Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: jrRf6a+YyaTm5b13N7uxiFzISEHb5VBNSUAjVzSKy7M=
Subject key identifier: 23:7A:76:75:5B:E7:46:3A:6B:2C:F4:7A:62:CC:31:93:4E:F1:B9:D8
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019642FA40DC88CC2532EB5544D67FE7F51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 0497
Signing time: Thu 17 Apr 2025 09:00:18 +0000
Manifest this update: Thu 17 Apr 2025 09:00:18 +0000
Manifest next update: Fri 18 Apr 2025 09:00:18 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: 0AVf21cWFoCE+rMNh+yMRXwFrlAmusSvIvkXI0ePJM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:40:dc:88:cc:25:32:eb:55:44:d6:7f:e7:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Apr 17 09:00:18 2025 GMT
Not After : Apr 18 09:00:18 2025 GMT
Subject: CN=237a76755be7463a6b2cf47a62cc31934ef1b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:f2:14:44:ea:8f:19:82:44:bd:0e:ff:41:
82:84:b8:85:5e:6e:0c:d1:9c:ca:9a:a4:93:df:ce:
06:f4:5e:b8:39:48:1b:e8:73:a1:c9:f4:5c:b4:e7:
50:d1:d2:35:5d:05:36:6f:cc:66:bb:31:8a:78:b8:
75:2a:3a:9a:50:31:75:56:a3:70:22:97:5f:6f:02:
43:d0:91:a5:f4:2f:70:45:0b:58:c0:27:bf:66:12:
ed:02:9a:5f:fb:83:08:2e:63:a2:10:8d:5b:2d:fb:
bc:d5:90:e5:c2:95:e5:3f:3f:3a:ee:af:09:7e:24:
72:fd:36:0f:fa:d9:05:19:c7:89:6b:fa:5b:9f:47:
77:d5:ad:ef:97:48:da:c2:e1:ef:bb:32:b5:c0:0e:
12:54:37:65:e8:62:20:d1:d6:6c:f4:ff:75:ec:7d:
05:d1:ad:be:04:71:8c:e0:4e:ab:ba:a7:5e:01:f6:
e0:4f:96:75:f8:0a:a4:cc:6d:1f:da:4d:a7:38:7e:
4d:c3:12:dd:27:1b:46:8f:ce:b5:7d:53:5e:f5:02:
0f:a0:60:fd:fc:32:ac:34:3d:f2:e8:03:22:de:0d:
55:c3:d9:f7:c9:dd:e9:11:fe:2f:df:f0:e4:dc:e6:
d8:fa:f0:5f:83:93:f3:9b:e1:95:68:d3:5c:f9:de:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:76:75:5B:E7:46:3A:6B:2C:F4:7A:62:CC:31:93:4E:F1:B9:D8
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5e:7e:b7:49:11:a7:c7:80:6f:0a:d5:9a:c9:09:e6:7e:a7:
6c:25:bd:c3:ae:f5:06:4a:35:2d:8b:a2:51:23:63:d1:2d:0c:
0e:f8:a3:21:f6:43:b8:f8:5f:4a:9c:4e:a5:4b:fd:0e:64:b2:
b9:0c:17:dd:78:fb:f0:08:53:57:78:ce:71:79:ff:c8:7f:ce:
f6:26:02:1a:d9:f4:e8:d4:b7:17:0e:0f:05:cb:e1:48:1f:9e:
dc:c1:06:1d:15:fc:78:64:15:3f:54:46:1d:8c:97:58:0d:cb:
39:4a:f5:07:a8:6c:49:96:d9:4c:c4:53:7f:5f:a2:93:6d:69:
b0:cf:d9:18:4a:dc:94:a5:eb:cd:18:3b:c0:5f:66:27:46:a6:
09:88:65:e0:2a:a8:c3:7c:b6:94:1e:6d:0a:f7:e2:0a:7b:11:
ac:82:3e:9f:c3:53:b5:cd:f7:31:48:01:d3:fb:64:ba:69:65:
3a:48:ea:ae:7f:1a:b7:f1:11:f7:0b:d2:d7:e2:5b:a3:9d:92:
78:0b:ab:9f:77:7e:88:25:82:2e:63:46:3d:8d:a6:31:cf:8c:
c4:1b:51:5e:bf:3c:c3:c1:32:bd:39:4f:d6:cb:8e:90:4b:18:
41:3d:17:4a:76:05:c9:b1:83:17:ca:dc:a4:d4:85:30:a2:55:
c8:1d:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:28:08 2025 by rpki-client