Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: awqKkjPsfW8Jf3Km8ObBkdHWm4VIUbYaIfX6qjbGRhU=
Subject key identifier: 75:2E:C8:06:24:20:44:DA:0C:D2:87:36:5A:6A:04:F2:2C:9C:04:11
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0196458D78FFCD55C0A21CC2AAD9ABDEBF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0D7D
Signing time: Thu 17 Apr 2025 21:00:21 +0000
Manifest this update: Thu 17 Apr 2025 21:00:21 +0000
Manifest next update: Fri 18 Apr 2025 21:00:21 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: vKQTaEt8tFPoAhJD7B+dyLczoQXwXH96y92VgjZwiOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:78:ff:cd:55:c0:a2:1c:c2:aa:d9:ab:de:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Apr 17 21:00:21 2025 GMT
Not After : Apr 18 21:00:21 2025 GMT
Subject: CN=752ec806242044da0cd287365a6a04f22c9c0411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:0a:4b:4b:25:bf:bf:5b:fa:17:2f:99:ec:
7b:a3:e2:41:e8:bf:7d:58:83:4e:65:42:56:9d:1f:
74:b0:dc:33:dd:03:00:ae:e4:ae:2c:c5:8d:e6:e1:
25:df:e5:b9:49:39:b9:26:52:85:fa:55:cc:ff:5c:
bb:88:59:29:99:2a:1c:ed:de:de:18:2c:0d:da:e0:
76:26:09:08:09:9f:0b:66:35:f2:21:45:0e:c8:5d:
0c:70:28:2e:49:51:93:c1:22:d9:5a:7a:a4:d6:54:
ea:55:bc:6b:dd:48:a1:58:1b:40:42:6a:af:3e:f3:
c3:de:5f:99:7d:3b:64:7c:75:e9:a8:20:f7:1b:8b:
f2:af:05:e8:53:cc:97:00:f8:77:69:01:37:10:d2:
e3:3f:2c:09:77:d7:ff:ac:71:37:4f:11:5c:1d:91:
e5:e2:1e:78:62:5f:a8:4d:96:8e:a1:d5:4b:ce:2b:
25:1a:c3:50:23:e6:b0:6e:3e:cf:30:a9:eb:85:a9:
59:ff:00:aa:ff:04:4b:8b:39:02:db:25:4d:16:95:
d0:d9:f1:bf:80:3a:1f:79:41:d6:35:51:f9:89:d2:
27:36:c6:74:0e:24:c2:35:3d:be:10:22:39:59:f5:
33:96:2a:94:94:35:75:7a:a1:86:e3:ec:90:98:9e:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:C8:06:24:20:44:DA:0C:D2:87:36:5A:6A:04:F2:2C:9C:04:11
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8a:ef:9d:f3:56:51:bf:7d:17:0c:2e:ec:c7:0e:22:a2:c0:
40:98:0f:e2:0e:7e:39:0e:f9:3a:e0:47:db:85:cc:03:29:ec:
ae:5c:1e:8f:a8:ac:a7:8b:b4:da:5c:c2:8f:8a:d5:dc:3d:09:
7f:c8:66:54:0a:52:76:f9:52:fc:71:ca:80:9f:97:13:0a:b1:
9b:7e:e3:9a:27:4e:f1:00:28:84:e6:1b:d6:6b:01:ed:ea:85:
44:95:4d:32:62:15:6e:60:52:88:e2:f8:56:0a:dd:1a:c3:a2:
fc:de:ea:a4:9a:14:4c:96:0d:17:df:f0:29:1b:6e:5f:7d:18:
32:47:fd:99:3f:3a:72:f1:5c:45:53:28:d2:f7:e9:71:d4:19:
19:71:a2:73:94:1a:67:5c:49:ad:1d:f9:9b:06:05:cb:32:65:
35:af:33:3e:9b:db:6a:08:82:dd:71:32:2c:32:17:60:a2:80:
9e:c8:13:6f:f7:44:9f:70:f3:4e:5c:f6:38:b2:c3:c4:98:29:
47:d0:7e:17:8b:45:fc:8b:65:b1:4c:30:ba:2f:79:49:c4:4d:
81:e0:97:d0:af:70:80:04:2d:d5:f5:83:b4:7d:76:cd:01:59:
42:b0:f6:de:ee:3b:83:41:4b:80:ff:5f:4d:b6:72:28:d0:e1:
90:54:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:30:17 2025 by rpki-client