Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File: ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier: ZBR6sHjmvlRKxpeiQcoRy+K2paL432No2c2fZ5oFrRc=
Subject key identifier: FA:73:48:E8:89:B6:D5:D3:FA:87:67:65:65:31:79:39:03:DB:45:F1
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 01965838BE957A6E1D23CBD6F85B96DF3160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number: 149E
Signing time: Mon 21 Apr 2025 12:00:35 +0000
Manifest this update: Mon 21 Apr 2025 12:00:35 +0000
Manifest next update: Tue 22 Apr 2025 12:00:35 +0000
Files and hashes: 1: humiX4umMQ8U2diSQKMJBIULUzM.roa (hash: se+vrxlBcmmLnHSpfQQqP4vmwa+L+eQnVu6u1QXlV2U=)
2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: rQWbIbyeoLd9m/J3UDWswBj/TKt91IQgmTkfmWaKf2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:be:95:7a:6e:1d:23:cb:d6:f8:5b:96:df:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Apr 21 12:00:35 2025 GMT
Not After : Apr 22 12:00:35 2025 GMT
Subject: CN=fa7348e889b6d5d3fa8767656531793903db45f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:18:b3:04:5b:1e:2d:52:e9:e8:17:01:f8:
c8:b0:35:45:d5:72:21:b9:c1:0e:98:69:05:7a:58:
70:0c:6f:f9:3c:27:ad:38:ad:24:ea:46:d7:ca:0f:
ff:b7:c1:b7:34:7a:1b:8f:91:7c:9d:1b:0f:f9:98:
28:65:bd:50:5f:12:9a:92:ee:fb:bf:fb:11:27:b5:
da:08:47:13:2e:33:c7:9e:9d:50:cb:32:bc:9e:eb:
7a:7a:2e:36:73:e1:c1:26:19:3d:e8:e3:3c:14:63:
6f:8b:b4:57:f2:e7:3d:f9:92:8f:51:38:57:98:4e:
6d:8b:6c:2d:b6:e0:47:02:b3:80:4b:77:a6:89:0c:
57:61:99:a2:18:41:67:be:a4:8b:47:11:df:1e:de:
6e:e9:c3:27:53:d2:ca:1e:c7:10:55:f2:f1:79:d1:
88:f6:68:05:ec:2e:31:a8:6e:d5:7c:4a:14:df:c7:
6e:89:f7:4a:47:e9:3a:a1:fd:7d:a8:20:e6:8c:7c:
fb:d5:9b:57:b0:77:b1:3a:06:a2:01:a9:40:58:27:
97:b5:59:3c:6a:07:d2:c5:9d:b2:b1:ce:ff:22:2f:
1f:06:f6:ec:28:88:5b:c0:8f:45:0f:53:95:03:32:
ba:b6:6d:f4:d1:d6:7f:21:b3:ff:ac:21:f9:8d:9f:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:73:48:E8:89:B6:D5:D3:FA:87:67:65:65:31:79:39:03:DB:45:F1
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4d:9a:a5:bc:dc:69:ae:be:02:58:bb:58:64:1e:4a:30:d3:
cb:50:1d:a9:e6:9f:8c:ca:c1:9a:fc:47:34:f0:19:5e:28:75:
d2:a9:16:20:49:68:fd:39:c7:56:8a:ed:82:a4:01:54:40:fb:
bc:77:7a:ec:39:e8:9d:88:4e:55:ae:aa:d0:ad:54:7f:c0:f7:
b6:b4:2b:c4:74:b9:96:2f:eb:62:9b:0c:a1:ad:12:00:a5:04:
08:4d:b9:75:fe:43:66:df:7b:4e:36:f3:3f:ae:95:6e:e7:05:
b9:40:32:1d:73:7c:86:31:65:a4:2a:17:02:5e:c8:2c:93:22:
32:9a:93:48:ba:5b:0c:00:9c:59:76:61:94:72:a6:65:42:62:
4b:3b:4b:c8:61:29:0a:fa:41:ea:5c:c3:b4:88:f0:0e:f2:da:
2e:fe:ca:53:0d:1f:a9:55:91:3f:e1:02:e6:b0:e8:e2:34:49:
7c:24:e0:fc:b7:92:a0:b3:63:59:4d:64:96:57:cc:4a:a1:35:
92:90:86:37:0a:57:6c:56:a4:d4:9f:87:9e:b4:56:41:a0:ac:
e5:17:1c:0a:64:a4:91:6c:d8:fc:e4:16:31:65:e0:c6:d9:20:
bf:fb:e5:81:2d:f6:3b:b9:56:61:46:94:37:a9:b1:9f:c1:ca:
7a:24:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:04 2025 by rpki-client