Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: RIkIJzPWP4pOQXi6zsDqCnqMwfMkult9Gx+FBGaBe0g=
Subject key identifier: D3:D7:CB:E5:2F:02:7D:9C:45:9B:04:42:F3:1E:E5:A0:3C:1B:B6:31
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01965500DCC55794BFC3FE603C157BF7D54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0333
Signing time: Sun 20 Apr 2025 21:00:41 +0000
Manifest this update: Sun 20 Apr 2025 21:00:41 +0000
Manifest next update: Mon 21 Apr 2025 21:00:41 +0000
Files and hashes: 1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: u5G1QKnCWm3xIdCevAp7sEq7ncuKd3S34VVxwmxiaes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:dc:c5:57:94:bf:c3:fe:60:3c:15:7b:f7:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Apr 20 21:00:41 2025 GMT
Not After : Apr 21 21:00:41 2025 GMT
Subject: CN=d3d7cbe52f027d9c459b0442f31ee5a03c1bb631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:63:1e:75:3b:ec:7b:26:5c:18:f2:fd:95:
22:bb:25:72:c6:d9:1c:54:5d:cc:ff:42:b0:63:9b:
de:c8:24:22:ed:87:4c:ab:f3:05:df:25:78:f6:91:
a4:de:3e:2f:67:01:fd:59:86:7d:5b:fa:e1:e5:95:
39:db:28:3f:91:d4:2b:b3:02:4b:20:de:f7:82:8a:
54:8b:71:7b:95:bd:db:de:81:5a:1a:ed:a2:88:78:
8b:fd:e1:cc:48:8c:5b:11:de:4b:10:f1:60:e3:cc:
fb:72:c3:9f:a4:96:4d:99:dd:14:db:61:e5:ee:05:
eb:1f:ef:cb:ba:76:fe:0e:04:04:dd:fa:dd:a5:8e:
e7:a1:8c:d6:e4:01:a1:a8:95:22:e9:23:ec:15:de:
55:19:a0:a8:77:2b:d6:93:fc:37:4f:a7:0b:a6:30:
7d:2d:57:a5:e2:12:71:30:81:ae:f9:2e:fc:04:f1:
fc:b7:68:fb:c3:38:21:3c:24:c5:bf:e9:0f:8b:b6:
7e:82:f7:5b:bf:8b:83:cc:56:69:5b:a0:b7:b7:d0:
a6:f3:81:1e:12:86:72:50:ca:dd:ac:96:6e:a4:d9:
70:a8:fd:14:73:01:41:cd:88:01:85:2d:9d:d7:0a:
7d:b7:75:d4:6f:da:ba:1f:46:b1:41:15:1c:ff:77:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:CB:E5:2F:02:7D:9C:45:9B:04:42:F3:1E:E5:A0:3C:1B:B6:31
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:32:dc:2a:38:59:90:0a:59:fc:cd:4f:f5:82:f1:ff:ce:7e:
b5:e1:d6:4d:2e:78:0c:a3:28:81:e7:53:34:c1:22:bd:83:7a:
b4:a7:39:0e:9d:7a:39:a4:53:0e:06:a3:39:36:e8:8d:e6:e1:
9b:22:5f:93:df:1a:16:29:46:a4:84:7e:09:10:7f:be:eb:93:
22:a7:ce:24:00:3b:94:26:20:c8:80:42:c4:08:af:b0:60:4d:
cd:f5:60:54:c4:6f:18:26:4f:11:f5:c8:7c:d1:94:f7:78:e2:
1c:21:12:74:d8:7a:d1:ef:15:42:da:8b:de:51:34:3b:39:17:
81:25:6e:f0:09:66:28:9b:bc:bb:79:b0:e5:14:74:50:72:08:
e3:a4:33:48:17:5d:49:46:2c:48:a7:69:07:f9:ba:ab:1d:cc:
c1:54:f4:ea:17:dc:d3:b3:4a:63:8e:80:6e:eb:3b:9d:12:9a:
41:ad:95:1a:58:0d:db:50:82:a2:85:4c:01:14:69:c8:c1:6f:
f4:df:98:3b:b1:23:dd:be:b2:6e:11:50:fe:0b:4f:57:60:9b:
48:35:cf:5e:96:2b:c4:cc:95:6e:c5:50:9a:1e:a7:16:23:04:
05:d9:94:d2:40:ef:16:ff:b8:2a:15:88:36:d9:aa:f6:d0:a4:
f6:43:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:23 2025 by rpki-client