Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: NuC+yXOGU708Tv3bbbq10GxQXXGnBl+/pKJaGNrei/Q=
Subject key identifier: 44:D5:35:74:33:CE:02:A8:EC:67:92:65:E7:A5:1C:E2:5E:4F:77:38
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 0196470E3311C54EA68AD02C222E1CBC928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 04:00:34 +0000
Manifest this update: Fri 18 Apr 2025 04:00:34 +0000
Manifest next update: Sat 19 Apr 2025 04:00:34 +0000
Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: bdL/qDnIpBZOCh4uHAXoDGdZfqGavs/txOxPE8KK4VI=)
2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:33:11:c5:4e:a6:8a:d0:2c:22:2e:1c:bc:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Apr 18 04:00:34 2025 GMT
Not After : Apr 19 04:00:34 2025 GMT
Subject: CN=44d5357433ce02a8ec679265e7a51ce25e4f7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:a7:ba:d1:60:a2:61:b8:db:99:0b:65:83:
dc:0b:d9:ff:ef:11:7d:53:73:de:ee:e9:21:6b:87:
9e:90:c7:24:ce:a9:1c:b0:69:0b:cd:9e:51:b3:e7:
75:74:ca:fd:42:30:e9:2b:7d:3f:32:d2:3d:1a:a0:
ba:cc:cf:67:5b:2a:72:9b:99:b6:ff:b2:37:a0:7d:
76:bd:4f:db:69:63:cc:f7:af:52:84:aa:61:b0:53:
fa:fb:1f:7d:24:8c:4c:71:79:f9:fc:4c:88:90:26:
f9:07:03:07:ce:b3:50:c5:1b:df:1c:83:ce:0b:c3:
3e:7d:86:f7:8f:44:55:5a:8f:1c:dc:5d:74:a9:30:
8f:14:cc:02:ec:29:f2:ec:a9:d3:65:ab:a1:9e:a6:
f8:2b:d3:f9:42:18:3f:3a:6b:ec:bd:af:c1:6d:63:
2a:4c:da:50:67:0c:07:2e:c2:b1:8f:8b:ee:73:c8:
81:41:df:63:e0:8c:09:e7:3c:c9:77:df:ce:59:99:
81:6d:33:07:74:05:16:97:7a:9e:ae:48:b9:a9:52:
cb:6a:69:0b:68:3e:ee:ad:4b:38:f2:63:aa:f6:ad:
ee:77:af:ba:eb:53:fc:3d:d0:01:c9:0c:13:8c:0f:
d0:46:3f:c1:2b:a9:4b:7c:77:5b:77:53:c1:44:0f:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:35:74:33:CE:02:A8:EC:67:92:65:E7:A5:1C:E2:5E:4F:77:38
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d9:00:75:f3:f8:c8:1d:24:96:75:f1:de:f1:11:ba:b9:7f:
15:90:69:e6:f2:ba:33:48:b0:ce:0a:96:70:86:e8:ae:da:4e:
c2:ca:5c:45:48:62:3c:9a:87:96:78:89:b6:15:ad:81:87:87:
ee:54:ea:92:30:9a:00:bf:3f:8c:60:f7:a0:70:2b:7b:1c:4e:
ac:eb:ee:1d:d0:b0:4d:25:14:a0:d1:19:02:95:ab:3d:a5:32:
c8:22:5e:95:2e:2b:6b:20:7d:44:41:97:73:c6:38:fc:f4:6e:
c3:82:9f:3c:24:2b:ab:e0:6a:55:5f:44:b5:e5:33:3e:56:9f:
35:1d:e7:31:ff:18:28:c7:36:d8:73:d8:61:65:8c:84:5d:02:
5c:6d:ce:7c:dd:ab:6d:93:17:dd:bf:99:1d:86:94:93:20:20:
ef:a4:7c:84:27:82:43:8e:36:9a:3d:94:66:a0:00:e6:e4:21:
03:f8:bf:01:ed:85:0d:3c:7c:78:0b:d1:4e:13:c5:a2:ba:87:
5e:ce:b5:01:1b:4c:eb:b0:17:35:6f:6f:ff:70:58:e7:08:5b:
d0:31:3f:fa:57:99:a9:be:9e:9f:13:11:f8:41:d9:a7:3f:18:
96:0a:32:51:59:7d:ec:fd:95:77:60:69:56:51:22:e1:d8:e4:
4a:8f:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:53:57 2025 by rpki-client