Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: VTarA3a0HgrL1mK1p5+dWeqiWdKpv983zzCO7kzdISU=
Subject key identifier: 8F:B6:5C:C1:22:09:CD:98:12:92:85:2E:62:1C:AD:79:FD:44:87:75
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019651C8A7B1CFBF0D98A9242A072D000E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 06:00:26 +0000
Manifest this update: Sun 20 Apr 2025 06:00:26 +0000
Manifest next update: Mon 21 Apr 2025 06:00:26 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: QO6J8GgqZ8J5I7jgilSOFC4kiSKTCdR3M2cXjtwKxEQ=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:a7:b1:cf:bf:0d:98:a9:24:2a:07:2d:00:0e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Apr 20 06:00:26 2025 GMT
Not After : Apr 21 06:00:26 2025 GMT
Subject: CN=8fb65cc12209cd981292852e621cad79fd448775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:ab:e6:c7:2e:11:59:68:c9:d0:97:74:fb:
8d:b2:7a:d6:27:8c:cf:3f:89:c2:a9:ba:fd:21:04:
b5:1b:b3:0f:fb:2d:9a:82:8b:83:ab:b6:24:d1:9a:
69:a9:16:4c:02:b5:13:73:0d:44:a2:08:5e:ae:8b:
06:27:c6:6d:8d:81:c6:8d:c1:7e:24:0a:57:2d:9f:
6d:ca:55:42:e5:dd:07:a4:09:e5:dc:89:42:d4:64:
53:9f:03:2e:01:c7:58:d9:d4:af:b5:9a:a2:df:75:
c4:00:76:4b:34:3d:1d:de:27:55:ed:41:19:77:80:
70:07:c7:fb:40:d5:6d:21:ef:16:3b:ba:c1:a5:4c:
24:53:32:5d:d1:ea:27:ac:d7:79:81:01:7f:ee:4d:
5d:36:4f:db:57:4a:4c:7f:a5:dd:3e:eb:20:37:e5:
9a:e0:34:77:89:8f:53:0e:fc:5a:33:b3:31:47:47:
b4:f5:cd:e9:7a:63:e5:ab:24:5d:13:11:a5:eb:5a:
1c:65:c2:d3:15:9a:cc:b7:d6:b4:49:75:1d:21:7d:
28:b9:51:db:b8:fe:6a:bd:7e:e0:09:8e:ad:55:b5:
15:42:f2:51:f9:57:fc:6d:92:78:cf:5f:07:f8:19:
67:e2:86:93:bf:6d:64:4f:7a:ca:d5:58:9c:52:e6:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:5C:C1:22:09:CD:98:12:92:85:2E:62:1C:AD:79:FD:44:87:75
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:cd:3d:f3:76:9d:6b:04:f4:f4:60:bb:b0:bf:ce:64:ec:
ee:ed:72:c6:9c:1a:60:28:57:4f:aa:fa:5a:0b:09:60:18:a4:
b4:35:6b:7e:66:05:f6:cc:ab:4c:ab:0e:1c:dc:46:ec:8d:a5:
99:fa:c9:bb:67:3b:bd:34:7d:38:ed:e5:c8:d0:a7:e7:ff:6a:
6e:0a:d6:10:53:55:7f:42:8f:e8:98:08:5c:17:d6:59:6c:4c:
19:78:a6:25:01:22:0a:1d:1f:64:7d:5f:58:26:dd:4d:5e:84:
65:11:f9:5e:fa:cc:de:63:7e:03:6e:56:fa:8a:fa:de:ba:01:
75:6b:f3:1e:45:f5:e6:bc:ae:33:da:ad:52:0d:5c:5e:36:8a:
d8:34:24:4b:3a:ce:b2:e0:62:2b:4b:06:6e:b2:be:bb:8a:c2:
fc:40:e4:0c:f1:cb:4f:d2:0a:ac:9c:8f:6f:40:30:f2:95:2a:
cc:c3:39:3a:27:c7:18:37:3d:ea:f9:f9:b2:6a:e3:96:5a:95:
b8:ca:05:90:27:2b:12:14:96:1c:82:3c:ef:b5:09:6e:1d:94:
51:29:01:83:78:22:1a:96:4d:6c:68:c4:e3:4e:2a:58:8f:2d:
ed:d3:26:7f:9d:56:eb:81:7b:5c:f2:f7:08:ee:c5:ae:44:c4:
63:f1:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:58 2025 by rpki-client