Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: Zgn1J41E19vKernReqw+LUnWnsu8ogm9YEW/fE1xp/M=
Subject key identifier: BE:0A:C5:35:57:FE:39:B9:37:6C:ED:E5:FE:60:05:6A:A5:E6:AE:94
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0196466967EE8474FCB689B845A33F594A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 01:00:35 +0000
Manifest this update: Fri 18 Apr 2025 01:00:35 +0000
Manifest next update: Sat 19 Apr 2025 01:00:35 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: D4w7cTuKYqc1kB+ssS5EDckuximXpEj7p9ZpD01WqZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:67:ee:84:74:fc:b6:89:b8:45:a3:3f:59:4a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Apr 18 01:00:35 2025 GMT
Not After : Apr 19 01:00:35 2025 GMT
Subject: CN=be0ac53557fe39b9376cede5fe60056aa5e6ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:49:79:a3:16:0d:45:2b:9b:27:96:fd:79:
15:a3:b0:4a:98:94:ac:ac:56:4d:b8:8f:bc:83:43:
29:99:3a:91:00:b4:43:2f:95:ab:66:d5:b5:b0:14:
23:43:f8:97:4a:e4:92:57:c4:95:d5:a0:0f:98:46:
94:dd:40:40:56:8a:46:bd:34:5b:91:93:c2:46:b7:
db:07:ea:88:83:89:96:a9:0b:a8:42:f1:4b:81:92:
11:02:34:a5:57:1a:ba:13:71:28:e2:ba:2b:87:71:
04:7e:1c:36:84:72:7b:b2:81:8a:3f:b8:a2:07:1c:
4a:d6:9d:99:07:29:f0:d9:6a:8c:a0:bc:8f:97:54:
d7:f4:a2:4d:37:7f:e9:ba:04:07:7f:5d:31:fc:1d:
fc:24:73:7e:29:5c:66:aa:28:a8:b7:e5:8e:15:ec:
ff:e9:40:44:07:36:09:c8:30:c5:3b:1b:c1:06:49:
a4:31:d9:f7:fc:4c:11:62:64:2f:b4:8d:bd:67:50:
55:5d:84:75:ab:30:13:57:30:75:0a:35:46:bf:18:
35:79:89:69:d1:84:bf:38:0b:de:eb:0d:8c:2b:97:
95:18:e0:23:e3:de:86:ec:bb:5e:f3:b1:1f:09:95:
f5:9c:3e:fc:3a:04:c5:2d:4f:e1:82:22:7d:ec:96:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:C5:35:57:FE:39:B9:37:6C:ED:E5:FE:60:05:6A:A5:E6:AE:94
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:60:c9:8a:66:c5:a9:c7:1b:ca:41:b3:fe:59:69:7c:c5:7b:
b4:4c:ba:ac:97:17:7c:de:a0:c8:d9:cd:d6:5c:9b:1d:c9:6e:
ea:3c:2b:fc:1c:6e:60:7f:b9:0a:04:bb:d1:bf:2b:d3:ae:01:
26:8a:0a:45:6e:1d:00:79:35:b2:5f:6a:a1:d7:55:43:d0:4b:
e3:8f:37:e8:ac:e8:30:5a:2d:ba:68:ce:b7:6b:6d:17:9f:19:
84:48:5b:da:d2:8f:a8:67:02:53:0a:92:9b:3d:a4:dc:c1:59:
d5:4d:b9:62:52:c9:92:ab:6d:15:b0:ce:6b:4b:e9:ff:21:ee:
b4:18:ad:fc:5e:53:3d:2d:2d:51:4c:59:09:88:90:bd:7a:54:
78:91:3b:26:19:cc:ab:bc:93:1f:af:e7:e0:f6:1f:b2:67:34:
be:84:4a:d5:52:7c:9b:ec:80:d0:aa:6a:ee:8d:61:44:b5:93:
a9:9a:fc:5a:db:96:2a:3e:10:85:07:61:b2:25:9b:9d:90:d7:
60:17:08:2a:0d:c0:84:53:3f:0e:c7:84:fb:2f:2f:f7:dd:ce:
ff:e2:cc:be:a6:29:93:b5:a1:f2:32:cf:b3:5a:97:a9:c6:0d:
a0:d1:00:c5:1b:7f:37:9a:1f:76:ae:aa:4c:0c:35:a7:e9:89:
f8:4b:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:08:54 2025 by rpki-client