Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: RaaJkn62CvLIvvQIYW4FV1c2J2amnyoppGIyyz6KGAs=
Subject key identifier: 8C:30:C2:D1:A9:F4:C5:8C:4D:75:E5:5A:86:8B:F6:F3:7C:75:78:1D
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 01958EBD3489A444FBB81FAB94310F207D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 09:01:59 +0000
Manifest this update: Thu 13 Mar 2025 09:01:59 +0000
Manifest next update: Fri 14 Mar 2025 09:01:59 +0000
Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: nYzDim6sO8eXowlI7BQlstlxM4cOf/bk1m3kg7Q6OdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:34:89:a4:44:fb:b8:1f:ab:94:31:0f:20:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Mar 13 09:01:59 2025 GMT
Not After : Mar 14 09:01:59 2025 GMT
Subject: CN=8c30c2d1a9f4c58c4d75e55a868bf6f37c75781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:60:9b:63:24:8a:2d:33:92:53:ef:af:53:
0b:0a:29:cb:f8:bd:99:18:43:96:ab:85:b9:ba:d7:
f1:c4:87:22:6c:5c:b3:3e:70:ce:6a:fb:27:15:8c:
46:16:56:98:49:95:d2:7f:3a:8c:4f:11:4b:da:77:
48:4a:15:70:66:b6:50:b1:24:21:fa:69:d8:5a:1b:
7d:77:99:e6:dc:46:46:ee:2a:f6:9c:47:bb:b4:d2:
19:55:49:a6:6b:06:af:c2:51:5a:35:c1:f1:36:31:
49:8e:f3:82:4f:7e:21:59:04:10:ee:a3:db:26:55:
e4:61:63:95:15:76:ce:81:34:78:43:7f:ec:a5:76:
0e:fa:ee:17:16:81:83:cc:a4:0f:a6:c8:73:86:29:
30:8b:d7:c1:34:68:5d:96:c1:a7:fd:24:9e:44:5c:
c1:cd:04:05:c2:da:5a:06:05:95:c7:f7:26:2c:5c:
31:eb:40:76:fe:e3:d2:7b:3a:d6:8c:2b:5b:79:ee:
5b:b6:d0:e3:38:8f:2e:25:30:41:d1:e3:e8:7d:14:
78:2c:44:bb:ad:23:12:1e:62:02:be:53:28:71:5a:
e7:e4:fe:4d:ca:b3:8c:cb:9b:93:0d:36:60:09:c1:
cc:56:66:51:10:b9:8e:28:85:39:a4:c8:1b:52:d9:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:C2:D1:A9:F4:C5:8C:4D:75:E5:5A:86:8B:F6:F3:7C:75:78:1D
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fd:43:b5:cd:50:c0:05:8b:cc:02:79:4f:92:f7:f4:81:c4:
8e:4c:0b:a9:70:7a:89:44:3c:6f:5d:57:00:b4:ec:a5:91:d5:
3d:63:4b:52:05:92:1c:f9:b1:62:f3:ad:81:fd:21:2f:69:23:
1f:ac:e8:80:90:32:31:7a:8c:0c:57:2b:43:5d:4f:08:e8:a6:
f5:a3:1e:34:33:27:d9:a1:23:33:3a:b9:17:48:66:b6:56:16:
6f:ea:b1:90:28:52:0b:ee:0d:e9:02:0c:a7:6e:36:e4:b9:be:
be:58:01:47:ff:c4:25:d2:1a:f3:89:20:7b:3b:a9:5a:ce:78:
63:47:09:9d:ff:1e:1e:8f:4d:9f:b1:27:73:c9:04:fa:5a:28:
8d:08:b2:fc:45:5a:c2:fc:bb:65:ee:9d:26:de:b4:d9:47:3e:
13:9a:28:61:eb:4a:cc:87:bb:de:e5:9b:ae:47:fe:24:64:7d:
be:99:6e:6e:18:39:08:78:7e:e8:5d:2b:8e:88:a7:8b:5f:ad:
1c:9b:9b:bf:dc:25:a9:a6:70:b4:ab:2f:a4:f4:44:46:4c:e8:
93:56:72:4f:79:5e:5c:38:f9:f4:42:ca:43:d1:f9:b9:cb:f0:
90:36:a7:88:b4:00:a8:ed:75:cb:3e:f6:57:c7:c6:ea:20:72:
5b:22:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:40 2025 by rpki-client