Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: X6219QzHKPPbWIfOepDH0XfQOoNTkpwt7qqYmsOanZc=
Subject key identifier: 71:1F:96:2C:7D:24:7D:4C:F3:48:83:94:2B:4B:F1:C6:04:3E:76:57
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 019651FFA2F775E9C607976545081C25CE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 14E5
Signing time: Sun 20 Apr 2025 07:00:29 +0000
Manifest this update: Sun 20 Apr 2025 07:00:29 +0000
Manifest next update: Mon 21 Apr 2025 07:00:29 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: J6sxkqFqIa9kC3Xdnrc2tiuetRod/6weCNuvxaoy4Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:a2:f7:75:e9:c6:07:97:65:45:08:1c:25:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Apr 20 07:00:29 2025 GMT
Not After : Apr 21 07:00:29 2025 GMT
Subject: CN=711f962c7d247d4cf34883942b4bf1c6043e7657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:35:ca:a5:f4:05:fc:45:9b:40:83:b3:74:
24:3d:a7:bb:ae:75:91:b7:24:eb:dc:1a:36:fb:5c:
6f:1d:05:b5:1e:60:0a:6e:2c:8b:28:cd:3e:90:ab:
79:3f:14:50:47:8a:bd:87:bb:64:21:60:c4:04:3c:
4b:d3:03:ab:5b:89:69:87:98:20:95:a2:4b:a8:21:
ab:9f:8a:f9:79:28:f6:48:b7:ee:b6:4b:a4:51:40:
68:ac:91:f8:92:7f:f7:e0:3e:f9:3b:6d:df:82:2e:
4f:74:5c:03:be:ca:b5:2f:52:86:a3:9e:0e:2b:e3:
13:e5:66:39:13:09:70:03:36:01:da:1a:f2:e7:20:
59:3e:ab:e3:36:58:c5:ec:15:3f:c2:10:8d:19:e9:
f0:e2:22:b3:4f:4d:c1:72:44:6b:18:5f:c4:81:d8:
2c:3d:fe:22:f0:c8:b8:ea:be:da:93:14:5d:30:5a:
e6:ea:47:6e:8d:2f:70:bb:35:10:0d:b2:b4:8d:fe:
ae:62:1d:96:d8:4a:63:5c:9f:8f:c5:22:5b:7d:59:
91:55:78:98:2b:ba:ee:20:d7:ab:19:d8:69:02:de:
fc:39:7b:c9:70:e9:64:8f:1f:6b:3a:49:b2:98:3c:
17:2c:52:cb:2e:39:fa:20:5b:05:b9:0c:f9:41:19:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:96:2C:7D:24:7D:4C:F3:48:83:94:2B:4B:F1:C6:04:3E:76:57
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:57:28:c8:04:da:dd:59:86:0b:ab:20:03:11:57:07:f7:
44:b3:38:14:b3:73:e6:a5:30:67:03:5e:f0:31:26:91:8d:ba:
f5:a9:02:60:12:bc:d2:8a:17:f4:24:15:d7:3d:4d:49:ed:9b:
39:1c:31:f0:0f:b4:91:e4:50:76:b5:65:bb:90:df:22:d6:1a:
9a:60:1e:90:52:20:e7:68:00:ba:2a:cb:31:66:e1:05:86:8d:
1d:2e:cf:89:c5:0a:59:07:c1:56:a9:e8:2c:4a:1c:74:f4:fd:
6c:91:7d:fe:0b:5c:39:11:01:a6:41:e5:d3:36:95:c1:37:48:
33:75:d2:6c:ea:07:79:09:37:58:47:6d:ee:77:50:9a:e5:60:
24:e8:66:ce:15:01:c3:af:c8:01:57:b7:b3:95:96:b1:60:fd:
23:48:1f:56:b4:ec:5e:e9:18:32:9f:95:d6:79:78:e6:51:35:
02:3d:02:70:d0:16:63:75:ba:5d:d8:01:6d:89:ce:5b:96:25:
72:51:a7:70:2c:73:74:05:be:65:ae:53:e0:4d:75:a1:50:31:
42:c2:ac:80:0f:5f:ba:18:fc:b9:11:f0:14:16:48:15:ae:80:
19:f9:67:55:cd:02:2c:85:0c:d3:96:7c:e0:f8:b4:6b:4a:ce:
07:33:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:31 2025 by rpki-client