Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: JMs54mseBNNmQksjB/A8Y5k58eSRv6WASBjzvIpoyz8=
Subject key identifier: 92:21:CF:71:DD:6C:D6:71:7A:30:F1:DF:01:6B:82:84:C2:7F:48:96
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01963F8BA73AF07D582C308374BEA53E6E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 14FA
Signing time: Wed 16 Apr 2025 17:00:38 +0000
Manifest this update: Wed 16 Apr 2025 17:00:38 +0000
Manifest next update: Thu 17 Apr 2025 17:00:38 +0000
Files and hashes: 1: 8f1DQEzOmVOlZREX0FzyX7_KlmU.roa (hash: vPG/1XLUFUdmTpDY8V/ZQr1qcuxaKozSqJOdcnOMn8g=)
2: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: 4l8aE8u7T3uxuFy8EkIdlcOqZa76eYVfVPX2atsauDE=)
3: qSt6_fPnhc395r0EppghyMpbl50.roa (hash: WLU9AacDdZK/vCoUCpNnuiXgsMa/7UTXH1xNyMiTNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:a7:3a:f0:7d:58:2c:30:83:74:be:a5:3e:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Apr 16 17:00:38 2025 GMT
Not After : Apr 17 17:00:38 2025 GMT
Subject: CN=9221cf71dd6cd6717a30f1df016b8284c27f4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:b9:32:28:9f:c2:3f:a6:33:d0:fb:fb:05:
ec:5f:b1:e8:20:ba:98:6e:49:b3:9c:1f:0e:6c:df:
e9:51:38:17:c0:f7:bb:88:7e:d1:35:4a:f0:92:4a:
0a:fb:a9:f6:cd:13:42:ec:10:a2:dd:36:d6:2c:c3:
77:43:b3:b4:a7:3e:5c:5d:a2:77:aa:3d:52:02:bf:
88:36:03:65:b5:ce:de:6a:a2:d8:aa:01:84:23:22:
ae:c4:2d:b9:42:cf:4e:93:69:14:4c:0b:5f:38:bc:
a4:85:68:68:f3:25:9c:74:18:95:9e:60:f0:dd:da:
e6:5e:b9:9b:3b:bc:4e:bf:2d:b6:8d:76:7d:33:f2:
9d:4b:ac:ba:8c:d7:cf:0f:9c:67:3a:a0:6c:bb:ad:
82:bf:e4:e4:92:ec:c2:4b:46:f9:4e:fe:e3:ab:0d:
e2:e9:0e:bc:43:4c:ce:14:f8:a1:d5:ee:69:a1:eb:
57:9f:29:9b:71:21:b2:ee:74:93:f3:0e:6d:0a:a4:
e8:43:d4:2d:07:c3:f5:ff:ef:66:80:91:f8:9e:3e:
7a:88:1b:d1:72:9a:c0:a7:63:c8:10:f0:71:cc:cd:
68:99:03:f9:c1:de:a4:f2:e7:a2:b1:91:05:dd:1e:
ec:ed:f9:ac:6f:18:14:19:65:d9:e4:ef:8d:d6:d5:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:CF:71:DD:6C:D6:71:7A:30:F1:DF:01:6B:82:84:C2:7F:48:96
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:df:4c:89:d5:a2:b4:e0:e3:56:62:33:7d:1a:6f:97:e1:15:
be:2c:2c:a5:74:1e:4c:40:28:a9:31:9c:87:41:89:37:9f:5d:
66:f4:e2:5d:74:bb:41:2a:7a:39:da:66:da:ed:8b:97:6c:6e:
81:de:55:73:22:c1:d4:42:85:49:0c:4f:4d:5b:c7:a2:4d:3e:
ea:f7:66:c9:5a:68:97:a9:fc:97:0e:ed:ae:29:4f:bb:8d:1d:
7e:48:86:38:ab:db:bd:0e:90:3b:b6:26:47:b7:bb:4e:c2:db:
d7:ee:01:47:0d:c4:1b:c6:ad:50:fe:4b:a8:da:8d:e9:d3:f7:
bb:f7:fc:51:d1:2d:70:bb:61:84:0d:6f:b7:02:cc:3c:f6:eb:
dd:4d:6a:01:b3:41:23:69:38:48:77:bc:b5:58:93:52:8e:ff:
b1:b4:0e:ba:31:49:a2:34:b7:f2:f1:3b:c0:22:0b:1d:d5:d4:
1f:88:aa:7d:c9:5f:41:11:c8:41:cb:13:57:59:55:10:14:42:
d4:f3:05:15:2b:e6:9f:71:db:df:a0:31:f2:d6:87:cf:a4:ec:
77:ab:b5:07:9c:cc:55:6a:60:4a:d7:84:29:df:3a:c0:b1:f9:
86:59:8b:8c:e7:ac:2a:20:a3:c8:8e:3c:bc:51:49:03:63:e1:
da:ef:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:43 2025 by rpki-client