Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: vFG798FH/soonC2+OJ84OSuYhxfgqmPPoZS+pU1JOIA=
Subject key identifier: AD:36:BA:61:82:EC:CD:4E:18:79:CC:A0:1A:A4:EA:75:11:AE:81:F9
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019653802B0E9091E295CD0B7251BB4A13F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0C36
Signing time: Sun 20 Apr 2025 14:00:30 +0000
Manifest this update: Sun 20 Apr 2025 14:00:30 +0000
Manifest next update: Mon 21 Apr 2025 14:00:30 +0000
Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: 7B+QF//iQb86nUs41wWHiOGtVntoGOUcM1LzaTSLiVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:2b:0e:90:91:e2:95:cd:0b:72:51:bb:4a:13:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Apr 20 14:00:30 2025 GMT
Not After : Apr 21 14:00:30 2025 GMT
Subject: CN=ad36ba6182eccd4e1879cca01aa4ea7511ae81f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:a1:f4:bc:f7:ba:b2:4c:1b:27:31:78:23:
ed:e1:48:42:82:a7:0f:67:e2:83:21:52:63:a9:08:
7d:58:59:a1:42:fa:fc:86:d3:e6:d8:15:dc:f9:92:
10:e9:18:a0:bf:e4:3f:83:e4:e8:e4:30:18:3b:fc:
bb:a9:bb:5f:42:70:a5:21:11:b2:7e:0a:69:66:20:
9c:d7:c1:e6:19:19:3d:f8:c2:da:9f:9e:6e:2e:5f:
84:69:81:5e:5c:52:2a:c2:cd:92:62:ef:10:7b:e2:
10:f1:3e:e2:31:4e:e4:f1:7d:b6:c8:18:9c:91:c6:
21:18:96:a5:c4:fb:69:e7:6f:86:33:ac:1f:e0:10:
e2:e6:17:ae:9a:50:15:bb:4b:a2:fd:40:0d:36:22:
4e:09:ec:3a:16:f8:cf:6e:f3:67:11:28:70:34:d8:
82:7a:be:a3:97:52:71:97:99:b7:af:e4:e9:7a:64:
9f:4a:1a:45:7f:5a:87:18:73:00:72:8d:37:3b:87:
c0:69:05:5f:2d:03:75:78:a3:b1:58:75:bc:eb:df:
47:49:41:02:ad:41:51:3a:9d:d5:71:90:5a:75:f9:
f3:28:98:90:dc:cd:6e:cf:bb:dd:c3:4d:74:72:c3:
c7:36:19:a2:b6:54:79:1b:54:2b:85:ba:35:a1:8a:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:BA:61:82:EC:CD:4E:18:79:CC:A0:1A:A4:EA:75:11:AE:81:F9
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:93:33:83:fe:9b:fa:4b:95:42:fd:76:e7:d4:87:9a:22:
35:e9:f7:d0:0d:e9:40:be:b9:3c:7e:7e:49:16:87:61:76:0a:
4d:1a:ec:9b:5f:2a:22:5b:b1:49:05:65:8b:9a:e1:14:63:d4:
10:37:cb:6b:1f:b2:4c:d3:b3:82:13:84:50:b0:1d:d7:27:80:
85:6d:a8:e1:9d:be:6d:7a:65:3e:7a:99:e7:cb:d0:ad:c7:c0:
c0:ea:4a:c3:aa:5c:62:9a:60:af:30:bc:69:ec:72:f3:fb:22:
f4:62:2a:f6:08:3c:5f:fd:1a:b6:58:df:5c:54:8d:c2:15:53:
7e:4f:ca:7a:e0:d7:c2:51:54:28:4f:e6:df:e6:88:8e:97:c9:
f9:5c:f5:41:38:51:82:a8:f6:ab:2e:1d:01:31:db:4b:07:26:
51:cb:e2:fb:9f:8d:77:89:f0:4f:75:8f:20:6e:82:0e:08:f8:
23:6b:ca:73:39:60:6e:a1:50:8b:08:45:1c:ef:ac:ee:dd:5f:
ca:10:19:be:8e:05:22:77:55:7a:47:9e:18:b5:5d:54:f5:b4:
d4:51:81:d4:56:73:56:b8:a8:14:b8:62:7b:03:79:41:f3:78:
23:0c:a2:51:19:22:82:cc:10:ad:63:a5:a5:81:45:9e:70:4a:
08:22:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:54 2025 by rpki-client