Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: Z1zQkQazB2ziloUN7VWBi8iHntpeskOQM+Aj9ZlJl+E=
Subject key identifier: 07:CA:16:22:C3:E9:E6:DE:3A:20:74:F4:EA:EF:B8:97:FD:D1:44:91
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 01964FDA87EA548E66830BD295253D24D249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 21:00:43 +0000
Manifest this update: Sat 19 Apr 2025 21:00:43 +0000
Manifest next update: Sun 20 Apr 2025 21:00:43 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: PDgSTRSJMyfwUNoGagQnKQRB+p564aVfRfOTaJuUt/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:87:ea:54:8e:66:83:0b:d2:95:25:3d:24:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Apr 19 21:00:43 2025 GMT
Not After : Apr 20 21:00:43 2025 GMT
Subject: CN=07ca1622c3e9e6de3a2074f4eaefb897fdd14491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:5b:9c:8a:51:20:b8:4b:b6:e0:fa:19:50:
82:37:06:d3:46:95:dd:03:2f:ca:41:dd:a4:88:a8:
23:3e:f7:bd:fa:f1:80:04:22:22:48:92:f5:1b:95:
ce:e3:99:5f:fd:1b:bd:f1:6b:6f:6e:3a:79:0a:37:
80:ce:a9:bb:8a:f3:60:48:ce:ee:47:14:82:a7:7a:
69:e2:cd:67:33:4c:15:f2:49:3c:aa:38:e3:5e:63:
72:47:52:91:b6:1f:e9:e0:d9:3b:29:87:26:c4:d6:
69:f0:7e:41:50:65:e5:21:ea:3d:73:4d:81:82:06:
9d:04:5a:71:86:e4:f3:8a:4c:00:38:e2:22:b7:6e:
8f:e2:82:46:99:a9:03:45:f5:a3:fb:db:34:e5:ec:
e1:af:c4:81:d9:ad:11:85:fb:14:9b:01:d8:43:92:
ba:bd:ea:7f:69:88:17:ec:0e:7c:d7:ca:1d:c1:1a:
5a:70:a4:cb:ed:83:64:0e:9e:a8:5b:6a:ae:c7:bd:
d7:9e:d6:f6:b7:3f:fd:e3:22:50:6d:7f:ca:f4:d4:
74:02:bf:97:f2:58:ba:af:77:07:ab:8d:4d:e3:df:
f8:f2:9d:7b:89:8a:1d:b3:f6:4c:20:aa:82:63:d0:
6a:8b:41:5f:43:29:a3:2e:9a:28:e5:e9:dc:bd:9b:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:16:22:C3:E9:E6:DE:3A:20:74:F4:EA:EF:B8:97:FD:D1:44:91
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:e6:42:e5:54:46:f1:f3:b8:70:76:ff:56:5c:f4:ff:e1:
63:5f:64:1b:8f:06:b2:e8:65:f3:8e:b3:34:c0:fb:18:72:60:
46:0b:09:1e:ff:2e:49:12:47:20:c6:b9:01:2c:6c:a6:18:3b:
51:10:dd:d6:d0:16:5c:43:62:ea:fc:ef:32:60:e3:96:6f:86:
e8:d5:c2:9f:41:33:76:a1:be:0d:77:05:6c:61:81:78:21:ba:
f3:51:fd:82:0b:ff:ba:ef:3d:34:af:f3:50:3c:8b:df:a3:b3:
1e:2f:1b:68:e4:f7:e8:e5:7e:67:9c:11:0d:50:74:16:32:77:
b6:49:64:d6:5b:67:2f:5a:38:9d:ef:e2:98:c2:08:85:3b:1c:
06:eb:c4:27:dd:4d:45:a5:11:2e:95:a1:85:03:82:05:ef:c2:
54:b3:6b:b5:1c:69:cb:7a:f1:3c:69:16:08:69:c6:5a:de:de:
51:8c:d5:25:1f:79:5d:bc:ba:ed:a4:f7:a2:d2:73:a1:9f:92:
14:c1:d0:86:37:75:bb:54:48:ca:d6:ed:31:96:d9:b5:0f:26:
c8:34:8d:f6:11:8e:a0:c3:46:c1:5e:14:d6:44:27:1f:60:3a:
cf:c9:30:4a:15:d0:9c:a2:d0:52:bf:ad:62:a9:19:30:82:ce:
8a:c0:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:10 2025 by rpki-client