Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: EHnzRDn3D1Bi/UTkCMvxailrKecxTp8N/LlATTCFrmE=
Subject key identifier: EF:67:CB:FD:AC:01:03:52:A4:4A:ED:37:C4:D7:22:4F:0A:A1:F7:E8
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 019644B1A89E11CD2DFAA34728B7FCBF5B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 17:00:15 +0000
Manifest this update: Thu 17 Apr 2025 17:00:15 +0000
Manifest next update: Fri 18 Apr 2025 17:00:15 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: aDlTqXv4wohsU18oN2vyMRQxJbdX1iTjSzrHJAMZl+I=)
2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:a8:9e:11:cd:2d:fa:a3:47:28:b7:fc:bf:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Apr 17 17:00:15 2025 GMT
Not After : Apr 18 17:00:15 2025 GMT
Subject: CN=ef67cbfdac010352a44aed37c4d7224f0aa1f7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:f4:0c:0b:2b:7b:93:cf:19:d4:20:cc:d1:
d7:e9:40:61:be:af:0d:e2:21:4b:96:9f:65:3e:00:
db:fd:ca:89:ad:21:8e:eb:4c:52:83:f1:ef:ce:a4:
18:e7:72:af:2e:8a:d5:2f:c3:24:72:12:88:83:6a:
8f:4d:e6:38:2c:6a:3a:1d:b0:17:c9:e6:9b:67:c6:
69:ef:d6:69:68:77:c1:b9:2f:be:6e:b7:ef:c6:66:
be:e6:39:5e:ca:f4:9d:71:14:43:28:47:df:b9:77:
86:4e:bb:64:0f:1e:3a:62:80:41:92:0b:a0:95:8f:
33:9c:13:09:24:64:61:f4:43:4e:e8:2c:56:bb:c0:
ee:dc:98:2f:5e:f1:53:18:cc:2e:1d:43:71:33:ef:
d0:d6:21:72:45:e6:88:bc:88:76:3b:9e:e8:96:8d:
66:12:9e:6d:61:02:80:34:da:74:8f:fa:61:2b:84:
09:a8:5d:1d:2f:65:fc:07:5a:91:96:89:59:a8:31:
01:a3:8c:fa:bd:b8:9e:11:50:05:0e:09:21:b7:fe:
c1:27:48:c4:74:02:89:3d:c3:db:3c:d1:33:c2:d5:
e7:11:c2:e6:56:39:92:1b:c9:0d:06:8a:e8:47:f1:
27:53:98:68:d6:4d:b9:e4:09:fb:90:cd:9a:b5:8c:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:CB:FD:AC:01:03:52:A4:4A:ED:37:C4:D7:22:4F:0A:A1:F7:E8
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:45:39:7f:7f:19:d6:ba:aa:a4:87:d3:aa:1b:5e:79:d1:
28:83:bb:f6:11:c5:d9:40:82:ae:fa:29:ef:ad:04:da:7e:60:
90:75:dc:e4:9d:88:0a:f7:fc:5b:cb:67:af:4f:e1:37:36:7b:
15:65:be:97:f6:8a:84:89:5b:80:0b:11:b2:44:82:8e:81:37:
4c:8b:d7:dd:8b:16:8f:3d:e2:5c:83:ed:64:d0:ad:bc:88:a5:
3d:38:f6:3e:24:b8:46:31:03:de:45:13:41:c9:f2:22:00:0d:
99:07:1a:0d:86:cd:ba:ce:39:da:d8:fa:35:29:b4:bd:a0:19:
42:ec:f7:59:56:87:12:c7:9a:ab:23:f0:53:b8:29:71:7d:a6:
e5:c8:cc:ea:3b:25:06:d0:23:e2:86:df:bc:0f:be:7a:9d:72:
f8:59:c5:b5:05:d6:20:09:1a:89:b0:4f:39:04:53:46:52:08:
59:3d:0b:4d:3c:02:1f:4f:82:b8:1d:19:e7:4c:94:08:8f:b0:
9f:6e:15:1c:e3:31:80:b1:5a:5b:e5:fc:84:e3:d3:99:a1:8c:
ec:d5:94:a7:34:a0:88:6e:de:94:63:4b:4d:55:9c:98:c3:20:
fd:6f:29:22:ef:08:ed:7a:cc:e9:af:55:03:e8:4d:ff:bf:59:
00:81:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:36 2025 by rpki-client