Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: y2uMsrDnMJP0Qb92LdKPTJF1p537Ogk0Lq1WExYKyOs=
Subject key identifier: F9:FB:49:22:0F:FD:AD:F2:DC:52:5E:1B:71:09:E2:DF:E1:FF:39:F3
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 019660601502D2D543C7F679CD08DDF2A654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 06ED
Signing time: Wed 23 Apr 2025 02:00:31 +0000
Manifest this update: Wed 23 Apr 2025 02:00:31 +0000
Manifest next update: Thu 24 Apr 2025 02:00:31 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: GQQnGETRd5TBQ26Q8q/5qwN75aVwuqKpDe5I5xIhHr4=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:60:15:02:d2:d5:43:c7:f6:79:cd:08:dd:f2:a6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Apr 23 02:00:31 2025 GMT
Not After : Apr 24 02:00:31 2025 GMT
Subject: CN=f9fb49220ffdadf2dc525e1b7109e2dfe1ff39f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:c1:c5:09:aa:3c:31:c0:5c:cc:fc:8c:f5:
35:07:17:96:65:95:9c:21:73:03:e2:f8:15:9b:ad:
79:90:5c:a8:6d:68:e1:b7:19:1c:a5:80:32:8d:88:
20:ec:5d:ec:1c:58:f0:f2:ae:38:af:72:96:74:d8:
d9:68:28:55:86:ca:ca:f8:d6:b7:86:f8:00:0d:35:
a0:85:b2:c9:09:e8:61:9d:5b:fa:c6:c9:1c:97:c8:
7a:30:f9:d6:f9:64:59:51:43:b4:12:c2:95:7c:17:
94:f4:23:d9:da:da:29:9e:2e:06:b9:c8:7d:94:79:
cc:b3:56:cf:63:93:d0:e5:fa:fc:cc:e9:59:70:a0:
54:26:39:70:8b:60:5e:33:be:15:e9:cf:8b:ec:22:
bb:82:f0:14:80:33:ae:b1:98:b8:ea:39:3f:fe:94:
84:d3:b7:bb:70:3c:5d:2d:2a:93:1d:4d:f2:a9:33:
16:d0:43:45:88:4b:4c:d3:8f:40:03:ac:0c:be:3e:
d5:36:6a:e8:0f:15:14:0d:2c:67:f3:ac:5b:c9:50:
cd:04:fb:c2:bb:8e:e0:56:64:2a:bc:59:6a:7c:f6:
89:28:f8:98:9e:f0:16:65:be:15:38:7a:6c:66:bc:
4f:c4:a0:de:d4:02:35:80:e9:3d:81:83:f6:e9:0f:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:49:22:0F:FD:AD:F2:DC:52:5E:1B:71:09:E2:DF:E1:FF:39:F3
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:93:20:d2:19:83:4e:0f:d5:59:f9:e5:87:b4:49:5b:c4:2b:
89:96:d5:d2:4b:e3:4a:ac:30:d8:40:54:82:52:f9:1b:2d:d4:
f0:90:0b:98:40:ee:a1:93:57:83:02:15:43:28:b5:f5:33:90:
ca:78:43:e8:d2:48:11:4a:e5:81:39:4e:c0:a5:51:15:bb:4e:
d1:e7:cd:be:c3:13:d5:9a:62:7a:0d:c8:2c:e7:31:d5:00:21:
ff:4d:d0:3c:00:e1:60:9a:75:07:40:b7:20:42:7d:28:9f:ad:
7a:cd:34:80:b1:a3:97:4e:5f:35:b5:87:23:0d:2a:ce:fe:15:
5d:bc:9d:be:42:d2:02:11:c6:b8:fb:80:b1:68:36:bf:4d:8d:
18:47:12:6b:f0:16:c7:3e:4d:d4:ec:40:d7:58:b0:3d:47:96:
d6:ac:fd:9e:0c:6a:ba:f0:1d:4b:f3:fd:b0:39:96:8d:99:4d:
4a:c7:24:b7:49:cc:e5:ad:cd:00:3c:d9:7b:7e:77:00:1c:7f:
78:98:e1:02:53:39:82:bf:18:2a:62:73:ec:6e:60:7a:5d:ba:
89:b0:bc:4f:3c:3a:d1:f8:65:49:98:24:45:90:ac:78:c1:d7:
01:c1:74:68:43:47:32:3c:c0:4e:bd:c8:40:a4:06:4e:a3:67:
d5:68:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:10:07 2025 by rpki-client