Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: drEulGSVRk6sbySwLPDViSPx7sLPCkKOhZ9PXyPzkWQ=
Subject key identifier: 1E:C9:9B:CE:CA:1C:0B:A2:3A:FF:3B:0E:F3:0B:56:BB:AB:07:FF:67
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019646D748FDB18DC003D7C9B6860C834090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0D2A
Signing time: Fri 18 Apr 2025 03:00:36 +0000
Manifest this update: Fri 18 Apr 2025 03:00:36 +0000
Manifest next update: Sat 19 Apr 2025 03:00:36 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: 4poxPYQ5mTSiw004+p1WQ8xtEWR6a8cwGCInMeY1gEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:48:fd:b1:8d:c0:03:d7:c9:b6:86:0c:83:40:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Apr 18 03:00:36 2025 GMT
Not After : Apr 19 03:00:36 2025 GMT
Subject: CN=1ec99bceca1c0ba23aff3b0ef30b56bbab07ff67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:b2:f1:80:a3:7b:45:0d:60:6d:c0:ea:0b:
56:91:66:bb:35:45:8e:a7:6a:55:84:65:e5:1b:f4:
ed:13:b4:cd:67:7d:48:1c:83:37:63:25:48:ca:c9:
e2:c9:e4:65:76:b1:14:1c:d1:c2:c4:2f:1c:5f:03:
13:cc:72:a1:7b:da:6e:77:dc:22:13:d8:77:66:fa:
c3:c4:c6:7d:b4:c4:18:ac:7f:d4:e6:da:7e:19:74:
39:22:2c:f1:0a:a2:56:a5:71:ab:6c:2a:4a:f9:94:
ed:82:d3:c3:cb:23:b1:f2:d0:9a:50:db:98:51:d5:
ff:75:2d:c2:5b:15:69:ac:7f:a6:aa:f4:ae:6a:02:
2b:16:b6:90:74:be:7d:c7:ae:da:75:de:fa:15:1f:
b1:b5:e6:46:95:3e:31:a3:14:e0:e9:57:ad:48:66:
dd:8e:b5:e0:2f:b1:76:2b:e9:af:56:0d:ff:ed:e1:
89:48:b6:80:20:0b:f6:2f:a6:35:ef:de:d7:87:35:
f0:b2:dd:2e:e4:07:af:cc:c4:f7:8f:dd:11:3f:94:
5f:1d:5e:fe:09:44:91:5b:f9:67:e1:12:40:ff:b8:
2f:f4:c3:ba:8c:7c:61:0c:7d:3f:52:87:e9:6c:a3:
29:81:03:52:fd:2e:73:25:ae:f1:99:56:28:14:69:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:9B:CE:CA:1C:0B:A2:3A:FF:3B:0E:F3:0B:56:BB:AB:07:FF:67
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:e3:03:1a:69:4c:93:c3:39:40:d7:32:d4:4a:cf:f3:cb:
46:d1:d4:01:4f:dc:fa:49:c5:f6:e7:3b:cb:5c:59:6f:de:83:
73:dc:d8:d8:fb:38:de:e6:7b:5d:1e:ed:b3:69:27:86:30:51:
03:c5:06:63:03:85:31:59:51:29:a2:46:ae:90:ba:2f:77:8a:
56:ed:7f:12:d9:ec:ac:6b:ab:73:c8:2b:6f:d8:c7:39:82:55:
4e:ab:1e:60:f0:ea:33:84:0c:ca:e6:6b:6d:b3:88:70:c1:70:
b9:1e:58:80:2f:21:93:59:06:8e:6c:fe:52:f2:25:e5:33:75:
c8:ab:d3:28:67:e4:3e:e4:2f:7b:21:e6:a4:6c:e2:bd:11:cf:
7f:0c:b1:3d:e2:e1:4e:1c:1e:c4:79:05:c5:85:25:ca:27:59:
5d:f0:ea:a9:1f:a5:03:c8:d6:3b:3a:35:6e:bd:82:6a:d6:b0:
c4:c1:34:c3:72:03:7c:1c:6d:e0:59:81:94:57:8d:3c:03:19:
84:48:3c:8e:aa:d4:75:d7:58:30:51:49:c8:ba:28:b4:a3:87:
0e:5f:17:84:69:04:78:79:d9:0b:63:6f:11:2b:d3:6b:45:c0:
a4:db:f3:84:83:d0:c7:8b:b9:4e:ad:f3:a6:62:99:4d:0d:d5:
58:7d:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:37:24 2025 by rpki-client