Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: PL79aBvIh/bhOgsaLO2ARlAI9N4lUjU3NAAfc6aoiOM=
Subject key identifier: 0B:D1:A1:88:FE:E0:8C:8A:17:8E:3F:6B:09:68:91:6B:5E:91:B6:CC
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01964B21F28E35C057BA696F33B1FCAA0889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 054F
Signing time: Fri 18 Apr 2025 23:00:38 +0000
Manifest this update: Fri 18 Apr 2025 23:00:38 +0000
Manifest next update: Sat 19 Apr 2025 23:00:38 +0000
Files and hashes: 1: 1Ha8srIAp9WOKKhksHpGuM5AJxs.roa (hash: eIlLhqb6Klu7eWMj9sibnBFq4kfPdmxjT0rsiJwbmWs=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: fDasplC7/UmF25aY/+2geAsCt3y3FOFOcvrHMKDU2L4=)
3: vvup4VxriGQ7WP6VC9ScYtwxj1M.roa (hash: cPowMqqvBH4GyyJFrqoymf0AaQQSobEdpJ1I1I37kek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:21:f2:8e:35:c0:57:ba:69:6f:33:b1:fc:aa:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Apr 18 23:00:38 2025 GMT
Not After : Apr 19 23:00:38 2025 GMT
Subject: CN=0bd1a188fee08c8a178e3f6b0968916b5e91b6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:09:f8:fb:e7:6a:5c:7b:60:71:c4:28:6e:
90:62:09:63:d5:e4:43:34:3f:89:1e:11:35:eb:a3:
eb:04:12:43:d3:c2:a9:ef:d7:64:64:23:5c:c0:ba:
25:d1:19:84:8f:53:78:39:65:0a:ea:9c:45:a7:37:
49:c5:2b:59:44:f3:eb:72:9d:7d:06:ab:0e:ae:7b:
ec:9f:fa:97:4e:8c:b3:db:15:4e:29:8d:81:90:84:
17:70:b1:35:2f:46:45:ac:b6:8a:57:02:33:62:15:
b1:70:a8:06:f1:46:6f:e7:ff:76:bf:c4:ef:06:11:
fc:c6:81:66:3d:4d:bf:d2:51:2d:00:7a:96:c9:59:
91:8f:37:8c:e3:c4:83:59:9c:aa:e1:93:d0:53:24:
b2:28:d6:ec:76:9e:e5:87:14:32:16:e9:d6:96:71:
f0:bb:ef:c3:93:16:16:1e:1f:61:26:3e:8a:fc:1b:
31:2a:98:f4:a1:42:6d:53:77:9c:c2:c7:02:f0:3c:
08:65:b2:7f:f8:25:2d:43:89:3d:5b:5a:47:28:f7:
4a:f4:ac:c1:23:fc:9d:f7:42:55:96:b9:f4:4c:d3:
b3:96:28:e1:3d:95:67:6f:dc:98:5b:67:54:54:ca:
a4:2d:9b:e1:04:3a:a8:97:38:3c:ab:7b:b2:b4:d4:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:A1:88:FE:E0:8C:8A:17:8E:3F:6B:09:68:91:6B:5E:91:B6:CC
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a4:4a:d8:86:7f:0b:66:2b:42:75:53:e9:c8:79:76:21:ef:
b7:06:43:61:5a:20:08:be:f1:69:40:25:9b:9a:63:7a:2e:10:
f8:b9:ac:35:8e:38:6f:81:c5:e8:9d:0d:8b:c8:99:39:a4:6c:
90:ba:38:18:d6:d9:22:55:52:67:29:6f:13:5c:85:97:70:02:
f9:14:16:10:00:5d:f9:1d:6d:7b:e7:17:07:76:67:b4:41:18:
07:95:53:67:47:a8:2c:9c:57:5b:01:d1:e6:b9:a1:e7:fb:06:
f6:b2:21:8b:da:3b:26:18:2b:78:fa:0b:c8:da:d9:ee:03:ff:
82:35:7c:1b:52:11:1c:f3:99:43:ff:cd:3c:5d:41:53:2b:b9:
6d:f1:c0:6e:51:ca:92:b1:bd:3e:33:fe:09:5d:7f:2b:50:01:
41:b1:1a:b3:91:fd:be:02:f3:2d:1d:f7:f3:1d:e0:2e:16:3f:
3b:0d:19:7d:d5:f8:9c:4e:c7:ab:37:67:9e:0a:fb:ec:cd:e7:
c4:08:29:13:b4:03:19:8f:ce:41:8b:e5:92:76:8f:d3:1f:58:
a5:9d:da:54:71:13:84:41:d8:60:e6:63:01:b5:39:0f:61:f4:
cb:d2:a4:ef:4a:74:28:ec:64:04:3b:35:11:c4:3e:c0:41:69:
3e:6e:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:18:55 2025 by rpki-client