Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: Mg3+ylXxq7GgybsxrqHpdwrXSKQdRbY4dyLXtbySz+Q=
Subject key identifier: A8:04:D8:41:0F:92:95:54:4C:78:8D:5E:9D:E3:E3:4E:BC:B6:D3:62
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019653EE18B5FA9550811FCA680AB1CC4131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 16:00:34 +0000
Manifest this update: Sun 20 Apr 2025 16:00:34 +0000
Manifest next update: Mon 21 Apr 2025 16:00:34 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: HLrCWYsvYGbrFp7TeI6jEK83xC+o9qPza6s3EeROctE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:18:b5:fa:95:50:81:1f:ca:68:0a:b1:cc:41:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Apr 20 16:00:34 2025 GMT
Not After : Apr 21 16:00:34 2025 GMT
Subject: CN=a804d8410f9295544c788d5e9de3e34ebcb6d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:ee:95:3f:ee:93:7b:2a:73:03:b0:78:fb:
01:12:d9:64:3d:65:7d:1d:f1:5c:e1:93:d8:6c:7c:
4e:d0:64:bc:4d:f5:5a:1e:56:5a:fa:3c:9e:18:43:
7a:1d:c2:a9:30:ee:d0:07:23:51:53:99:5b:4f:c3:
67:3a:f9:9d:09:26:b6:59:e3:10:51:8a:87:31:88:
e1:3c:d2:5a:12:3a:3f:6c:b1:10:c2:be:af:4b:b1:
fe:7b:9c:59:5f:bd:25:f9:58:ce:72:00:31:ba:43:
7b:37:87:e1:59:4d:2e:48:12:b7:70:72:bf:c2:3f:
31:da:27:e3:de:1d:01:32:a2:79:68:5f:f3:c3:ee:
ab:59:bd:8e:b9:77:71:2a:fa:35:f3:be:48:5e:a5:
38:3f:fc:f6:5a:f1:49:47:78:4a:4c:2a:df:de:e1:
3c:6f:60:8a:ba:ee:67:64:bb:1d:08:66:49:f3:d3:
0f:cd:fe:d1:b6:97:05:72:c7:60:bc:10:ec:df:72:
6a:e4:a5:2a:92:c6:27:29:f6:45:b2:ee:0f:09:6d:
60:4c:3d:8b:8d:d6:0f:24:55:44:f1:66:4b:89:fe:
e3:33:66:b8:f0:6a:ec:1e:26:3a:9b:be:3b:08:54:
dc:b9:ed:4d:37:17:86:d0:13:2d:95:2e:0c:d5:19:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:D8:41:0F:92:95:54:4C:78:8D:5E:9D:E3:E3:4E:BC:B6:D3:62
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8f:5d:89:f6:70:e1:7c:23:36:e6:60:ad:6d:22:dd:5a:8d:
17:78:b6:a5:c8:73:04:d0:8b:03:0c:ed:5a:21:19:dd:c5:5b:
72:c5:b5:f9:80:ba:22:f0:fb:61:ad:f6:30:c0:80:92:69:61:
45:51:c6:1a:8f:d5:eb:5e:07:5d:98:29:f8:2e:28:d7:0a:2c:
31:01:f8:e7:d0:92:b0:75:eb:07:10:c0:11:64:69:c7:ec:3b:
a4:88:99:95:57:70:03:58:8a:47:e9:c3:d5:65:a1:b3:ed:08:
e2:9d:0c:55:2e:1a:45:17:e4:ac:15:28:fe:43:50:fe:18:85:
4d:7c:64:4d:9f:25:f6:02:23:85:45:8e:c5:d4:f6:1c:97:a4:
a4:ef:35:eb:5e:dc:47:29:69:20:fb:2f:05:74:16:b5:76:33:
d8:65:ac:5d:a6:98:c2:f4:7b:02:27:45:94:02:55:2f:84:e6:
d3:98:a3:37:6b:65:dd:3f:ec:f1:a2:8b:09:f1:cb:a4:c1:ad:
aa:bd:3f:14:56:1d:29:1a:08:10:7c:cc:8d:e6:e9:d0:09:fd:
67:4c:0a:b4:8e:78:cd:35:4f:27:68:39:cd:3b:47:d6:10:9d:
55:21:1a:7c:14:b5:74:28:c4:9f:7e:18:ca:03:c0:e7:f4:ff:
8c:ba:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:13:12 2025 by rpki-client