Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: Fk/p0XdATeLzyLlwi4985RV0MKI7/NC2sUjkOZwXYeM=
Subject key identifier: 5A:2B:2E:89:87:46:69:5A:CD:5C:36:FE:09:79:8A:DB:96:12:22:73
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019609B01C9B73EF09B012567CAB9988A6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 14D6
Signing time: Sun 06 Apr 2025 06:00:58 +0000
Manifest this update: Sun 06 Apr 2025 06:00:58 +0000
Manifest next update: Mon 07 Apr 2025 06:00:58 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: ERqzzLaSFks21ruABkjgxBv/HhlK+DsULwDDyvfKVtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:b0:1c:9b:73:ef:09:b0:12:56:7c:ab:99:88:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Apr 6 06:00:58 2025 GMT
Not After : Apr 7 06:00:58 2025 GMT
Subject: CN=5a2b2e898746695acd5c36fe09798adb96122273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:4d:11:48:31:d3:8b:74:2d:d1:c1:8b:1b:
49:71:50:b4:cd:17:0c:cb:94:7c:b0:85:ff:fa:ed:
c0:2e:1d:1d:fb:a9:3b:00:12:1e:0b:5e:2a:ea:2a:
b8:ce:b6:06:27:0a:6b:0f:87:cb:48:a9:c3:3e:9b:
9d:54:fa:26:1c:f9:e6:d3:55:a4:92:08:e7:28:cf:
13:26:a3:da:6e:dd:0e:63:fc:7c:23:d4:3f:d4:c4:
e3:45:f4:0e:84:eb:2f:39:c4:54:70:66:ab:04:f7:
f3:0f:6e:41:85:d9:ba:62:48:b8:24:53:7a:b7:e3:
5e:40:01:b3:d0:ee:19:c8:b9:79:36:c6:e1:75:ff:
67:9b:9d:06:fe:06:55:5b:c3:f3:77:ba:b5:b2:8b:
f1:24:4c:28:f0:c0:3f:3a:27:58:0b:34:e1:11:3d:
02:78:1f:83:9c:92:fc:95:08:31:9f:c4:12:c9:3e:
26:59:86:4d:c6:e6:93:af:8a:27:3e:67:a0:0e:98:
c6:77:d4:71:1b:83:54:1c:4c:02:e6:5e:2b:f1:55:
b8:86:b0:cc:1e:58:93:ee:95:dc:19:ec:5d:cd:6d:
24:62:cf:ef:03:32:19:3a:ff:af:70:ac:43:de:6a:
fb:ff:db:01:be:26:80:8e:bb:78:63:e5:ef:fc:9d:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:2E:89:87:46:69:5A:CD:5C:36:FE:09:79:8A:DB:96:12:22:73
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0e:f2:f0:44:7d:77:17:d6:52:6d:9e:6e:34:c1:b6:d7:cc:
e7:f6:a9:de:0e:22:ab:0a:89:3e:19:7d:8b:f0:1a:62:0b:32:
14:f4:12:b6:22:ef:7e:1b:86:cb:c5:ee:0f:a5:66:e0:77:a5:
87:25:62:35:77:18:14:4b:37:cd:10:bb:29:37:51:56:a4:c1:
35:da:a4:17:2d:a6:6f:2a:55:e0:5c:de:cd:f6:2b:34:6f:dd:
13:ca:4d:c9:1d:a9:5e:9d:59:1d:4f:95:40:a2:9e:8e:ba:a8:
2f:3b:b3:ac:77:77:79:fa:7f:32:ae:75:2e:c2:4a:87:dc:a3:
05:9a:ad:ea:0b:e9:28:dc:0f:55:1b:ec:00:68:93:d4:f7:25:
d8:44:3e:6a:d5:c6:17:73:55:35:31:8a:91:0a:d4:f6:61:7b:
4e:eb:f0:db:8f:cd:36:7e:6f:5c:db:49:a3:0d:63:37:c7:36:
dd:81:02:56:62:35:7a:5a:c3:3f:9b:2f:0e:2d:22:79:e8:76:
fc:f0:4f:87:56:d1:cf:3c:06:95:a5:46:ba:29:19:35:75:2a:
7c:76:11:10:7d:2e:b0:8f:9b:65:d5:19:2b:41:36:30:b6:11:
f8:61:bf:8e:48:03:4b:b3:77:32:ec:86:f3:41:8e:97:9b:2b:
73:7a:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:57 2025 by rpki-client