Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: 0wN4szbc72LPj127oVfaa49D/xNfzkHnFRRj/pU+ILc=
Subject key identifier: E7:01:53:69:E3:D2:8D:87:E4:33:86:DA:32:D7:48:F7:9C:38:6B:85
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01964F6CA590688D0FF6E8A1CC380DA7409E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 19:00:42 +0000
Manifest this update: Sat 19 Apr 2025 19:00:42 +0000
Manifest next update: Sun 20 Apr 2025 19:00:42 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: MxuLFnKOVNJSHHrZByJ2RgW3lgdCsHzpU9phf6ZJB5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:a5:90:68:8d:0f:f6:e8:a1:cc:38:0d:a7:40:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Apr 19 19:00:42 2025 GMT
Not After : Apr 20 19:00:42 2025 GMT
Subject: CN=e7015369e3d28d87e43386da32d748f79c386b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:ea:81:e2:80:5c:34:33:8d:98:b3:51:f5:
42:6e:59:36:da:23:19:dd:81:3e:90:d5:22:a7:1a:
90:9c:a0:f4:38:ab:99:a7:1d:42:a4:72:a9:29:55:
4f:c0:11:5b:c5:6d:f5:25:ce:04:c6:25:ae:5b:39:
3b:80:b2:75:8e:8d:64:5c:fa:a4:72:96:82:6c:ae:
08:43:50:fe:5e:a6:39:e6:c5:f4:ff:5f:c9:bc:ee:
bd:c1:06:2a:0a:5d:4c:73:fc:0c:a1:14:fa:e3:e0:
3b:5e:98:7c:4c:60:66:d1:30:bf:b5:97:7d:33:c2:
2f:b7:17:07:d6:34:4c:8d:89:5b:34:83:a7:f7:46:
2f:07:84:48:f5:19:d5:33:c7:9c:72:36:0c:59:6c:
c6:3c:e0:56:74:5c:6e:45:2c:be:59:b4:12:a8:66:
54:bb:ac:f8:a8:ff:1c:32:ef:31:81:39:1f:d8:01:
f7:36:16:e7:00:7a:d1:bc:0b:67:47:74:ce:aa:75:
eb:23:8a:3e:53:88:81:b6:30:76:98:d9:72:be:e7:
db:43:c2:db:43:e6:25:0a:70:fb:b2:fc:00:f0:ba:
12:cf:ae:7c:b4:ec:c1:0f:65:0c:b8:a8:d7:a6:f0:
ec:e8:2c:08:c1:0c:d5:a2:ef:e9:bc:c0:f9:67:d4:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:53:69:E3:D2:8D:87:E4:33:86:DA:32:D7:48:F7:9C:38:6B:85
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:7a:29:c1:b1:8d:2d:48:c4:a3:b3:30:33:b1:55:cd:ae:
a5:1e:e9:1d:28:6c:25:00:65:7b:51:c8:89:25:03:68:34:a8:
cc:99:f1:68:d4:24:68:73:33:5e:94:f3:85:e8:ea:e9:e1:6d:
ce:69:8b:a8:4f:38:91:68:de:17:e6:54:94:49:b0:31:f4:05:
6c:b8:14:d5:c4:e9:64:bc:fd:19:5d:51:e5:8f:e6:bd:5b:15:
11:b0:ce:8a:e6:dd:2a:6a:b2:42:f6:f3:be:cb:92:21:13:68:
22:79:43:e4:d8:b9:14:d2:1b:67:75:df:3b:e8:76:14:ba:c2:
4d:2f:8f:58:11:39:f0:8c:23:93:44:55:15:76:97:d3:d1:af:
a2:a4:7c:07:68:76:32:d6:95:63:94:22:07:5a:b6:a0:15:d6:
2f:9e:fe:ea:c6:2a:bb:12:2c:9e:34:64:25:d3:2d:73:4e:36:
52:fa:99:7f:5e:59:29:71:f5:0e:1c:8d:6c:e9:2a:f9:aa:4e:
b8:d4:25:c2:4a:fc:4a:fb:7f:29:c5:e2:9c:a7:c2:b0:0d:30:
78:90:c4:8d:67:75:e0:f8:7b:58:30:bd:b6:b1:37:c6:46:38:
33:3e:31:e9:a4:ce:76:66:e0:4e:6e:58:78:10:85:49:2d:41:
f0:e5:d6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:31:09 2025 by rpki-client