Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: Cn+iZ1IAWLrAfPz8MiMOqJCBFKyYK97OD1+NOQd9T6U=
Subject key identifier: 14:8E:40:A1:15:93:C1:C4:2D:FE:0D:B3:1E:B9:E9:B3:16:77:6A:6B
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 01963C1D9737F32FA0F2838A565522C30BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 1101
Signing time: Wed 16 Apr 2025 01:01:34 +0000
Manifest this update: Wed 16 Apr 2025 01:01:34 +0000
Manifest next update: Thu 17 Apr 2025 01:01:34 +0000
Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: OBpfo3h+6J+yuBNkHiiWg4c+TT0IU9scGLYH0LUMETM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:97:37:f3:2f:a0:f2:83:8a:56:55:22:c3:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Apr 16 01:01:34 2025 GMT
Not After : Apr 17 01:01:34 2025 GMT
Subject: CN=148e40a11593c1c42dfe0db31eb9e9b316776a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:dd:33:c1:9c:a4:11:76:e9:4f:c9:c9:46:
34:7b:56:07:3b:df:33:5a:56:af:ac:cb:4b:2e:75:
46:bf:8c:c5:07:fa:92:30:56:20:5c:74:d1:cc:7d:
e7:29:4e:99:ed:55:bc:23:38:44:26:af:89:2a:21:
45:a7:32:3a:b9:92:5f:45:ef:1a:d9:da:ae:fb:0a:
f9:38:7d:92:27:fc:e1:85:8f:68:1c:2d:a1:04:5e:
67:4d:fc:ce:2a:c2:47:d7:92:91:9e:41:34:74:d8:
c3:57:6d:76:cf:1c:2e:6f:e5:23:e4:20:c4:34:fb:
dd:a9:00:4b:a1:c4:24:b0:f7:46:7e:b9:e0:06:18:
ce:43:43:61:fd:8a:0b:6f:35:67:bb:c7:b2:f8:73:
59:9f:af:2e:f0:47:21:ea:ad:28:3b:b4:25:df:e6:
d2:a9:43:c9:69:bc:32:a4:e3:90:7b:20:2a:60:57:
10:34:88:2e:a3:94:c8:e0:92:ac:02:8f:df:a3:4b:
a4:51:3f:a3:8d:b0:22:c8:44:cd:44:fb:81:46:02:
8d:11:29:39:fa:03:c2:73:b4:dc:c0:c7:b3:40:47:
f4:3b:1a:58:8b:1a:da:7e:03:7a:0a:02:2d:f6:e4:
29:f1:b6:6c:66:1e:d6:db:93:61:b9:63:1a:2a:5d:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:40:A1:15:93:C1:C4:2D:FE:0D:B3:1E:B9:E9:B3:16:77:6A:6B
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:09:97:db:f0:8c:16:53:bd:30:1a:80:e6:49:24:93:cf:
98:db:d7:08:c4:da:ac:a3:4a:cd:28:18:1d:40:86:1e:f9:ba:
48:ba:78:94:7b:32:7e:1a:c8:34:fe:12:ed:02:72:2d:bc:ce:
e9:ed:16:5f:12:82:5e:bd:1a:45:8a:f7:bf:b7:63:36:38:a7:
42:46:cf:52:cd:fd:71:d6:b7:be:6a:4d:c8:17:34:7d:05:bf:
ed:5a:54:1d:21:0b:86:02:d3:d1:67:a0:cd:e5:4e:2f:f6:d9:
e6:12:fe:7e:04:f1:af:ea:51:de:5d:47:e9:cc:15:a4:5a:72:
7f:8b:38:99:26:ba:60:e7:da:4f:f4:15:18:92:75:46:51:db:
5d:91:57:ad:c5:66:41:75:20:58:df:6c:51:46:d2:68:85:61:
45:cd:76:d8:f6:7f:4b:c8:ff:e6:62:c9:1b:e7:6c:0e:67:83:
2a:52:ec:0e:3a:c4:0d:b4:05:6b:2a:16:2a:94:5f:17:c1:22:
d5:10:1f:10:95:6f:89:0e:c3:b8:93:cb:b6:de:19:81:9f:91:
e3:0c:40:26:f9:53:61:88:b1:a2:29:a0:3d:ec:b7:dd:eb:4e:
53:83:e0:f5:93:37:71:b7:8f:b5:8f:a7:91:73:e7:10:70:22:
02:73:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:58:39 2025 by rpki-client