Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: xTI8LlP+FHEWkyBhlkOH2sMsabANeeyy7bIG4svHvwA=
Subject key identifier: B0:59:43:EB:17:0D:7B:43:0D:F8:9A:9D:68:BF:41:CE:CA:B0:EC:D3
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 0196108E2A0F355F05AE86F7E2B4B1D049F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 14:01:14 +0000
Manifest this update: Mon 07 Apr 2025 14:01:14 +0000
Manifest next update: Tue 08 Apr 2025 14:01:14 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: nLvCMRwjMn+5R/0auTIe2L96MskWDNMkCYR16ZsZNtI=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:2a:0f:35:5f:05:ae:86:f7:e2:b4:b1:d0:49:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Apr 7 14:01:14 2025 GMT
Not After : Apr 8 14:01:14 2025 GMT
Subject: CN=b05943eb170d7b430df89a9d68bf41cecab0ecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:5f:3d:55:fc:3c:80:b0:61:44:12:d7:4f:
b2:2d:fa:53:bb:be:da:8c:d4:57:d4:e0:9b:19:8b:
f9:cf:5b:91:ce:88:2f:9c:aa:83:9f:8b:15:bc:ad:
12:2e:c9:93:d4:3f:2a:79:11:6f:4f:3a:9f:04:ba:
ab:bb:35:6a:cb:78:4d:c0:d3:65:55:a9:8a:c0:17:
7d:c8:c6:69:d2:78:f6:06:52:33:db:a0:f9:83:e1:
7d:f6:d8:57:63:e9:d5:06:d9:18:94:42:7a:8d:60:
fb:48:1c:a5:9a:d5:96:2c:32:de:aa:68:88:c2:00:
62:2c:11:0e:f7:cf:fb:a4:d2:fa:3e:3b:2b:37:9e:
9a:b3:56:04:8e:72:bb:0a:a7:06:a4:25:6e:e7:1b:
dd:83:bb:7a:49:36:90:e6:b8:9f:15:59:b5:90:c2:
49:5b:c3:86:93:8b:92:a2:0a:ed:3e:35:23:9d:4f:
c7:cd:e5:f3:be:a0:e1:9f:13:6c:25:93:63:1a:08:
e9:b2:8c:43:61:89:73:33:be:85:e8:c4:4b:fe:86:
c3:60:25:3d:f8:fb:8c:37:88:56:0d:e6:97:b8:87:
df:8e:ea:93:e5:98:fd:98:f4:a1:c3:f5:93:af:12:
4f:8b:7d:cc:7b:37:4f:d9:81:f7:7d:7c:c0:b8:f1:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:43:EB:17:0D:7B:43:0D:F8:9A:9D:68:BF:41:CE:CA:B0:EC:D3
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:34:28:26:89:80:4a:1e:d5:09:39:d6:27:e9:1d:24:f0:
2e:34:0c:cf:49:c7:1e:13:78:21:dd:0b:45:4e:27:5d:fe:a4:
44:67:78:e2:3e:35:94:b6:0c:53:57:9c:eb:7a:34:d5:16:15:
17:73:8f:17:81:3a:d5:0a:27:fa:ff:53:38:58:b2:fa:c5:f2:
81:88:25:6b:b8:6f:ec:35:d6:54:88:f4:de:23:d0:1e:db:6d:
03:1a:9a:ea:91:2a:27:66:15:87:2b:45:51:16:24:92:7d:ad:
0c:86:b5:84:56:90:61:80:b2:85:1a:bb:22:0e:e7:c6:40:9c:
73:1c:95:fe:86:73:bf:70:39:a7:d8:6e:dd:4d:88:43:9d:1d:
bd:05:12:53:62:67:55:d8:1a:bf:5c:f1:14:1b:8f:88:81:c4:
d4:e2:4b:5c:0c:6a:4b:b6:ba:ed:4b:43:e7:e3:92:a3:a8:ac:
4d:34:9c:5b:5b:00:16:a3:23:2e:19:2f:eb:a8:28:8d:78:f4:
0a:f2:43:a6:94:a5:f0:76:df:c7:27:1a:62:1a:0d:1e:89:60:
f2:2e:07:4e:4e:0b:5b:49:be:18:f1:cd:24:fa:41:f4:90:eb:
4b:50:1a:3a:e5:2b:27:f8:44:a0:f9:75:58:ce:6a:46:fe:fa:
3c:4f:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:09 2025 by rpki-client