Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: 8kyGFwU6s8BfmnETCF8GXxiPG9sv6dnzvPrw6ODYvmk=
Subject key identifier: B7:C1:69:00:65:A8:4C:EC:0E:26:21:E2:C4:CE:7F:73:10:31:D4:3D
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 0196425589F37FCD40C29F9FFBEFE7B4CD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 06:00:24 +0000
Manifest this update: Thu 17 Apr 2025 06:00:24 +0000
Manifest next update: Fri 18 Apr 2025 06:00:24 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: 5gCv/HTmTBvulu64nW6mOvCRDJarL0a/fRZ8sRvBjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:89:f3:7f:cd:40:c2:9f:9f:fb:ef:e7:b4:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Apr 17 06:00:24 2025 GMT
Not After : Apr 18 06:00:24 2025 GMT
Subject: CN=b7c1690065a84cec0e2621e2c4ce7f731031d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:f0:08:df:2a:b8:e1:4e:e2:df:ad:46:bd:
df:09:20:6a:2b:c3:a9:10:d8:60:fd:c0:18:61:86:
f7:0a:10:95:6d:13:56:7d:c2:79:12:72:2f:c7:29:
91:cb:f8:97:c6:07:3e:41:3e:ac:0b:9c:0a:61:75:
4b:c8:79:f7:db:6e:a2:c3:3c:ca:44:64:12:ec:26:
d2:aa:cb:72:3f:74:3a:4a:17:58:0b:9e:cf:df:ca:
73:98:9f:1f:01:81:00:61:75:3c:3b:8d:60:2b:27:
c3:0b:3a:2d:9f:3e:55:8c:a9:96:49:b3:f6:8b:3b:
98:06:5d:89:42:74:8e:51:e8:51:85:bd:d1:e9:53:
29:85:9b:d0:b9:a1:2d:2a:4c:75:aa:ee:2d:02:77:
3d:8d:6e:4e:b4:82:10:7a:40:6c:07:0d:f0:c1:5e:
ba:6b:7a:f4:09:df:8c:12:6f:79:0e:b0:b5:7c:05:
ca:99:07:2f:0e:14:25:11:5e:f1:5e:32:91:bc:b0:
9a:a2:d7:57:08:20:5a:f7:37:e8:e1:ff:c1:3f:7a:
b7:5d:92:1a:c7:80:0c:4a:43:94:34:26:40:87:ca:
ab:5c:38:ff:5e:1d:1f:00:11:ca:b8:90:f1:0b:29:
ec:71:cf:f9:17:6b:c8:ba:45:77:6f:40:84:a0:3b:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:69:00:65:A8:4C:EC:0E:26:21:E2:C4:CE:7F:73:10:31:D4:3D
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:ef:b7:65:67:f8:80:b2:1e:c3:2f:40:bf:c1:d8:0b:01:
df:50:eb:98:28:7c:af:27:90:47:23:48:c0:80:86:78:c6:e6:
1d:ee:ab:d0:32:ce:e3:37:b9:b4:ef:f7:14:9e:3a:9f:37:41:
f1:cf:ec:f7:95:3f:ba:6c:a7:54:57:57:a1:20:63:95:ca:7e:
39:69:bb:b6:ae:56:c2:99:74:98:53:06:f5:06:b6:1e:73:f6:
ce:7f:9e:ca:b5:13:f3:a5:21:cf:4c:96:11:d1:1c:5b:68:5c:
51:75:bc:98:cf:78:97:7a:88:e0:b8:54:02:c0:52:fd:1e:ec:
52:82:90:3a:8c:87:63:75:51:df:fa:98:40:06:01:9c:e0:ec:
8f:41:fa:d4:c7:6d:5e:10:e0:d6:a4:05:6a:22:11:71:c8:fe:
3b:4d:61:0c:3c:82:37:71:34:dd:0a:e5:e9:8a:fe:10:71:82:
90:90:6a:76:fa:14:a8:65:49:77:4b:9c:f2:1b:e0:06:d7:f7:
f1:d7:02:c6:bd:5a:be:55:b3:cf:d7:2b:d5:16:8a:f3:cb:a9:
fe:23:d8:7c:af:8c:61:4e:9d:53:7e:3f:bf:63:03:b7:d8:5e:
d7:17:ac:7e:66:25:35:f7:51:cb:69:96:c4:bb:32:46:42:6a:
5b:eb:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:44:50 2025 by rpki-client