Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: tvoIeD05llxlJm6Pu15YTNpC4kmHBg0yB5Y//N7D538=
Subject key identifier: 3E:70:4A:84:9B:AC:5C:8D:B1:6A:3B:DD:50:30:F6:FB:F2:73:49:71
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0196556E57FE47119491E4A3C934944FB62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0DEB
Signing time: Sun 20 Apr 2025 23:00:16 +0000
Manifest this update: Sun 20 Apr 2025 23:00:16 +0000
Manifest next update: Mon 21 Apr 2025 23:00:16 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: WH5QQjUgG4dcUZmIQzDA/VlW081UQSlD0/l+iuqWcWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:57:fe:47:11:94:91:e4:a3:c9:34:94:4f:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Apr 20 23:00:16 2025 GMT
Not After : Apr 21 23:00:16 2025 GMT
Subject: CN=3e704a849bac5c8db16a3bdd5030f6fbf2734971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:49:81:c3:5b:c2:94:8e:51:a4:1f:2d:00:
0f:bd:75:83:28:ba:17:0f:64:57:75:ee:b3:38:5a:
ff:35:3f:46:bb:fe:b0:c8:59:93:bd:53:28:be:87:
9b:c7:03:87:c2:86:51:73:92:28:5b:01:f7:3a:78:
87:02:86:23:e7:9b:71:0e:32:e2:1e:f3:c8:05:27:
04:26:2b:24:1c:ee:9c:cb:c1:50:3a:1c:18:1a:82:
61:95:73:3f:b0:05:7c:88:a1:3e:6e:20:2d:35:1d:
62:e0:52:2e:22:e5:5a:16:c2:14:8d:99:6d:df:2c:
80:a9:12:19:42:8f:73:aa:ef:ef:91:ae:ad:7a:c6:
04:b9:b2:1a:ef:cc:4f:37:d9:05:cd:13:ce:f1:bd:
9a:b8:d7:28:3f:0a:32:3f:03:f7:fe:1f:62:52:34:
b0:9f:58:18:38:cf:05:85:05:8c:e3:52:bf:e1:52:
c9:7c:ad:63:a3:ce:23:62:5f:23:d6:c3:94:a8:9a:
94:ae:40:75:e5:9a:55:20:c1:84:66:76:80:65:ec:
c6:63:d5:98:5e:d2:a7:2d:76:b2:55:30:30:6a:03:
f6:67:a6:98:d7:02:ed:e7:c5:39:1b:53:c8:07:c0:
5e:1f:18:d7:76:a6:fc:12:03:7a:1a:e1:92:47:b3:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:4A:84:9B:AC:5C:8D:B1:6A:3B:DD:50:30:F6:FB:F2:73:49:71
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:0f:15:ec:ce:ad:e8:17:d5:d9:6b:cd:1e:0a:4c:04:fc:
bd:a6:53:38:8f:e2:6e:80:4f:4d:c8:14:00:79:96:c8:45:17:
0e:a5:e1:ad:79:98:17:5e:9d:20:92:44:53:b9:22:b3:87:9c:
bf:95:bd:ec:db:14:fc:d3:9d:b9:13:6e:3a:4a:87:4c:a5:6a:
fc:b2:10:b1:02:1c:0e:16:a9:e1:26:3e:3a:3a:81:09:a9:65:
6a:34:59:fc:4d:71:15:73:1e:43:19:f1:91:9e:0c:5c:25:8e:
b0:44:4e:fb:31:86:a3:8c:5a:62:f0:88:41:cf:13:b6:61:35:
70:28:80:35:a1:fe:22:4f:98:64:3f:87:b4:12:0a:d6:9f:2a:
11:39:62:f1:00:cf:05:a6:87:1d:28:75:2e:bb:32:75:e9:c7:
6f:b6:a2:1c:ab:29:95:79:c8:2d:ea:a5:90:28:bb:b1:05:42:
fd:eb:61:da:30:35:3b:91:0a:b7:a8:5b:66:a3:e6:f1:3d:f5:
41:f9:75:a7:33:f0:bf:6a:d0:3b:38:ab:6d:9d:3d:de:a4:39:
d0:ea:f5:b8:c4:f2:18:67:82:7d:7b:35:1e:72:c6:55:89:46:
7a:51:03:01:4e:2a:d8:a6:8e:ba:ac:1c:b6:ef:76:3d:52:67:
3c:e8:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:48 2025 by rpki-client