Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: CJk3EqQJKiuh7WLT5iea750AA5hRVGRZKaVcqDYEP0w=
Subject key identifier: 0E:6F:48:8C:84:57:E4:5E:7B:D7:E9:52:F3:6B:16:4C:19:6E:22:AD
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 01964CA2AE857E21DFA3C130A0C1D2A0458D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 9D
Signing time: Sat 19 Apr 2025 06:00:52 +0000
Manifest this update: Sat 19 Apr 2025 06:00:52 +0000
Manifest next update: Sun 20 Apr 2025 06:00:52 +0000
Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: Py7/XJ8xLLxYoIX9/5L2uLTNB69xmqufXkfZHOspjAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:ae:85:7e:21:df:a3:c1:30:a0:c1:d2:a0:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Apr 19 06:00:52 2025 GMT
Not After : Apr 20 06:00:52 2025 GMT
Subject: CN=0e6f488c8457e45e7bd7e952f36b164c196e22ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8e:2d:9f:77:89:67:9f:52:ae:b1:8e:3d:27:
b8:36:4a:95:60:3a:ee:cb:f4:81:88:04:98:3b:73:
73:19:c8:74:d6:4a:a3:1e:5b:e8:b3:0b:48:e0:ef:
d3:e7:34:28:44:4d:4e:c2:59:4d:7d:97:2e:e9:5d:
5f:7b:43:69:7c:9b:f1:81:1b:0a:73:02:98:e6:9b:
12:d9:a8:75:c3:cf:2b:a6:1d:ec:92:49:67:40:be:
a6:68:7f:2a:8a:71:46:d5:a0:32:6c:52:80:b5:a1:
29:4c:c5:de:18:6c:0f:0d:af:ef:db:11:ef:b9:c2:
aa:1a:d4:37:5e:60:e1:1a:03:cc:2e:f8:1b:be:ce:
94:46:ea:44:28:69:53:e8:29:d4:6d:33:de:19:1e:
bb:55:e5:a6:ba:6a:6c:d4:2a:e7:e0:ba:ab:36:30:
54:92:a0:e6:b6:40:ba:2f:16:24:6b:01:a1:30:37:
82:5e:97:71:58:b7:87:71:cc:ec:ee:31:26:16:a1:
37:74:d0:33:46:c2:2a:c2:32:34:5e:1b:19:5e:d7:
af:48:be:77:d7:fa:a1:ac:0d:15:5e:9e:cc:d1:55:
72:8e:92:fd:06:b3:70:69:b0:00:2c:f9:e2:ef:99:
ff:33:88:22:7c:11:bd:ed:02:b5:d7:70:81:5a:4e:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:48:8C:84:57:E4:5E:7B:D7:E9:52:F3:6B:16:4C:19:6E:22:AD
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:ef:16:cb:96:54:24:01:f3:eb:be:1b:37:50:bf:66:81:
b2:87:9e:9c:da:5a:05:a2:4b:ca:60:2f:74:08:c1:79:fa:e0:
59:ed:a3:ac:63:e5:6c:66:d9:90:26:81:8e:11:d3:f4:f1:d7:
95:37:fc:70:30:85:22:d0:14:1d:21:45:3b:3c:59:eb:32:9a:
82:8e:65:3d:4f:ff:9e:22:22:7b:09:33:f3:86:ac:e9:7a:7d:
5d:5e:fb:23:63:77:6b:3d:86:37:d4:4c:a7:c3:a5:eb:a0:18:
39:62:9d:c1:5e:83:97:af:f4:6d:dc:e8:44:da:57:72:18:c7:
e2:4a:31:43:13:44:f8:b1:3d:70:1a:e4:ef:62:50:cb:8b:83:
66:d9:1f:35:e2:1f:a4:d1:b0:a9:95:33:9b:92:4f:f9:7c:c7:
e8:51:b7:7f:c6:8e:ca:cc:5a:4e:8a:20:53:1e:41:df:30:d5:
ad:fd:b0:23:87:dc:b1:af:a6:9f:7d:cc:63:02:03:72:ec:13:
13:50:d8:80:1b:5f:a0:e6:d6:17:7e:df:13:ea:0c:71:e4:aa:
71:1f:c5:a1:89:c9:a7:cd:92:71:10:47:9c:53:d2:b1:96:a1:
79:2a:99:45:80:74:3a:ee:20:c9:fb:16:7d:82:33:87:4a:50:
52:84:1c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:41 2025 by rpki-client