Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: fzRn3DtIYxftHSjRaxcqTpXVyYDPlcuISEXtNs0Ppn4=
Subject key identifier: AA:2E:6A:58:09:79:DE:97:F8:2C:B1:F0:73:F5:1C:87:4A:B2:8B:5C
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01958BBBCC94160C129DABA772D0245B8E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 19:01:35 +0000
Manifest this update: Wed 12 Mar 2025 19:01:35 +0000
Manifest next update: Thu 13 Mar 2025 19:01:35 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: 1qzJDb9HH4Qk9glRyFnFNsX2838O+FDS2YO2CqCQQW8=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:cc:94:16:0c:12:9d:ab:a7:72:d0:24:5b:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Mar 12 19:01:35 2025 GMT
Not After : Mar 13 19:01:35 2025 GMT
Subject: CN=aa2e6a580979de97f82cb1f073f51c874ab28b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:7d:a6:13:34:1d:60:da:5c:ca:4e:7a:c1:
38:80:e6:38:d4:2b:91:b7:c2:1b:18:4c:7a:16:e6:
f8:0d:2b:e9:30:36:e6:8d:9f:75:24:ff:74:f3:a9:
a4:e9:cc:5d:3e:a4:a6:f0:7e:46:9c:9d:18:f8:e7:
c8:47:96:36:88:cc:cf:b6:43:3f:f7:00:54:bc:76:
13:6b:98:1e:44:cf:55:1f:66:c8:7a:77:6a:71:fb:
1a:53:9e:a1:39:d6:c5:46:4d:54:22:1b:a3:b8:82:
fa:df:ca:af:de:2c:46:15:8a:ba:5d:b5:bb:65:86:
a6:2f:cd:43:69:6f:d5:92:36:f4:48:02:5b:ce:e1:
03:0c:fc:a9:69:fe:33:52:33:d6:b4:db:0b:4d:3c:
3d:5a:67:f7:1c:ce:cf:5f:4a:34:4b:7a:65:0b:0d:
cb:95:fe:98:ed:23:fc:b1:fe:5d:92:93:ab:5f:29:
43:6f:49:fa:b4:08:5e:79:8c:b7:25:c9:bc:4d:42:
21:6d:10:4b:b7:eb:14:b6:c5:8e:d0:2b:d0:ed:e0:
b5:1e:7a:a1:85:19:9e:ba:83:de:cd:2a:f2:a5:39:
58:80:85:22:46:01:2d:1a:f7:3a:6f:9f:b6:ef:2e:
a9:a5:07:be:72:7d:38:f8:a5:cb:dc:a9:49:d0:ba:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:6A:58:09:79:DE:97:F8:2C:B1:F0:73:F5:1C:87:4A:B2:8B:5C
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:05:c7:4b:e9:09:ca:df:55:e8:48:f3:ef:37:96:0c:7d:
e7:85:a8:dd:9b:67:45:07:c9:15:b3:a6:2a:16:6e:22:6e:d5:
58:91:3a:c3:78:c7:fc:0a:2d:12:0e:53:81:0d:f2:95:b7:49:
29:35:a4:dd:ad:fb:e0:2b:ae:35:77:26:7d:b5:55:16:5e:ce:
80:ca:c8:be:c8:19:01:df:4b:73:28:c3:e2:9e:b9:c0:ad:74:
08:10:c4:ee:9f:49:4a:38:1f:db:47:bd:59:c0:45:f5:92:db:
bf:08:7c:87:d3:06:04:fe:4d:cc:21:aa:24:32:0d:02:ef:f8:
7c:46:f3:68:36:8d:43:db:54:03:71:a3:6c:02:c8:5d:76:4f:
23:bc:66:e1:81:8d:d5:a4:61:f4:05:69:dc:cc:78:02:8d:7c:
f3:6d:2d:3f:a1:90:e6:2e:4d:cf:84:73:57:38:9d:72:d8:12:
aa:f4:d9:a4:84:b2:1b:e0:38:1f:2e:9d:6a:d0:42:e8:67:a1:
a9:6d:4a:74:54:04:71:c8:a8:12:f9:2a:9a:fd:98:ff:d5:e4:
bf:33:0d:ad:b3:19:c2:c9:6f:e0:f5:e7:1f:0f:51:02:9d:b1:
d3:1d:13:03:20:69:23:ed:57:3c:9d:d2:85:d4:00:bc:9b:b6:
00:d6:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:34 2025 by rpki-client