Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: hVthtsPFLJb+joXn52SBAIYF6w0eItde+2HOuEz9Ljs=
Subject key identifier: 8F:E8:7F:C9:3B:72:B9:E9:7B:0E:48:8D:12:8B:59:B8:84:05:AB:DC
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 01963F54A87D3863122D731D91305FA43824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 16:00:34 +0000
Manifest this update: Wed 16 Apr 2025 16:00:34 +0000
Manifest next update: Thu 17 Apr 2025 16:00:34 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: XoNFXboNd2HXrotpWIiWb8SsjIZgNF+h8W9erzkUgM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:a8:7d:38:63:12:2d:73:1d:91:30:5f:a4:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Apr 16 16:00:34 2025 GMT
Not After : Apr 17 16:00:34 2025 GMT
Subject: CN=8fe87fc93b72b9e97b0e488d128b59b88405abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:ca:b5:83:3b:f5:6e:b5:4d:6c:ea:9c:4c:
c3:43:d6:70:83:6a:22:cb:3c:6f:03:6b:5a:86:11:
a0:ed:29:cc:5a:80:12:9d:a5:ee:2a:b0:d6:71:3e:
7d:91:dd:ed:ac:51:97:49:fc:5b:86:d5:35:14:93:
0e:35:59:7f:50:95:a3:74:98:33:da:3b:ac:ae:cf:
61:17:5f:e6:3e:e9:27:cb:3b:7f:a6:99:53:6a:e7:
65:c8:cc:08:98:13:b3:f3:65:f4:34:66:94:21:d9:
3d:a7:c8:c0:bd:f2:ac:7e:1f:b7:d4:34:49:43:bd:
c4:67:60:f0:78:a3:f7:63:83:4b:a6:82:8b:b2:bc:
8e:b3:14:24:60:78:0b:d0:cd:5a:0f:90:b7:39:83:
09:15:25:72:f1:ee:e3:f9:b0:f0:5a:0f:f7:22:71:
8d:a1:b9:e9:a7:fe:c2:a9:e1:37:6d:f1:a6:96:c2:
fc:19:e3:ec:50:dd:bf:39:a8:f7:b9:ed:db:ed:73:
06:5f:66:76:10:b3:24:48:86:d8:90:ee:a6:d9:f2:
00:a9:f3:a8:e1:7c:62:c9:3b:a1:db:43:02:3f:97:
c5:03:c2:f1:c5:46:78:2f:e4:03:1f:d5:82:23:c6:
9c:6f:37:29:2f:81:a8:67:2c:18:20:90:dd:7f:90:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:7F:C9:3B:72:B9:E9:7B:0E:48:8D:12:8B:59:B8:84:05:AB:DC
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c2:6b:32:ca:15:ee:36:d3:f9:4d:8e:41:67:e7:5b:02:1a:
c7:6f:d0:a7:7b:73:c9:5a:2d:7f:79:b1:39:0a:84:96:bc:b9:
1f:ad:f8:65:3f:ae:d8:d2:ba:34:e0:c2:aa:f4:29:aa:69:3a:
fa:76:c9:25:eb:58:f3:b9:60:6a:67:8d:b2:f0:35:2f:e8:1c:
ed:be:db:04:06:66:c8:a2:4f:f5:8e:56:a1:a7:3e:7d:14:d2:
f5:c5:e3:43:86:8d:0e:72:3c:1e:ce:9d:f8:dd:4c:36:9a:2d:
72:7a:0c:81:6a:f7:69:6e:1d:b1:b1:ed:a8:d4:d8:fa:8f:bd:
b5:3b:48:e7:3e:a2:80:ef:6d:7c:aa:ff:f6:dd:f5:b2:93:54:
a6:f1:e7:0b:34:3b:92:74:53:b9:7e:11:d0:ff:6d:ea:5a:82:
2e:e0:64:2d:d3:a7:ad:d7:fc:2f:f6:8f:e8:6b:62:f2:25:8e:
17:b8:ec:5a:4b:51:b6:42:e6:f9:b2:87:1c:c2:86:ca:74:c0:
ec:a1:b4:b4:14:c9:d0:cc:37:ff:f4:f8:5f:4b:2c:04:d9:03:
12:f0:f6:92:29:2c:be:17:11:22:d1:a1:92:e5:a7:ba:8a:87:
ba:0d:64:70:3a:b2:a1:ab:1d:0a:63:ed:fb:68:a9:aa:ca:e2:
4c:1a:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:45 2025 by rpki-client