Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: EwefnPWiSKclSQtgD7NLwGAGRdwWr08KECEfqWfnfFU=
Subject key identifier: ED:07:83:D1:DF:A2:E2:B1:D1:89:10:EB:6B:56:A9:14:F1:84:4B:1E
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 01964B90CF1FB6DDF01852854F1BA9F8B19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 01:01:43 +0000
Manifest this update: Sat 19 Apr 2025 01:01:43 +0000
Manifest next update: Sun 20 Apr 2025 01:01:43 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: 6izEAUU7UmteFFyfVtxuoo1R2XRPsMcKwe9f8oG2iAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:cf:1f:b6:dd:f0:18:52:85:4f:1b:a9:f8:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Apr 19 01:01:43 2025 GMT
Not After : Apr 20 01:01:43 2025 GMT
Subject: CN=ed0783d1dfa2e2b1d18910eb6b56a914f1844b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:ae:a0:8e:38:19:4b:9c:91:45:6c:1b:19:
1c:4c:34:2e:1f:20:f3:c4:d3:dc:ec:b7:fe:9e:b4:
56:64:53:7f:e0:e5:39:d9:21:17:47:2f:05:9f:9a:
51:61:36:2b:3b:55:39:fe:03:8e:2e:a3:82:9e:59:
40:c8:ce:e6:c5:5b:44:95:83:fd:b7:e9:e9:97:c6:
03:3b:39:ac:64:39:07:42:08:24:45:d2:95:bc:26:
ff:6c:6d:5d:8d:f4:7c:83:f9:4b:99:29:26:f8:23:
9f:88:ec:7f:e2:31:d2:45:c4:7b:ac:ee:aa:fa:7b:
8e:69:7a:61:11:83:c7:e1:9a:1e:5b:ca:df:15:5c:
fd:c3:52:a7:8a:2d:16:7a:42:11:ff:66:a6:c7:5b:
fe:d8:c3:12:09:99:44:d9:5e:f2:13:ec:3e:7a:39:
d2:dc:52:94:c5:dd:86:ea:af:66:3f:2a:b4:77:b0:
aa:90:f7:6a:6f:2d:26:cd:77:88:f3:e6:d2:41:25:
3c:8d:be:71:a4:1d:c3:ee:98:43:3b:a6:c4:8e:e8:
86:eb:fd:a0:23:ae:d0:fa:1a:7c:78:ce:b9:ea:8d:
14:8c:c0:c9:f9:40:b7:fd:9f:c5:0c:58:98:70:6a:
57:91:fc:5c:8f:b7:08:34:5d:b7:9f:67:3a:0f:7c:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:83:D1:DF:A2:E2:B1:D1:89:10:EB:6B:56:A9:14:F1:84:4B:1E
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c7:7a:7c:c6:86:3d:20:48:a1:bd:10:d6:84:0c:ea:54:38:
06:76:d3:7f:ee:9b:81:da:d7:f4:eb:1e:e8:98:07:f5:d3:60:
4d:cc:73:33:04:e6:17:c5:d2:aa:f3:77:b8:bb:48:31:ea:78:
75:80:43:fb:76:2d:a4:99:f2:8b:2e:f7:14:26:66:ca:19:21:
21:07:c6:9c:cc:7b:3d:01:24:9b:4f:ac:f2:d7:1a:af:03:77:
0b:a9:ab:00:ff:96:2c:69:dc:26:13:58:7e:d1:6d:ff:60:e7:
23:30:29:74:8d:e9:79:80:3a:5a:a7:92:3d:80:50:74:80:f0:
9e:12:35:dd:15:14:7f:df:15:10:de:f3:1e:fb:4b:84:75:30:
28:56:f6:fc:45:a2:f0:8e:80:43:64:ff:26:b7:be:af:eb:22:
86:a7:8e:2b:ed:bb:56:15:8f:d4:85:2b:dd:78:ff:59:98:2b:
a5:6d:37:6a:3d:d2:ac:34:f4:96:e3:20:8b:30:02:f5:da:f9:
f9:ba:36:36:37:8b:87:0e:cc:ef:ad:48:ff:75:29:b1:b7:b1:
6c:5b:0a:7c:ba:85:38:18:e9:be:8f:82:8e:0a:47:0a:51:a6:
5c:61:14:cb:f8:8b:e8:86:69:cd:47:46:bb:fe:60:4a:ee:05:
02:e0:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:20 2025 by rpki-client