Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: jZeq1Roaa1W5e6mL32IDzSCYcNbWrzaOy1nTZMMJ+Jg=
Subject key identifier: F6:9E:F2:57:E4:37:FA:4A:2F:B3:4A:8A:43:00:9B:E2:CF:E8:97:F0
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 019652369A7BBD94B8B25FA2E8962C3752AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 04BA
Signing time: Sun 20 Apr 2025 08:00:32 +0000
Manifest this update: Sun 20 Apr 2025 08:00:32 +0000
Manifest next update: Mon 21 Apr 2025 08:00:32 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: NCFiwt5xiu3EDAW1TEufy48bJm1NmpAe+A4u5JWhkFo=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:9a:7b:bd:94:b8:b2:5f:a2:e8:96:2c:37:52:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Apr 20 08:00:32 2025 GMT
Not After : Apr 21 08:00:32 2025 GMT
Subject: CN=f69ef257e437fa4a2fb34a8a43009be2cfe897f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:99:74:98:cd:2e:c1:24:0d:b3:95:97:29:
3b:14:ce:85:4f:a2:3c:cb:eb:fe:19:2f:64:b7:c0:
b1:b6:62:15:ca:2c:93:63:c6:f0:8b:b1:c9:40:7d:
f3:b4:86:c5:cb:68:4a:d7:ef:dc:68:90:aa:8c:b5:
a0:b1:75:96:08:0c:d5:9e:4e:23:e2:26:d7:84:51:
f5:82:ad:78:9a:7b:3d:45:f6:3f:d2:3f:c8:1a:4e:
2b:8f:ed:e4:b5:b3:08:87:2b:7b:a6:07:95:ce:14:
92:fe:48:a0:46:83:a7:ee:b7:08:54:1a:82:03:96:
27:0c:53:2a:02:67:32:a7:6e:fb:b7:7b:d9:14:0b:
88:df:84:67:cb:b5:ba:6f:4f:28:81:1f:79:9e:8e:
15:e8:cc:54:e7:3f:90:96:02:de:b5:17:35:29:c4:
a5:ee:02:6b:ea:55:19:95:e7:3e:ab:24:da:71:d9:
26:73:b7:df:c9:4a:d1:8e:b1:ca:bd:7b:ec:ea:5d:
53:59:5f:fb:61:78:eb:6d:9c:09:d8:00:70:2b:f4:
f9:c4:70:18:72:63:0a:d2:a1:22:6c:7f:24:59:e7:
b5:a6:d0:97:0a:30:14:1e:02:ad:61:a9:fc:94:71:
2f:59:a7:9d:51:3a:22:a0:d3:8a:7d:02:3b:97:2a:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9E:F2:57:E4:37:FA:4A:2F:B3:4A:8A:43:00:9B:E2:CF:E8:97:F0
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:62:46:11:0f:95:2e:d4:42:08:e6:3e:b5:ed:58:db:bd:39:
ba:51:d3:40:f1:da:74:17:df:9f:16:80:f9:87:e1:c4:41:5d:
e3:e8:98:ee:4d:51:60:f6:80:94:fe:76:0e:57:35:ad:1f:bf:
8a:f1:46:f4:df:96:2d:99:e4:9e:9f:b6:2b:f4:70:2c:9b:b4:
60:c5:9f:9d:c2:fb:ac:1b:ae:b0:82:38:09:44:5c:47:24:6e:
97:f2:4d:86:41:02:f4:32:0d:c1:b7:e8:ec:ea:3f:a4:9e:59:
e1:84:3c:63:46:24:67:ef:dd:7b:b9:bb:97:e4:8e:e0:e2:a1:
cb:e9:df:a4:f8:fd:4e:af:74:a8:6c:80:8b:69:14:d1:4f:0a:
80:e4:4b:fe:b0:5e:a9:e9:b4:cc:13:f8:4d:51:80:43:27:25:
fd:d0:ad:5a:8b:b0:c7:3c:3a:87:12:5e:cf:a7:e0:4f:5b:1b:
88:20:12:63:53:17:b2:e3:cb:23:96:a7:c2:e5:0c:77:e6:ba:
63:9e:eb:e7:17:c5:5a:f0:26:2d:f3:8c:49:26:ac:a6:a0:bb:
02:aa:6f:5f:d1:5c:b9:4b:e3:99:9f:0d:c3:1b:81:04:d0:b5:
22:4a:3a:00:ea:88:da:e5:bc:49:cb:5c:81:75:37:7f:58:5c:
2b:6d:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:49 2025 by rpki-client