Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: JQ2lCcz6d5L0B5Tjn3XWkvAJ75q8MVZGqLkuFSyFgbU=
Subject key identifier: 25:1D:F4:B1:63:54:20:B3:7B:1B:90:83:53:17:21:39:C1:AE:42:91
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 01964DB4EAC63F54D4CB2E2FCAE5E0759840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 11:00:24 +0000
Manifest this update: Sat 19 Apr 2025 11:00:24 +0000
Manifest next update: Sun 20 Apr 2025 11:00:24 +0000
Files and hashes: 1: JDEgNxAB09AUh6owQNZeZtBtGuM.roa (hash: mbF3wS/KwnnaSKoNDphyfrKVcXZhcSZyXmhtgyyil/4=)
2: h9QHPHPgriAH9IrwluwQdT3LGdE.roa (hash: Tqsnz0XXMc5csYtxxzDh5cjERR+4yLVbUs/Q+m4fJwI=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: jucjadDZKy1eQQaJ8S1y4ng5g/Hiqlzx/tJSkWAu+Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:ea:c6:3f:54:d4:cb:2e:2f:ca:e5:e0:75:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Apr 19 11:00:24 2025 GMT
Not After : Apr 20 11:00:24 2025 GMT
Subject: CN=251df4b1635420b37b1b908353172139c1ae4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:27:d1:e0:95:40:41:e8:7b:0e:27:42:98:
b3:ab:d7:93:5b:6f:17:ef:98:b1:2a:67:d0:8b:0f:
a8:6c:f3:55:c1:d3:36:e2:03:a3:42:64:a1:fd:d0:
29:8f:e8:9e:08:88:d4:08:9e:d7:18:a6:73:b8:3d:
48:2c:2b:5f:8d:61:e0:0d:9f:07:4b:f5:17:62:de:
e8:bd:72:f8:69:e0:02:b1:18:16:6f:bf:16:3b:14:
89:3d:d5:1b:49:13:3c:4b:a5:94:f5:8f:b7:6b:16:
f0:69:8f:eb:c5:19:c5:98:a6:f9:78:97:24:e7:04:
95:86:2d:e0:60:e5:af:28:70:c2:9d:50:bc:f4:68:
21:e9:c0:52:04:03:6e:b2:ae:d4:02:2d:91:e1:89:
31:95:49:8f:88:b2:7a:90:c9:82:36:43:7a:ff:a1:
82:c9:1f:c5:c0:0a:10:1b:8e:11:d2:8e:53:40:0c:
30:c5:f9:6e:df:6b:d7:17:62:c6:21:9d:08:07:d6:
51:ad:41:69:f3:c0:e0:78:5c:40:89:a6:f4:76:10:
54:89:e0:8f:ab:84:22:7c:e4:c2:11:6b:03:1e:a2:
7a:59:28:80:d3:91:cc:6e:67:56:2f:d6:0a:04:ef:
4b:18:4c:32:a8:1c:48:dc:bd:56:43:55:b3:91:12:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:F4:B1:63:54:20:B3:7B:1B:90:83:53:17:21:39:C1:AE:42:91
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:11:d3:28:ce:49:99:af:88:77:36:bb:3d:53:c5:3e:9d:
48:cb:c1:44:47:10:33:1c:ce:57:03:45:6f:33:d2:65:a0:fb:
29:da:9b:99:9c:18:44:f0:32:a6:56:5a:ea:ef:0d:ff:1b:87:
b3:ef:2c:41:5e:b6:69:85:90:82:3f:c3:de:0f:ef:39:8e:6b:
d8:48:38:5e:60:a5:3d:08:5f:6b:a6:f2:94:6e:3f:19:33:c8:
24:18:cb:3e:4f:df:87:04:4a:16:c9:de:d1:ee:ee:b9:cf:62:
3a:86:63:b8:3d:71:cc:25:b7:1f:bc:66:70:b7:3e:56:8a:5a:
ed:b2:04:ec:7f:40:7e:b8:89:95:79:e4:08:b9:6a:5b:bd:23:
a3:d5:63:26:41:f6:e8:53:27:0f:00:19:5f:f9:36:21:3a:65:
95:9d:cb:0c:a8:66:a5:a7:0a:4b:7e:f6:c1:d4:85:5f:f6:fc:
eb:53:82:8d:b2:84:22:3b:39:e5:6f:38:21:4c:0d:2e:75:98:
69:2c:49:1e:38:d1:12:c9:5e:4d:2f:a8:e6:02:e5:a3:2a:b0:
35:80:8f:0d:52:bb:aa:32:7e:a0:d5:1d:af:7b:16:3e:4b:63:
b8:7d:68:4a:01:c0:7c:d9:75:17:29:e0:13:df:6c:e5:b0:c6:
7b:42:4a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:17 2025 by rpki-client