Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: 8tdgfvaufcCEUN3rlrKrusN+AiI7RTO9ZiEa6x3Mjdo=
Subject key identifier: 84:0E:4B:5F:28:8F:45:EA:47:4F:48:B7:2C:1B:B8:46:9B:E2:90:38
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 019641E8C34FB951C8FBBAE40B0FB168786E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0A15
Signing time: Thu 17 Apr 2025 04:01:35 +0000
Manifest this update: Thu 17 Apr 2025 04:01:35 +0000
Manifest next update: Fri 18 Apr 2025 04:01:35 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: o1DMDjO1b7dEotDt09Yipef76BuPrCm23HZS0bebtHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:c3:4f:b9:51:c8:fb:ba:e4:0b:0f:b1:68:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Apr 17 04:01:35 2025 GMT
Not After : Apr 18 04:01:35 2025 GMT
Subject: CN=840e4b5f288f45ea474f48b72c1bb8469be29038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:8e:a1:7a:21:49:9f:94:97:1b:4b:df:1b:
3c:6d:1b:eb:7b:2a:9a:8c:f2:ff:59:5c:f1:78:a2:
38:c4:45:15:27:c2:91:14:51:5a:20:aa:cd:93:81:
1b:2a:be:81:6b:be:3c:c7:e3:07:d7:57:e1:50:49:
07:9d:6c:f6:76:fe:1a:e0:fa:4c:07:33:3b:5d:19:
3e:1b:32:d0:af:fe:ab:37:67:28:5d:26:b8:b8:b9:
68:89:e7:2a:46:0f:b4:ee:c6:7e:0e:b4:1f:2a:65:
c5:54:6a:b8:cb:55:39:b7:07:04:7e:ff:b9:32:85:
2f:ab:7a:3f:49:11:1a:fe:d9:f3:d4:f8:5e:44:5d:
1c:8f:19:a3:8b:fd:8a:b7:ce:a9:7b:a2:e3:7a:ac:
0e:02:bd:91:b0:8f:dd:c1:ff:f8:be:be:0c:3f:28:
ba:0c:a2:de:bf:d2:c9:55:df:66:92:bb:e1:44:ad:
15:d4:fb:03:3c:43:ed:35:c7:4e:3f:a0:c5:ee:bd:
1a:5d:f1:29:8e:b0:c6:c5:41:d4:d6:d2:fb:12:9b:
41:8b:ac:42:d4:60:07:23:56:2c:32:96:fa:b1:f3:
18:7d:65:b0:8a:30:2e:c7:f0:10:94:52:09:eb:3c:
95:0e:24:b6:69:c7:d3:5b:86:b0:6d:10:2c:ce:41:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:4B:5F:28:8F:45:EA:47:4F:48:B7:2C:1B:B8:46:9B:E2:90:38
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:f0:d8:16:32:16:42:a1:fb:db:ce:37:f1:d1:a0:3e:18:
12:a4:2c:04:9d:c2:27:2c:80:28:4a:9f:f8:52:60:f0:d7:eb:
da:6c:af:ba:e8:9e:04:6f:3b:b1:70:94:83:73:7f:67:18:fb:
19:7c:80:6d:d2:31:1e:8c:0a:95:47:e2:e7:11:37:e7:04:66:
d1:1a:03:10:76:96:fd:1e:c8:ff:15:fe:d0:fe:ca:d0:e6:f5:
4e:fe:ab:0d:25:c5:e9:19:df:d1:92:48:17:15:21:cf:41:09:
48:fe:c1:61:ec:67:b5:7e:45:c0:5b:2d:1f:f8:cd:fd:c4:1f:
60:81:62:83:fd:49:1e:e9:57:3c:0e:5b:1e:9f:d0:a9:b5:57:
f6:55:a5:e4:fe:77:c3:9e:7b:31:20:da:af:67:94:d9:d5:10:
c5:84:d4:35:7d:ee:72:c3:58:a8:97:64:d9:9e:19:64:cf:d3:
96:48:fd:65:ee:b8:24:c2:c0:f3:d6:c3:70:8b:3d:a9:ba:f6:
93:89:a9:b5:31:5f:3b:30:7b:1d:d6:e9:5f:9f:22:1f:5d:cf:
38:ce:45:07:c8:a6:f8:37:a4:bf:2d:5f:72:66:d4:35:f7:d7:
83:04:38:c3:dc:89:66:22:fe:2d:d3:3c:10:b2:0d:d5:2d:bf:
48:1b:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:13:42 2025 by rpki-client