Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: u+daWt21Ru3H0iPCpwIquwCS4qPph6dn3D/TL1jK9NM=
Subject key identifier: 64:7C:CB:77:2B:9F:12:36:02:9D:C7:E6:84:7B:26:4E:2D:32:F1:D4
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 01958C96DE50838A53353020AE6A91FAB873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0AD9
Signing time: Wed 12 Mar 2025 23:00:52 +0000
Manifest this update: Wed 12 Mar 2025 23:00:52 +0000
Manifest next update: Thu 13 Mar 2025 23:00:52 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: whPwF9vuLxTttrTRQjQnNP5JwpwT6CzJoP4/nO1Y7fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:de:50:83:8a:53:35:30:20:ae:6a:91:fa:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Mar 12 23:00:52 2025 GMT
Not After : Mar 13 23:00:52 2025 GMT
Subject: CN=647ccb772b9f1236029dc7e6847b264e2d32f1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:ce:b9:83:72:75:29:76:8e:dc:b9:5e:14:
f7:78:b0:0d:6a:f1:b4:dc:3e:58:72:a7:b1:4f:db:
c0:10:1d:df:23:c6:8c:1e:35:07:45:e8:89:93:06:
81:8a:b2:66:0b:b9:97:d9:28:c2:8b:a9:19:d4:03:
02:4d:8c:a3:d9:17:d6:c4:43:61:2e:28:3a:84:cd:
d2:2f:48:57:2e:61:9e:cd:7e:13:51:06:44:7a:7c:
4c:8b:35:96:7c:be:c7:6d:91:ec:b1:16:9b:ae:13:
59:ea:e6:61:af:ee:70:01:d0:c3:16:a3:f0:d6:9d:
cd:0a:ae:16:c0:0a:66:cf:c7:f0:79:d8:09:df:35:
60:2c:4a:56:42:25:c3:14:c2:2d:1e:d5:e9:ed:ce:
e3:39:ae:35:4e:6b:47:e0:96:db:86:a7:34:86:b9:
d5:a3:98:fb:ba:e7:d4:28:64:32:dc:1e:09:a3:ca:
ca:3d:d6:6f:b6:fb:c5:34:57:54:e2:3c:3d:39:73:
26:83:0e:85:58:1e:a4:e9:0d:2f:b1:c6:9d:82:eb:
e5:49:1d:6d:ef:a8:1d:7b:a8:d0:86:5a:3e:48:99:
91:fe:b3:4c:b3:25:26:ab:b9:8a:0b:5d:da:9b:f4:
3b:38:61:72:8a:14:1d:55:e1:ef:62:c6:68:3e:18:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:CB:77:2B:9F:12:36:02:9D:C7:E6:84:7B:26:4E:2D:32:F1:D4
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9f:9c:2f:c1:d8:97:69:1e:e9:0e:e8:30:06:08:b0:a8:bc:
c5:18:bb:ff:61:54:03:eb:19:f2:04:7e:ee:0a:84:60:2e:53:
47:53:59:e9:b5:36:18:4f:77:e0:66:2d:c8:af:fd:80:19:9f:
08:a5:ed:5f:a4:86:6d:64:8e:ee:a2:30:21:e0:d5:7b:72:95:
20:f7:22:dd:23:23:c8:f8:48:36:86:27:35:4e:c0:36:9c:5c:
9e:9b:49:c8:dc:2d:e2:3e:63:00:b9:b8:83:ae:67:6c:44:94:
04:04:4c:1b:58:76:bd:d2:69:16:64:11:8c:1a:ba:2a:d1:cb:
08:d3:1b:6f:cc:cd:65:45:1f:ec:08:1d:4c:e6:de:78:66:4f:
67:89:74:c9:08:31:1c:ab:1e:72:6c:25:c8:02:f9:eb:f8:02:
3f:32:17:93:39:e3:78:d9:ed:45:50:dd:37:88:0c:10:43:ac:
54:ea:e5:e5:78:f5:08:ab:5f:f3:ba:47:cb:88:f7:74:a2:3f:
8e:3c:c7:61:c1:15:7d:32:da:83:fb:2a:02:a7:df:33:7e:fc:
e8:1a:83:f0:05:d8:8e:58:b3:6f:c0:3b:d6:11:86:69:aa:30:
e9:7d:b0:de:b3:52:07:dc:87:33:95:f2:17:16:0a:70:bd:52:
c8:8a:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:23 2025 by rpki-client