Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: F2WA9iSwkVPDWlYOF+DOfaDMQa01+Zv4bS1VVBfHDWI=
Subject key identifier: 9A:1B:A9:3F:7D:BB:75:3F:48:D4:2F:4E:75:E7:C8:E1:36:49:3D:55
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019590AAE024625A2768415862599FC4E2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 11BF
Signing time: Thu 13 Mar 2025 18:01:12 +0000
Manifest this update: Thu 13 Mar 2025 18:01:12 +0000
Manifest next update: Fri 14 Mar 2025 18:01:12 +0000
Files and hashes: 1: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: 0u7zTtV/AXvAlSawmoREZWUSKIhrX4u/Ymr7c+HnVe0=)
2: faR7v_a9Va3-r60WSU_WaTJtc24.roa (hash: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=)
3: zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa (hash: NeJZaXwcRx4Bl+3WoFWMtQtTNrN4F35s8GQu8H57fPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:aa:e0:24:62:5a:27:68:41:58:62:59:9f:c4:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Mar 13 18:01:12 2025 GMT
Not After : Mar 14 18:01:12 2025 GMT
Subject: CN=9a1ba93f7dbb753f48d42f4e75e7c8e136493d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:5f:44:43:cf:a2:08:77:3d:5f:73:61:f7:
9d:11:b7:fc:c8:26:fb:af:0d:00:d7:79:ce:5f:ff:
bc:7b:c9:85:9d:53:70:44:f1:c9:74:5e:b1:29:c9:
f6:4a:7e:2c:62:85:fc:92:e2:40:86:48:f1:6d:72:
6d:2c:27:bd:27:cc:c7:e2:12:b9:b1:7f:32:f4:6c:
5b:0b:af:97:79:ba:5e:22:60:c6:8a:a0:4e:2b:9d:
0d:aa:5d:45:9b:f9:04:d9:9a:f0:eb:39:06:13:f6:
13:84:7b:a0:ee:c0:0e:f8:23:c3:e4:13:cb:e3:6d:
74:a6:4b:5b:ae:20:c2:9a:5e:d9:3b:fc:2d:63:96:
2d:06:84:a5:77:38:ab:c2:ce:91:03:eb:5c:ee:91:
11:f8:8c:01:56:61:d4:48:99:9c:5e:73:a8:63:55:
7c:e3:ce:24:60:6d:57:c4:db:89:7f:94:2a:93:04:
d4:e6:7c:42:aa:9b:93:90:57:10:38:cc:a9:97:23:
71:70:5d:28:7f:70:83:bc:c4:ab:b9:77:95:b6:11:
82:f1:d4:5c:94:d0:f9:c7:ca:2c:74:9b:d5:b7:e9:
3c:4d:e1:3e:4f:47:ca:6a:40:45:18:27:e7:e4:87:
f4:dd:99:4d:9c:b7:a0:a3:99:75:4b:5f:34:e1:99:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:A9:3F:7D:BB:75:3F:48:D4:2F:4E:75:E7:C8:E1:36:49:3D:55
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:23:fd:98:eb:7e:64:a0:33:dc:46:64:cd:7f:d9:36:3c:72:
73:e3:14:b1:e8:f0:b2:9a:f8:27:11:f7:68:4e:e1:8c:22:83:
86:37:67:1f:72:1a:9d:49:6f:c1:07:8b:cc:bd:f0:f6:c7:0c:
5d:38:f8:96:e5:1b:58:fb:50:1f:8c:ad:cf:44:d1:4b:7e:fe:
50:4c:92:cb:cc:1e:08:cc:56:91:7c:9c:f6:c7:8f:cb:78:20:
c4:00:54:8b:d3:08:21:fd:ef:b5:09:eb:e5:72:77:1f:3a:ba:
6c:8c:0e:5f:a2:52:68:a8:6c:98:db:f2:ff:3d:9b:74:8a:bc:
c3:99:c6:25:8b:52:4d:75:18:fa:29:77:ac:d7:4e:58:ac:6a:
50:31:5c:fe:b6:3f:2c:ae:d7:2d:f6:00:48:0e:b1:99:32:f5:
7d:8b:d6:17:ce:5b:6e:ec:49:08:82:f3:09:ba:80:b5:f3:7c:
88:4c:7e:29:a2:c6:b9:c2:bd:13:54:bf:f4:1c:4a:c1:66:c9:
da:25:1c:f8:48:29:56:03:0f:e8:fd:9c:dd:dd:8d:6b:85:0f:
00:8d:8b:48:49:1b:10:7d:ed:0d:73:30:2e:ed:a2:5d:9c:e1:
47:5a:e6:6b:27:b2:63:40:09:83:cd:40:e2:88:a7:e5:13:8e:
e7:9a:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:40 2025 by rpki-client