Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: gtXu8PRdIqWdNkX7k2XGG3A0pV1S2YyF0ENal2c3q4A=
Subject key identifier: 0D:E7:F5:A4:1F:97:80:41:10:65:3F:4A:C3:29:41:6C:07:FC:83:AA
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0196102071CE7718F91CB1D3982FAE2D3208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 12:01:23 +0000
Manifest this update: Mon 07 Apr 2025 12:01:23 +0000
Manifest next update: Tue 08 Apr 2025 12:01:23 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: UJ58ouOidVw+VeEHod3wvA5iBd4QLLnLojpJI6LWZIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:71:ce:77:18:f9:1c:b1:d3:98:2f:ae:2d:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Apr 7 12:01:23 2025 GMT
Not After : Apr 8 12:01:23 2025 GMT
Subject: CN=0de7f5a41f97804110653f4ac329416c07fc83aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:44:43:68:e9:d5:62:08:ed:a5:ee:bf:93:
51:91:81:f8:a2:5d:33:2f:b8:98:87:dd:cc:16:91:
8c:e1:cb:aa:41:1d:53:56:56:dc:f6:a3:62:c2:91:
6d:c2:68:28:31:7a:b1:49:6b:70:42:c2:47:64:a1:
d8:e9:bf:2a:c0:7a:aa:e1:b0:01:52:bd:98:4b:58:
35:d6:d9:3a:7e:c1:44:fc:a8:05:ee:f8:af:2c:d8:
ab:53:b4:65:dc:f6:94:af:c0:22:e0:06:c6:af:65:
d6:61:d5:19:28:6d:ee:ba:25:c1:d4:37:1e:a7:1a:
3d:c1:68:a4:28:5f:3e:3c:d6:15:b2:a6:6e:41:ff:
5f:50:21:a6:8e:bc:7f:4c:92:78:7d:4f:9b:fb:d9:
a5:81:8a:d3:7e:9f:6c:fd:4d:3e:15:0f:f9:d7:b9:
a3:a7:ef:0b:53:1a:5e:8f:a7:da:1b:f7:dd:be:1d:
74:30:51:8f:ea:d0:ac:7d:1e:a9:61:60:49:6c:55:
c6:25:b9:bc:de:92:1b:66:d1:f3:14:52:2e:27:89:
0a:08:fe:73:3e:26:9f:78:08:ef:7d:cc:5c:51:70:
44:df:c7:df:ad:ce:b4:6e:3f:52:82:10:c2:5b:35:
7b:0b:af:c6:7f:5e:f4:41:07:8f:08:63:77:1a:68:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:F5:A4:1F:97:80:41:10:65:3F:4A:C3:29:41:6C:07:FC:83:AA
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bc:77:be:48:f9:69:24:9e:b6:dc:b4:45:c0:96:bc:ce:ba:
e9:38:ae:47:4c:75:a4:a7:8a:5b:a7:b7:03:b0:fb:5a:7c:5d:
49:7f:24:a7:56:04:31:f1:5d:d1:92:e3:2c:88:4f:d9:e6:e6:
08:4f:d5:03:2e:6d:7c:26:54:19:7e:5a:e8:4e:25:c4:d5:da:
9d:f8:80:9e:fd:73:bf:df:88:22:8f:04:4e:b2:82:17:d6:d4:
f1:77:b7:ec:b8:5c:92:69:33:b2:f8:78:bb:89:d6:dd:ae:d5:
3f:ef:9b:ff:f4:0a:e1:b5:2b:e4:bf:4c:ca:16:fe:d3:af:10:
39:59:2d:3c:4b:55:da:82:29:dc:db:e7:73:d6:0c:58:79:b5:
95:f0:ef:af:d2:5c:a9:5d:a5:6f:03:7f:5e:8a:28:7e:90:40:
6b:a8:f1:fa:9f:6e:8a:7a:cc:91:4d:07:21:27:d5:b5:41:01:
a1:d3:68:f3:42:32:51:16:16:b4:15:8d:0a:57:cb:6d:02:ba:
36:90:40:15:64:24:56:74:cc:f9:14:21:2e:06:ce:a3:a7:99:
a8:d7:14:c8:15:35:be:5b:9b:80:6e:0a:c5:53:55:e1:71:ae:
5f:e1:f5:cf:dc:f1:55:4a:18:db:f1:2d:33:2a:17:fd:c1:56:
4c:b4:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:50 2025 by rpki-client