Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: AuKxooDZO1rWN4R33EZ+L6KRe+I+v/bDAihnTzItm6M=
Subject key identifier: 65:BF:C8:4A:EB:01:72:22:7B:EE:CE:C3:84:78:58:E8:C7:EA:5E:3B
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 0196520033442CB90F791E0D2F6F03B3240F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 1131
Signing time: Sun 20 Apr 2025 07:01:06 +0000
Manifest this update: Sun 20 Apr 2025 07:01:06 +0000
Manifest next update: Mon 21 Apr 2025 07:01:06 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: y8td2Nz6QKy1QAGf8oKm+YzB0I+0545mth5lNu/WqJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:33:44:2c:b9:0f:79:1e:0d:2f:6f:03:b3:24:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Apr 20 07:01:06 2025 GMT
Not After : Apr 21 07:01:06 2025 GMT
Subject: CN=65bfc84aeb0172227beecec3847858e8c7ea5e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:c7:14:1a:77:a5:9e:4d:d8:89:ed:82:70:
2f:04:7a:15:76:54:17:53:ba:47:8e:5a:f3:07:02:
de:cd:07:d8:83:6b:eb:83:1d:16:2c:e3:50:c8:73:
1f:7a:dd:15:d3:ef:97:ec:74:59:8d:79:e5:47:0f:
3f:4f:52:68:12:60:51:c3:f2:cb:37:c4:88:91:d7:
bb:30:63:0c:65:12:b5:d4:cc:0e:23:eb:e4:23:14:
56:64:3f:03:94:9e:59:95:66:e4:aa:d6:52:cd:64:
46:ff:bc:5a:e7:c2:3f:5d:88:91:d6:35:f5:d4:c2:
d9:07:ee:5f:fa:b9:ef:61:42:25:1d:2d:11:5f:91:
e4:b4:26:cd:7d:21:1c:a2:08:89:d0:33:0d:8c:57:
58:a5:6f:9c:7e:29:bd:86:05:1c:5d:5f:a6:95:48:
c9:65:42:16:c3:0d:b7:ad:23:9c:f4:1d:59:f5:56:
33:46:15:08:ae:f0:0d:f0:56:0b:2a:0b:48:f5:d7:
6a:66:36:24:7e:76:5b:7c:17:d0:3d:34:02:2f:9a:
9e:00:18:9b:09:ce:30:0b:a3:d5:42:3e:b5:23:ae:
0b:bc:25:e6:bc:37:da:d9:6a:97:e1:1e:f7:24:ae:
ee:97:ae:8d:33:73:41:47:13:c1:81:81:25:8e:94:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BF:C8:4A:EB:01:72:22:7B:EE:CE:C3:84:78:58:E8:C7:EA:5E:3B
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:05:1a:fa:dc:95:50:33:50:99:fb:e6:00:87:0e:09:49:89:
7f:3f:6c:f6:17:40:3b:98:de:df:91:24:1d:8a:b0:f5:cd:ff:
60:7f:61:93:de:03:59:3e:f0:43:06:25:63:5f:22:84:b2:ab:
5c:94:67:72:93:5d:ce:f3:39:3c:8c:94:b2:cc:74:90:3e:c5:
69:54:32:90:a9:40:09:b6:02:5c:de:7f:52:fb:0d:2d:5f:b9:
80:09:a7:38:5b:37:2e:b5:51:e8:ad:75:4b:75:ca:b0:49:50:
3f:d5:9b:76:16:37:17:03:8e:1b:6b:45:52:70:90:ba:4b:d7:
87:bd:1e:29:61:d3:cd:94:ac:fb:f1:3f:83:df:8f:e9:94:3b:
60:ba:68:f3:ff:9b:37:1e:c4:7b:de:96:9c:cb:f5:19:f3:18:
d1:84:06:d9:51:2c:18:b5:87:ab:07:b8:c9:cd:35:0c:75:49:
27:83:a7:55:c4:a5:c4:3b:72:aa:83:cf:44:71:5e:29:87:17:
5f:b3:47:f0:a7:de:55:d7:17:4e:e1:b9:bb:99:01:51:d7:fc:
d2:81:6d:ff:31:32:3f:27:85:42:a8:b2:a0:ca:c2:7e:be:f2:
bb:64:79:d8:78:d2:1e:d9:3c:ef:fb:f2:53:f1:21:1c:1b:98:
ac:0d:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:34 2025 by rpki-client