Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: cUwXqLVXwkQgwxgBtcPwgC2UjN+rovS947ecOVhZO0c=
Subject key identifier: 44:83:93:65:E5:41:0B:DA:15:B2:1E:6D:91:DA:E5:D2:55:CA:0B:3B
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019616C6BB6BCED1A3CAF9D9061981B7C024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 19:00:44 +0000
Manifest this update: Tue 08 Apr 2025 19:00:44 +0000
Manifest next update: Wed 09 Apr 2025 19:00:44 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: 56qdWpEdXiz6AJlna+Vy++Yyrthr+slVe7dUt90NsuM=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c6:bb:6b:ce:d1:a3:ca:f9:d9:06:19:81:b7:c0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Apr 8 19:00:44 2025 GMT
Not After : Apr 9 19:00:44 2025 GMT
Subject: CN=44839365e5410bda15b21e6d91dae5d255ca0b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:a2:09:86:b9:f7:e0:5a:35:98:51:ae:a3:
81:1e:a9:0f:30:2c:4f:47:fe:16:3a:6f:dc:b0:04:
44:f9:01:61:07:a9:3c:0e:e8:b1:ed:35:02:c6:7f:
47:75:43:c5:fb:d2:e2:e6:ad:17:2c:bf:3c:84:62:
99:47:95:d1:f8:61:00:10:b4:c4:65:42:f8:61:df:
5f:d0:73:80:b7:c3:04:f6:8b:05:e1:2d:b5:52:91:
fb:dd:8f:43:41:6e:d4:6c:58:53:76:3b:8d:e4:34:
15:e5:10:8c:05:3d:2f:50:7b:2d:5a:a9:a3:99:e3:
f9:7a:b4:af:b1:00:bd:6a:df:dd:8a:f6:af:33:67:
d6:c5:d1:55:8b:72:0d:36:b0:25:d4:c4:cc:45:97:
1f:67:a7:79:7a:b6:7d:56:b2:c6:02:e0:ca:cb:8f:
e2:3b:0d:dc:89:95:e7:1a:1d:83:2b:0b:cb:bd:aa:
88:3e:1f:58:d1:7d:a5:2d:73:92:ae:ea:51:5a:a2:
03:2a:3c:80:10:18:82:95:2e:ec:48:99:85:93:66:
95:7b:60:38:ae:56:49:cf:61:b6:7b:0f:1f:89:25:
28:40:a9:eb:3f:e6:84:81:79:e2:44:6d:49:6f:43:
f3:56:64:84:a5:85:81:d7:be:1b:b4:f2:71:42:b2:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:93:65:E5:41:0B:DA:15:B2:1E:6D:91:DA:E5:D2:55:CA:0B:3B
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:5b:d0:36:27:35:bb:5c:e5:cf:cf:51:c3:63:62:ec:e4:
0b:76:a4:d0:9d:48:e0:02:2e:b1:d5:12:5e:9f:05:fa:e7:50:
69:2a:8e:a8:a3:31:9e:f1:c1:67:0e:5f:72:56:45:23:fe:7f:
af:71:72:5a:42:65:26:5b:bd:43:0a:f5:3f:c3:f7:00:ee:ac:
c5:49:f6:db:20:e1:ce:c2:2a:e1:a2:7e:b4:45:75:fc:56:a9:
33:80:59:fe:1a:87:e4:7d:ed:6d:ce:f8:63:1a:aa:dc:de:5a:
c7:c7:13:c6:b8:62:2c:d1:77:bd:8e:b3:dd:be:1d:70:3a:58:
34:9a:5b:14:3f:ac:df:f4:e2:bb:63:6f:c9:60:7c:48:bd:86:
b5:56:4e:35:bb:46:f1:97:25:fa:38:8f:94:86:0d:28:e9:d1:
86:b1:db:ac:01:b9:53:6e:7e:64:0e:7e:b4:f4:ab:4d:ad:b3:
fd:d1:c4:b5:68:5e:70:1d:24:96:5e:5b:eb:eb:58:39:d3:cd:
ec:98:27:ab:86:2e:c2:75:aa:8d:f0:1f:63:62:7c:18:ed:0e:
4d:b9:79:92:88:00:fe:1a:73:11:92:2c:5a:d0:20:37:12:52:
70:73:f4:6d:74:b8:cb:b0:2d:0f:ec:cf:49:f4:09:04:af:28:
da:8d:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:32:33 2025 by rpki-client