Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: NXkN1IKcbjqHGcfJAlhV5JH7FrnCpbnqgz9ryW4YST8=
Subject key identifier: 4D:1B:53:BE:B9:57:50:02:BE:23:7C:CF:35:30:CE:52:2D:A7:66:69
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 0196507F0F54FCFD5D364E2642CD6F612003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 034F
Signing time: Sun 20 Apr 2025 00:00:26 +0000
Manifest this update: Sun 20 Apr 2025 00:00:26 +0000
Manifest next update: Mon 21 Apr 2025 00:00:26 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: F91yTcJuFJ/agCBEnEYZ7EWUHNWNxD/j2Io7am0u6Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:0f:54:fc:fd:5d:36:4e:26:42:cd:6f:61:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Apr 20 00:00:26 2025 GMT
Not After : Apr 21 00:00:26 2025 GMT
Subject: CN=4d1b53beb9575002be237ccf3530ce522da76669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:ad:d5:ab:72:dc:e6:32:54:1f:ce:e2:27:
01:46:75:5d:70:dc:f3:36:cb:47:e9:e6:c4:86:3d:
ec:6a:d1:52:ae:77:7f:14:52:d7:b7:6f:3e:65:c0:
80:44:af:60:21:02:4c:0f:92:46:bb:06:6d:d3:38:
97:7f:d8:91:b0:9d:4d:d2:c2:1e:91:76:9e:71:dc:
b6:c3:a2:9e:93:af:e8:8d:5e:7b:b3:3a:e7:5a:48:
c6:5b:d4:80:9b:92:2c:9c:30:e5:2a:63:3f:55:24:
ac:10:96:08:b6:bb:ea:b7:bf:9e:84:6d:20:d9:a4:
52:25:a3:5e:ca:bf:b1:0a:2b:c7:f3:5f:16:18:85:
6e:eb:b4:3a:a8:01:81:2c:88:72:77:21:50:ad:47:
c5:82:94:95:e1:92:68:c6:54:76:a0:dd:92:16:b4:
22:81:62:d8:ab:fe:c7:20:21:45:c1:6c:39:d0:5f:
56:01:fc:79:15:fe:ae:98:45:1f:aa:43:65:64:58:
de:b0:35:40:d2:b4:41:ac:0f:c7:7e:b0:e4:2a:78:
74:f3:e1:25:9e:f7:01:21:e5:cf:58:f2:0f:ca:f1:
bc:eb:af:fd:5d:7f:88:41:74:c2:06:dd:dc:71:cc:
27:80:00:59:98:42:c6:71:4f:3e:df:d8:4c:7c:da:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:53:BE:B9:57:50:02:BE:23:7C:CF:35:30:CE:52:2D:A7:66:69
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:be:08:50:42:e7:eb:de:67:1a:f7:05:15:ac:e5:fc:41:d6:
79:5b:21:e8:1f:27:12:6a:db:bb:06:cc:ea:ce:51:a3:97:a4:
82:29:9a:df:51:ae:95:f1:37:75:e4:b7:ad:43:36:e0:09:e6:
ea:09:6a:0b:36:87:b9:9c:5f:6f:b3:77:a5:70:eb:18:ad:ee:
fd:16:87:54:cd:9c:20:02:75:a8:e2:7b:e5:8e:b8:b6:4c:5f:
0d:7f:fe:cc:a0:5f:b5:ed:fb:34:f5:99:a3:63:b9:55:9d:c5:
aa:9a:d4:db:72:b0:43:70:89:29:ad:17:81:bc:7c:d0:da:9a:
ad:59:f9:2c:37:e7:b9:8d:8f:78:c0:d0:a6:f6:2a:ce:6e:12:
96:18:7a:61:66:a2:70:56:eb:56:92:59:74:fa:c5:7e:b7:96:
11:77:94:e6:3d:86:a8:09:58:d3:35:56:10:f9:0f:a7:32:a1:
2e:ad:43:20:f0:90:40:41:cf:92:39:66:39:66:18:fb:b7:c8:
78:1e:29:89:2e:6c:f2:4c:97:9f:0e:89:4a:38:6e:4c:1f:d2:
94:07:9a:14:a3:97:e5:de:81:b9:67:20:9b:73:11:e4:c1:84:
e8:28:5b:9b:8e:94:97:2f:67:2d:96:25:f6:c7:8d:31:37:b1:
dd:e9:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:58:45 2025 by rpki-client