Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier: NTySwCkW/qMrE1UZWLStfOmvGV2jP79gzcdb1w8Hh64=
Subject key identifier: 6B:80:61:05:A3:6F:FE:43:83:96:D5:DD:26:9C:69:B2:AD:B9:88:9A
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial: 019578D91B094E8C19114F5A591A31C84704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number: 148B
Signing time: Sun 09 Mar 2025 03:00:48 +0000
Manifest this update: Sun 09 Mar 2025 03:00:48 +0000
Manifest next update: Mon 10 Mar 2025 03:00:48 +0000
Files and hashes: 1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=)
2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: BJbIYuZOisE0P1xR3UaqYIthABQ/KKbDLYxUF8zrm8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d9:1b:09:4e:8c:19:11:4f:5a:59:1a:31:c8:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Validity
Not Before: Mar 9 03:00:48 2025 GMT
Not After : Mar 10 03:00:48 2025 GMT
Subject: CN=6b806105a36ffe438396d5dd269c69b2adb9889a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:ff:fd:48:8e:65:79:fc:85:27:4f:24:03:
14:7f:5a:0d:a2:92:d8:51:c0:7e:4e:2b:ef:f3:fb:
b7:9f:43:23:da:08:f3:49:f5:80:7e:77:a0:0a:05:
24:70:4d:bb:17:9d:f0:24:2b:ed:35:5f:5f:2a:65:
e0:aa:2e:1a:97:75:2c:e7:0a:a2:22:1a:3a:b1:8a:
e5:f3:c0:75:1e:cd:48:97:c3:63:bb:eb:06:40:b7:
8b:9d:42:d3:c5:8c:ae:0c:50:d1:1c:28:b9:2c:d2:
3b:78:2d:41:c6:3d:81:10:63:a4:90:31:d0:28:5a:
94:a5:84:ca:4b:43:81:62:06:1f:8a:7f:26:11:2c:
74:fa:c3:fe:cc:2f:2d:74:4e:b5:d6:0a:58:82:74:
e2:bb:30:df:23:23:3e:ed:7e:12:e4:a6:7a:41:3a:
1d:da:f4:95:bf:9f:33:b0:98:cb:43:53:69:53:e5:
97:74:a9:04:d3:b1:8b:c7:1b:35:b8:13:ad:24:67:
6e:c6:6c:3e:4d:4f:44:6e:b1:63:09:ac:1c:01:34:
a6:f4:1a:6e:84:51:65:2d:13:1f:08:9e:68:a9:59:
4a:83:f6:70:a6:6b:cd:99:a3:1b:9d:8e:b9:42:ba:
c4:da:43:12:af:6f:ce:e2:7e:59:8d:6d:3b:24:f6:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:80:61:05:A3:6F:FE:43:83:96:D5:DD:26:9C:69:B2:AD:B9:88:9A
X509v3 Authority Key Identifier:
keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bc:37:16:20:cc:03:6a:56:21:0c:44:84:99:42:96:24:91:
a8:99:db:eb:e6:1c:cc:aa:53:88:de:f0:12:28:e7:02:c5:c6:
e7:d2:6a:37:ab:86:e7:7b:86:2a:47:f2:ee:3a:fb:a2:9a:34:
f6:57:b8:63:3d:12:b7:df:a9:cd:1f:00:f3:9a:e5:23:13:4b:
03:f2:f5:32:22:56:2d:8d:7d:ea:b2:0b:80:97:81:f8:3b:ee:
13:bd:71:21:6a:c2:5b:5c:7b:87:7d:4b:c5:ab:fb:b0:4c:52:
2b:35:b4:81:81:85:02:a7:08:c8:bf:bd:a3:c6:bd:8f:bd:db:
72:95:af:f5:dd:4d:5f:8c:7e:d6:f9:b1:95:5b:fd:25:5b:b8:
de:b0:4b:88:2d:22:41:76:6d:22:4f:9e:2e:86:98:23:ab:cd:
ce:3e:90:66:51:d4:00:0c:00:be:b6:4d:6e:f0:cf:fd:4b:9f:
4b:5c:49:6f:0d:b1:8e:cb:57:c0:f9:5f:07:16:eb:94:b9:7a:
28:59:28:c2:f8:8d:a5:63:e1:91:23:79:d8:ab:15:13:67:ce:
23:b5:83:71:4b:4d:94:68:be:f4:70:ca:1c:ac:c9:dc:14:9f:
be:02:c7:2a:dd:57:04:75:4d:72:8c:f7:1d:2d:ba:15:0f:91:
63:19:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:33:56 2025 by rpki-client