Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: AwgQVLiRzbB3NL2aqoYFrhFIIQhJHxlkSuGKQfF+Z1o=
Subject key identifier: 70:9C:5B:DA:17:B4:FB:BB:15:00:8C:70:33:EC:65:9B:C0:C3:BF:30
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01963DD3F06F7D0FB588D750900997268151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 09:00:21 +0000
Manifest this update: Wed 16 Apr 2025 09:00:21 +0000
Manifest next update: Thu 17 Apr 2025 09:00:21 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: XuYd6qZ5btviVUNi9z0NIop7uT830ALkaVWYhsWCOew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d3:f0:6f:7d:0f:b5:88:d7:50:90:09:97:26:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Apr 16 09:00:21 2025 GMT
Not After : Apr 17 09:00:21 2025 GMT
Subject: CN=709c5bda17b4fbbb15008c7033ec659bc0c3bf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:fc:bd:53:62:0e:40:81:36:56:52:86:e5:
11:71:91:5e:21:97:63:30:00:de:f1:95:fd:b2:fa:
66:5d:b7:1b:6b:7c:1b:82:da:9d:0d:b7:bc:84:20:
7c:9e:30:31:68:09:37:14:70:d7:c8:b2:bf:b2:c0:
b0:43:f4:89:c1:bb:28:35:38:07:1c:65:f6:0c:31:
09:f8:47:84:71:f5:63:4f:a3:52:31:51:75:47:b9:
9c:3a:e5:b5:37:65:7d:e8:92:e8:63:65:4a:6e:3e:
f4:a8:74:67:7c:e8:5b:29:49:92:fa:68:83:dd:29:
1c:95:44:72:c9:d6:25:d5:24:e8:bc:00:bb:e4:16:
2f:e8:1b:66:bb:ee:21:dd:56:71:b4:78:db:84:df:
c7:3b:24:eb:c5:87:1a:ec:25:83:6d:72:f5:4f:87:
5a:f9:f4:06:b1:ca:fa:a7:01:55:65:8e:2b:ef:5e:
a1:d7:57:b6:cd:d5:49:61:ec:8e:6a:c8:4b:ba:b8:
3a:77:73:57:ed:da:b6:92:d4:4e:e6:4b:90:18:ed:
63:16:a3:17:94:b1:fc:35:f2:82:f3:85:14:0f:d7:
d0:ee:ce:1e:21:4c:b5:99:f5:a4:14:a9:c1:d3:b7:
23:bd:fd:3d:26:9f:72:2b:8d:2d:15:11:8b:97:db:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:5B:DA:17:B4:FB:BB:15:00:8C:70:33:EC:65:9B:C0:C3:BF:30
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:72:0f:68:6d:14:94:4a:8e:bb:0a:7e:88:06:72:d3:38:a0:
74:be:41:f1:53:92:e0:ed:a9:32:bf:f7:54:98:8d:c1:9b:2f:
e4:cf:8f:d3:99:53:aa:29:9e:9a:62:fb:1d:34:34:41:c8:c0:
d4:0e:a1:90:a5:e3:45:77:d6:88:bc:b0:b8:5c:d1:38:25:e4:
79:ab:42:4a:c1:de:16:48:7f:f9:3d:e0:4e:1d:e9:f0:0c:f6:
4d:85:6c:ca:75:ab:1e:c1:22:a3:ce:75:08:4c:5f:25:5b:8e:
fa:f4:f8:3e:d0:2f:b8:51:6f:c1:4f:cb:58:f4:eb:76:77:57:
02:7d:13:43:4a:07:0e:34:ca:a5:cf:81:4b:8b:7b:f5:0a:1b:
bc:95:72:54:50:27:84:37:f5:6a:ee:1f:28:eb:c1:8b:76:1e:
9c:7d:8e:59:45:aa:ae:4e:21:cb:82:5b:2d:30:a0:f0:86:f4:
b5:1b:ed:6a:88:87:f6:07:4d:e3:b2:27:96:86:bb:4f:b9:61:
08:07:aa:4e:80:16:54:7d:2b:1b:2d:b7:12:82:56:1c:e8:89:
77:6f:26:e8:2c:52:94:d4:7d:2d:75:bf:8f:ff:8b:3a:cf:76:
0d:11:89:88:6d:28:30:f5:36:26:0a:22:bc:33:51:f1:3d:b2:
1f:85:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:13:28 2025 by rpki-client