Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: 8pl8jMcSTCs3+BYxofusHYmVP0X++wByBmPnM8UXPY4=
Subject key identifier: EF:15:AB:4F:AB:25:44:B5:E5:27:B7:B0:3C:2F:38:CB:CB:42:FB:85
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 019646D79B5283910736E3D920AAED47E2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0D15
Signing time: Fri 18 Apr 2025 03:00:57 +0000
Manifest this update: Fri 18 Apr 2025 03:00:57 +0000
Manifest next update: Sat 19 Apr 2025 03:00:57 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: /gpNoRLbNGvpVjt4AjSjtHsBoPTlRiEvk3cEVDEMs80=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:9b:52:83:91:07:36:e3:d9:20:aa:ed:47:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Apr 18 03:00:57 2025 GMT
Not After : Apr 19 03:00:57 2025 GMT
Subject: CN=ef15ab4fab2544b5e527b7b03c2f38cbcb42fb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:fb:24:ac:ed:59:b6:11:7f:3f:d7:d1:f1:
8f:db:26:9b:87:5f:e2:95:13:90:6e:31:12:35:80:
af:0b:11:70:54:2a:88:79:f4:70:50:e5:f4:a2:79:
ac:ad:da:fc:91:de:75:10:0b:bc:e0:aa:6f:d1:ea:
ef:69:9e:3a:14:4c:e7:d4:96:ed:38:de:a8:ea:f8:
26:40:17:b9:89:9a:b3:c7:7b:65:9d:cc:aa:d4:70:
2f:92:88:ea:1c:9f:8f:39:62:7f:3c:8c:54:d3:78:
ca:a7:f8:fa:69:5b:eb:2b:b9:0f:1f:5d:62:6f:eb:
08:60:b7:f5:6e:d0:87:11:64:11:88:be:af:58:e8:
41:ee:d4:85:bb:9e:48:a4:d9:14:0f:4d:97:d5:82:
6d:5f:0f:40:4d:3c:0e:a8:7d:01:c5:04:c4:10:82:
26:25:30:67:69:70:f8:b8:0e:c5:62:19:b5:78:3f:
c6:0c:2b:cd:8c:d1:da:ec:72:ec:4a:25:1c:13:bc:
2f:66:47:c4:85:41:12:46:aa:b1:67:4e:7f:3c:fb:
db:56:f0:64:69:5a:2a:d1:d4:b7:5f:22:04:39:45:
5d:2f:81:f9:36:fd:6f:6f:ff:7e:fa:d5:07:59:95:
1b:b0:a8:28:d0:27:dc:a7:41:85:9f:b4:39:75:fd:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:15:AB:4F:AB:25:44:B5:E5:27:B7:B0:3C:2F:38:CB:CB:42:FB:85
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:34:e6:cc:cc:c9:44:c4:ef:1b:ce:6b:3b:52:e5:b1:3a:16:
4d:45:f6:6b:e0:0d:8c:6e:4f:a5:25:72:e6:a1:33:1c:2e:d9:
6b:68:ab:4c:48:5a:a8:1b:d7:13:a3:02:69:4f:a5:35:4d:b6:
e2:71:53:94:81:da:15:10:be:d6:e8:39:0a:d0:44:9a:d9:ab:
9d:83:e4:13:a8:7a:18:67:0a:d5:43:98:de:d1:0f:7f:d4:e0:
df:ba:d2:41:47:b6:19:31:25:5a:61:0e:6f:c9:03:12:21:64:
49:57:ff:85:2e:1f:4b:d0:1d:f3:55:d3:b8:5d:0e:af:d2:14:
7e:60:dc:29:d7:6c:6b:63:ac:ac:99:cd:a4:73:8f:88:b8:50:
76:77:83:9c:0b:44:21:6b:18:54:07:41:cc:41:d9:78:d9:a7:
31:72:f9:eb:b5:f9:93:65:69:e9:36:d8:c8:8c:21:65:23:6c:
c9:03:f3:10:bc:9c:20:4e:f0:d0:be:3d:f6:d9:f9:8b:cd:c3:
59:f4:24:03:f4:c0:e1:b2:04:b7:45:c9:4e:0e:59:bc:e5:da:
0d:13:fe:57:8e:e6:fc:eb:5d:5d:11:03:a7:b0:04:76:58:9f:
9a:12:8f:35:74:4b:2e:51:ba:c3:ef:86:2b:cc:bf:df:37:c3:
8b:29:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:00:34 2025 by rpki-client