Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: PvehJxeQGcOuyOPN4mJXfuQpAFDTlKkVYAH+sjCKR7Q=
Subject key identifier: 38:B2:FF:F6:38:F6:F5:8B:89:0E:87:54:24:2C:5B:2E:0E:1B:FB:33
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0196526DB35CA516E00FA5C0D19CB6B58F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0E9C
Signing time: Sun 20 Apr 2025 09:00:43 +0000
Manifest this update: Sun 20 Apr 2025 09:00:43 +0000
Manifest next update: Mon 21 Apr 2025 09:00:43 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: //JxQCxT4QPisKU50CjCLfCmN/168ploG2JvQzhCvPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:b3:5c:a5:16:e0:0f:a5:c0:d1:9c:b6:b5:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Apr 20 09:00:43 2025 GMT
Not After : Apr 21 09:00:43 2025 GMT
Subject: CN=38b2fff638f6f58b890e8754242c5b2e0e1bfb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:c6:b4:44:cd:39:d7:78:4a:c4:14:e1:42:
a4:b9:22:d7:26:b3:5f:1e:ed:cf:b8:ea:48:90:e3:
e0:47:e3:6a:d7:04:df:1a:89:ee:3f:81:f0:1f:ed:
99:61:4a:25:34:82:9d:6d:79:88:1d:bb:18:b0:26:
cb:8a:9e:ec:e8:d7:db:a4:4a:e6:0f:e6:27:93:b1:
20:88:02:38:a1:cb:1c:0a:e1:30:86:44:fb:b8:dd:
0a:72:f9:69:09:f2:87:31:56:88:7a:c1:2a:dd:f2:
3f:2e:15:85:a4:7c:1c:db:29:f4:ac:e6:eb:77:17:
60:90:99:fc:3f:a9:3e:c0:68:4e:d1:28:50:4e:78:
6d:a8:38:47:5e:a5:66:07:9c:5b:73:e0:c5:1d:da:
ea:65:86:c9:11:2d:c9:48:c1:f9:6b:40:7e:8b:ce:
e3:25:d5:31:bb:8c:f3:22:67:8f:89:a4:e2:8b:5a:
1d:94:56:94:4e:0f:a6:12:67:ce:dd:74:28:f5:a2:
a8:95:96:ea:b5:2b:75:3c:50:6a:bf:b8:8b:34:99:
e5:b9:86:48:43:c2:31:63:79:d5:3c:91:ea:9d:eb:
a3:ad:a5:e5:d0:c9:cc:40:b3:f4:f5:12:d1:8c:ab:
03:2d:23:b9:ce:dd:75:c9:ad:7e:db:f5:fb:2d:2a:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:FF:F6:38:F6:F5:8B:89:0E:87:54:24:2C:5B:2E:0E:1B:FB:33
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:90:21:41:8b:05:af:a8:30:8b:48:d7:2d:37:62:bc:fb:05:
ae:1f:b1:10:c4:bf:ff:84:4e:ff:b1:11:bb:5f:3f:87:3e:36:
98:f9:78:0d:bd:ba:40:ae:b3:ba:05:83:cc:c5:ac:0b:d3:a7:
5c:bb:e7:d9:1d:5c:d5:49:99:c4:8b:07:d1:d5:38:61:b0:22:
e9:09:36:50:c2:cf:3a:36:f1:5f:86:46:16:6d:09:f1:a4:95:
b1:15:30:75:a9:b2:49:ab:5f:27:5a:41:b0:a5:5c:f9:04:76:
aa:33:84:5f:9a:90:8c:2f:11:10:c5:c4:81:3a:03:6b:75:a3:
42:4e:1c:88:35:95:c6:c5:55:9a:73:6f:bd:33:62:3d:20:f1:
80:b4:85:cf:c0:55:e1:3e:3d:1b:f4:0d:f2:0d:ec:d8:9c:69:
8a:95:df:c2:70:d1:8d:4a:70:50:cd:a5:76:be:7c:89:05:44:
f8:0e:a0:f3:70:cb:57:28:11:34:4e:cb:9d:d3:d1:d2:eb:21:
06:4e:b5:d1:78:ab:5b:d1:b3:1b:c5:78:54:2b:8e:44:5f:f0:
e0:40:07:93:d8:04:bb:8c:c7:6e:f7:dd:61:7b:60:c4:18:48:
87:48:75:74:fe:eb:df:c3:a9:08:b6:c1:d5:47:49:8c:80:9e:
10:0a:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:12 2025 by rpki-client