Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: TpIaMIzWtaUBcpih16VvyF1HcW2c4vU7ink6ev2u6Hk=
Subject key identifier: A7:5E:F0:3A:CE:B8:F5:6E:BB:9B:E8:8D:BE:E0:2C:BC:E8:50:47:E1
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 01961133191C4C1094A6DF62BCD13F76BF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 17:01:23 +0000
Manifest this update: Mon 07 Apr 2025 17:01:23 +0000
Manifest next update: Tue 08 Apr 2025 17:01:23 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: JstQM0Jz4gkN8FheMIL3HEFjy2e8+BvP8HI5oDOJ5oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:33:19:1c:4c:10:94:a6:df:62:bc:d1:3f:76:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Apr 7 17:01:23 2025 GMT
Not After : Apr 8 17:01:23 2025 GMT
Subject: CN=a75ef03aceb8f56ebb9be88dbee02cbce85047e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:eb:0d:31:df:cc:06:ca:5f:2d:ef:8f:98:
30:6a:30:a5:0a:50:1a:1d:6e:41:c2:d4:86:ba:b8:
5b:41:e9:8e:d7:eb:b4:50:6b:6d:1a:52:6f:bb:82:
23:7c:96:30:c1:6c:6b:de:65:96:81:db:d2:84:f2:
d3:a3:84:9e:fb:8a:c8:51:0b:86:41:30:ad:32:19:
27:e5:41:76:90:25:12:11:a8:ac:f5:37:a5:2f:5c:
2f:3e:54:af:98:f0:ef:ae:e7:29:93:71:a3:1f:43:
c7:1a:80:b1:bd:e5:07:f2:b5:46:0d:51:e4:2a:78:
b6:cd:93:1a:46:a3:df:34:14:06:8b:cd:84:90:cd:
c0:e3:fe:f7:30:bd:76:9d:1e:5f:09:12:36:47:e6:
27:d6:ce:79:02:7b:fa:39:3a:c0:42:40:f4:83:3f:
b7:66:83:a0:9e:a7:1a:e3:d6:a3:aa:46:4b:8e:5c:
9c:58:e1:1c:72:4b:08:a0:da:b8:8f:48:b4:42:3c:
94:f5:d4:cd:f3:4b:4a:68:32:41:00:f6:45:f3:d8:
c7:39:23:f8:57:af:eb:7c:53:14:c6:2b:ad:97:d2:
1e:c2:f3:a9:1b:e2:4b:79:eb:d5:f0:8f:69:61:76:
6c:3b:94:f5:93:c0:34:20:77:fb:4d:78:8b:5a:13:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:F0:3A:CE:B8:F5:6E:BB:9B:E8:8D:BE:E0:2C:BC:E8:50:47:E1
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:58:71:83:9b:b6:78:1a:19:3e:ec:b4:c4:4b:b3:73:65:56:
ac:73:63:cb:e6:28:6f:25:a7:14:eb:c1:79:97:68:2d:99:54:
e3:a4:4d:80:a4:ca:0a:d3:53:bc:14:ba:64:93:af:93:50:6f:
a8:86:1a:d3:92:57:50:47:06:d8:0d:19:54:3f:eb:70:07:36:
be:5a:cb:2a:ee:6e:86:43:6b:8a:f6:3f:5c:a2:3a:5a:60:6d:
15:27:71:6e:ac:52:c1:cf:5e:c4:70:f7:b7:c3:ea:91:4e:0f:
d4:8b:44:fe:af:be:54:c7:d5:7f:b6:c0:68:79:a2:86:ab:44:
19:1e:f3:2d:f5:af:c8:ca:ae:7c:5c:cc:62:ad:53:5a:84:f1:
e9:34:a0:a6:a7:b5:c9:3e:cc:8d:b8:f3:69:1e:c3:9a:62:b4:
13:8c:4f:61:41:34:68:37:23:94:f0:de:24:30:8a:4e:1e:49:
de:71:18:72:7f:4f:d7:15:dc:56:73:5c:f3:9d:74:33:95:20:
37:1f:b6:00:89:c1:a8:6c:76:3e:76:d8:be:62:22:42:84:18:
63:dc:d3:ba:a1:38:21:8f:91:7e:1a:31:f6:64:58:1f:61:ce:
84:54:cc:bc:84:f9:92:90:e1:4a:34:ce:a5:a3:db:bb:14:16:
4d:b7:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:50:15 2025 by rpki-client