:59:b3:df:e3:6c:36:55:
86:b0:54:e1:81:46:6a:53:91:5a:fb:cd:b0:e9:c5:82:5c:dd:
f7:84:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:04 2025 by rpki-client