Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: j9DtCS3UM2t+QGN4KBkln4npCUPObit/wPzaB6d+B50=
Subject key identifier: 2F:37:63:1B:B4:6B:8B:0B:97:1D:96:52:23:11:AA:52:72:07:47:1F
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019651FFEF341E463EF403AE650A3C8664AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 07:00:49 +0000
Manifest this update: Sun 20 Apr 2025 07:00:49 +0000
Manifest next update: Mon 21 Apr 2025 07:00:49 +0000
Files and hashes: 1: 92Huf3IHz49yEZcp8laODPaay4A.roa (hash: fHDvsxbqA8PNa+801vhXYVjpC3kLuwr6JG2deunc2nA=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: kEanudNF9+X/4N17m+49djezaxYBupGB4sTg7xpVf5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:ef:34:1e:46:3e:f4:03:ae:65:0a:3c:86:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Apr 20 07:00:49 2025 GMT
Not After : Apr 21 07:00:49 2025 GMT
Subject: CN=2f37631bb46b8b0b971d96522311aa527207471f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:c7:46:95:f1:6d:de:47:93:eb:99:ef:03:
27:44:bc:4c:a4:80:a4:2f:4c:ff:7f:46:73:52:f6:
b1:64:fd:4e:3d:b9:5c:91:45:b0:74:d9:82:1c:0f:
88:cb:55:09:1c:cf:10:bd:60:6d:0b:ff:0c:1b:9f:
f9:67:b7:39:c5:47:81:4c:42:0f:e9:f4:1c:d8:33:
66:19:de:1f:a8:f6:61:b7:c4:aa:42:97:19:a9:0b:
b3:07:3a:83:5d:b6:b4:9b:e3:d1:8b:7e:0f:89:63:
72:9e:db:49:85:52:f3:64:0c:85:98:f3:2b:6f:61:
fa:7d:63:b8:e7:9f:19:e8:97:d3:19:79:99:dd:16:
40:88:9e:0f:5e:10:c1:f5:84:81:3c:f0:cb:dd:38:
23:7f:0b:6b:d0:0f:72:1e:6e:d7:e2:83:e0:b2:d7:
b1:d1:19:72:3e:f6:1b:12:ea:da:81:0b:37:ac:85:
5f:71:49:33:51:2b:b5:d4:f0:2e:63:9e:9a:93:56:
06:79:ae:eb:fd:90:d5:11:8c:ed:aa:ff:28:90:79:
2b:ca:af:c5:ad:9c:13:da:4c:36:75:ca:9d:93:0a:
16:dc:c4:06:f3:94:33:f8:5c:d2:90:26:f1:fe:f3:
f1:ba:f7:88:47:e9:17:ac:81:f1:9d:45:2d:cd:2f:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:63:1B:B4:6B:8B:0B:97:1D:96:52:23:11:AA:52:72:07:47:1F
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:29:95:e1:cd:dd:47:e5:ce:ae:de:42:d5:ec:c8:4a:17:29:
9e:f8:3b:3f:f6:44:db:20:45:5d:35:47:4b:3c:1b:f9:10:c4:
9a:a5:8f:47:ac:27:97:dc:39:03:be:1b:6f:4b:03:90:84:66:
44:e6:f8:18:c0:3c:78:06:3f:ca:62:2e:5e:e5:2a:ff:27:46:
95:47:03:96:17:b2:22:3c:16:d5:a1:78:a0:66:9b:fa:1e:50:
aa:05:4e:ec:e6:ef:2e:20:e9:05:a2:e4:e2:0c:48:92:f1:77:
a7:96:3b:03:4a:dd:f6:23:6a:0a:d3:8c:dc:8d:6f:b8:bc:f9:
39:c0:25:d2:2e:3b:68:3c:d7:53:de:32:6a:4f:74:5b:06:6c:
73:cc:55:c4:69:87:bc:2d:ad:ef:10:54:d4:ce:02:4c:7f:94:
c0:f6:56:6c:3a:5a:f9:74:d2:51:cf:9e:0b:75:7a:a8:4b:fb:
79:36:8b:aa:1f:21:cb:2d:55:84:92:c3:d8:4a:49:0d:32:65:
5b:5a:be:a2:7b:6e:4d:79:c2:9a:29:46:a0:18:62:b0:c2:5b:
7d:e9:b7:54:86:71:65:81:ba:a1:7a:28:56:1d:9f:1c:d2:02:
e5:1f:08:ed:bb:a0:f5:e4:9d:6c:d5:8c:1f:94:36:eb:c0:1f:
76:20:dc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:29 2025 by rpki-client