Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: MRocH9me7BQtLR+VvLS5TeYK8hdcCEldT29ULW8apAk=
Subject key identifier: 99:9D:7E:1D:07:55:C2:76:56:B5:6C:DA:25:98:07:BD:09:5F:9B:F5
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 01964B222F22A161D2201A2929578B437ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 23:00:53 +0000
Manifest this update: Fri 18 Apr 2025 23:00:53 +0000
Manifest next update: Sat 19 Apr 2025 23:00:53 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: pv+K+dx6C7wFuwU3Icz3V6bPgpH4OcZfxTDyL7+H+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:2f:22:a1:61:d2:20:1a:29:29:57:8b:43:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Apr 18 23:00:53 2025 GMT
Not After : Apr 19 23:00:53 2025 GMT
Subject: CN=999d7e1d0755c27656b56cda259807bd095f9bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:c3:8d:6e:84:c9:93:a5:0c:9b:e3:55:a9:
17:1b:a8:4c:de:ea:43:77:ab:77:e8:b3:a0:f8:2e:
8f:0f:87:36:4e:58:55:f7:35:b2:7b:b6:30:d3:47:
68:91:93:08:5f:53:8c:4f:12:e5:47:16:60:68:7a:
33:2e:20:4b:3c:6e:da:44:37:a4:db:b1:64:26:3e:
f8:ca:9d:2b:14:fb:15:48:83:79:28:fb:73:91:91:
82:e2:0b:77:1a:f5:42:31:37:9a:1e:c6:9f:97:f7:
ba:85:c4:f2:ad:cb:aa:2a:a8:93:82:fb:3e:d2:8a:
0b:ff:bf:f3:08:0a:30:7e:cd:87:9c:8b:1e:89:0c:
7f:ae:c7:91:6a:79:14:ac:63:87:5c:85:4a:a9:7b:
94:10:09:a2:3f:8d:46:cd:77:90:52:e9:2e:85:a1:
01:a8:18:c0:48:86:81:9a:8b:dc:c9:76:03:cc:c9:
68:d5:fc:4c:29:bb:7d:ed:ac:64:69:ce:99:80:ad:
14:49:7a:05:84:b8:77:c1:a6:ea:d9:65:d0:70:26:
80:d9:a4:16:8d:8c:ad:8b:88:db:f6:c3:b5:b0:f6:
44:37:4c:04:05:5c:be:75:9e:d7:6d:cc:98:ed:1b:
23:3f:fe:f8:67:48:85:6c:aa:7a:6f:21:44:60:5d:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:7E:1D:07:55:C2:76:56:B5:6C:DA:25:98:07:BD:09:5F:9B:F5
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e4:87:6a:46:57:a7:db:0e:b5:a8:1b:5b:11:90:05:94:c8:
ac:81:a9:73:44:2d:26:f4:23:e8:62:7f:aa:d5:2c:c6:1e:5a:
14:3b:eb:20:a5:d9:53:8e:0d:1c:f7:8f:f9:53:ff:94:93:bd:
89:b0:fb:bd:59:e6:95:66:30:f5:17:af:e6:e1:4f:c3:a0:b0:
2a:67:a2:96:b2:8f:4b:a9:db:f8:a4:05:e0:93:10:6f:d0:7b:
28:83:56:d0:cc:a0:ef:99:0e:62:73:63:ad:d3:3a:af:4f:88:
65:09:47:76:d8:23:ae:54:96:a1:2a:a6:9d:d7:96:43:fd:d2:
17:ba:e3:b4:56:1a:91:58:8b:d5:22:b5:6a:13:c8:d6:20:8c:
dc:d0:fd:55:ff:d8:d3:1d:95:e5:88:5d:84:48:a7:10:5d:12:
cf:05:f2:94:cb:a3:1b:1a:d7:56:df:3f:a1:6b:a8:9f:37:a1:
e8:f3:47:71:40:14:5a:aa:9d:5f:90:ab:1f:2c:b8:95:28:3c:
66:dd:54:75:90:e3:30:cd:99:27:eb:af:51:0d:7b:ea:24:24:
f0:fe:dc:6e:c4:e6:ef:ad:48:a7:2f:6b:ed:6a:fd:0d:8b:c3:
69:16:c8:d8:4b:07:ad:a1:e1:c8:f2:7f:ce:f1:44:e8:bf:3e:
8e:47:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:38 2025 by rpki-client