Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
File: yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft (raw, json)
Hash identifier: dfMXXnFzk4OZmU37U2ofs7Oj9yDB9XjyhKX/fX6go8A=
Subject key identifier: C3:2A:BE:60:17:DF:22:7A:63:B5:EB:B6:FB:24:A9:52:9B:1B:8A:54
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 0196048A81823F7776B8F73642714BC563A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
Manifest number: 14D7
Signing time: Sat 05 Apr 2025 06:01:47 +0000
Manifest this update: Sat 05 Apr 2025 06:01:47 +0000
Manifest next update: Sun 06 Apr 2025 06:01:47 +0000
Files and hashes: 1: TV8bjX2iYLQ_K3xvyPQFBg8_5j4.roa (hash: igohX63jX8Cxe5hsEllsQKaFbZphTldJC29RHVnM4dA=)
2: XazQXG2c-n81kKei6aAEIGCzQkk.roa (hash: 6K6cajEwr6XzwV0jlcSWtfuziN2YH8eHzt+MUkWO3UI=)
3: Zuc4m_YvYo9dVBgn4_28tfeS3uA.roa (hash: XWJcWE1rzuIso5eYLs4HCvXrfuUzFJEzGlhgGDogzw8=)
4: yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl (hash: 25uMHwWlOhhndIZJUSDBULJZz+x9PAnAz99ik+oh8rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:8a:81:82:3f:77:76:b8:f7:36:42:71:4b:c5:63:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Apr 5 06:01:47 2025 GMT
Not After : Apr 6 06:01:47 2025 GMT
Subject: CN=c32abe6017df227a63b5ebb6fb24a9529b1b8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:17:61:e7:33:0b:da:ce:c7:d9:46:d0:ff:
ae:1d:3c:23:cf:91:b6:cc:24:31:f3:5d:51:36:fe:
f8:73:64:1e:04:d0:15:9b:3b:7e:01:06:e4:0e:6b:
c1:60:b3:8d:56:37:c2:d1:68:d9:99:08:a6:25:dd:
aa:d2:5e:45:70:33:ec:58:67:89:57:3c:9c:f8:54:
8f:ea:51:66:58:fd:20:30:e4:85:31:1e:a7:e7:4b:
d1:d9:0d:95:44:2c:cb:ef:df:41:ac:06:0d:b2:35:
4b:1d:5d:fc:fa:43:99:d2:21:cc:94:08:c6:be:06:
28:ab:ec:cc:34:57:11:9f:f3:9f:f4:24:a8:46:a0:
e7:2d:ba:1a:4c:af:cd:00:6d:02:54:8f:5e:f8:26:
78:37:82:8a:a3:2b:fd:23:20:2b:42:35:46:06:f5:
07:50:b1:ec:d3:65:b3:b2:f1:29:db:62:09:a5:df:
ae:6c:a1:69:29:4e:91:1e:dd:72:23:77:bd:cc:45:
f7:65:83:4a:de:1b:13:05:99:c5:5f:b2:c2:eb:3c:
7b:a1:e2:ea:8b:5f:3f:28:aa:ca:8e:b2:89:8f:13:
c0:c1:e4:1a:2f:59:9b:f6:6c:39:d8:7a:7a:dc:31:
44:13:75:7b:77:d9:62:85:c4:72:9a:a1:e9:49:55:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:BE:60:17:DF:22:7A:63:B5:EB:B6:FB:24:A9:52:9B:1B:8A:54
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2c:66:01:d5:e2:78:c5:a5:2c:61:2f:ea:e5:56:26:68:28:
c7:6c:38:7d:44:fb:4f:4b:9d:f6:59:3a:47:58:fd:ce:df:bd:
1b:40:f0:28:0d:de:ad:72:a5:b4:65:ff:67:be:d8:78:f8:96:
53:b3:d7:bb:21:7c:96:80:13:61:16:b8:79:33:ea:f0:d5:8f:
03:67:6a:ba:bc:60:5f:b5:e8:80:78:1e:5d:d3:b4:44:e1:9f:
de:33:84:c2:f0:bf:9d:3a:bf:12:1a:6e:aa:d4:d7:4c:ea:33:
84:8a:b6:18:97:9f:12:d2:b6:3a:1b:c3:40:ad:d4:6f:76:eb:
ef:27:7d:89:81:4e:b9:8d:6a:bf:16:41:21:72:50:eb:6f:15:
56:24:cd:cb:08:39:d3:b8:a1:3f:f3:d2:69:ba:04:07:45:cc:
7b:fc:34:24:4b:69:7b:c8:99:5b:3b:7b:77:8e:dd:e0:9a:b7:
aa:71:c4:4b:4b:fa:64:1b:1b:39:f0:c1:6c:00:b9:b0:c8:a4:
37:95:95:ed:52:b0:2a:cf:96:c2:1c:19:d6:01:96:26:01:a6:
62:f7:1e:49:04:d5:08:28:73:d5:50:7e:29:b6:de:d6:ba:04:
f6:07:2e:9d:d7:06:bf:a7:e7:bd:44:22:60:9d:2c:c5:12:46:
bb:5c:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:38 2025 by rpki-client