Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: dE3TZHNOGw061EQ/Mr4YlixK/Xq/uqITr7QRQOZtfwI=
Subject key identifier: 4C:32:38:65:41:51:0B:B7:8A:96:44:9D:73:76:42:DD:3F:43:3C:0B
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 01963FF9221D3113E9D194D0CBAA481653BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 19:00:13 +0000
Manifest this update: Wed 16 Apr 2025 19:00:13 +0000
Manifest next update: Thu 17 Apr 2025 19:00:13 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 9OPfal0NDuAADknuYHQLBRD2FHprA5QY2FuPli15l4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:22:1d:31:13:e9:d1:94:d0:cb:aa:48:16:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Apr 16 19:00:13 2025 GMT
Not After : Apr 17 19:00:13 2025 GMT
Subject: CN=4c32386541510bb78a96449d737642dd3f433c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:2e:05:79:81:99:4e:96:d4:65:43:6b:24:
02:2d:9d:43:d8:91:85:fc:c1:5e:1e:72:7e:69:d7:
d2:76:ab:59:d9:5d:26:07:0b:b1:1b:02:6b:75:8d:
94:46:70:29:fa:a1:64:fe:78:fa:1b:92:31:1b:c1:
49:c0:fc:cc:5d:0c:aa:8a:64:5e:53:6f:7e:8a:9b:
90:e7:29:bf:1e:87:3c:db:e8:87:73:e6:28:0f:5b:
f7:f9:20:52:03:e3:f8:8f:28:ae:89:4e:99:f5:8b:
0d:f4:cf:b8:bb:b3:bd:ba:a4:43:e9:78:fc:08:81:
8d:3d:63:3c:49:8a:6c:ec:dd:4a:9e:f0:e2:e3:6c:
90:f8:86:74:39:1d:2e:01:1b:d1:b8:fb:36:68:ff:
f0:08:4e:68:bd:20:2b:d4:94:98:26:20:15:2b:52:
67:da:c3:a9:d6:bb:3f:1b:7d:b7:13:7f:ca:95:15:
14:61:4a:4a:b3:1d:aa:ab:17:e3:b7:15:b1:33:11:
b8:3d:77:42:99:3e:97:e5:43:03:71:23:12:d3:6c:
9d:a0:ff:6e:24:e1:d2:d0:b2:ab:1c:ca:db:ec:c4:
fa:50:92:08:29:da:86:1d:10:ba:04:f8:4b:be:e5:
47:6f:b5:d1:cc:b5:f7:4b:85:85:21:ac:f4:e1:84:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:32:38:65:41:51:0B:B7:8A:96:44:9D:73:76:42:DD:3F:43:3C:0B
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2e:e3:50:3c:7a:97:fc:d6:d8:a1:07:f5:06:b2:5b:62:3d:
e6:2d:25:72:88:89:44:20:05:73:c1:03:a2:56:12:80:e7:f3:
6a:1c:b7:87:51:b9:f6:f3:cf:cb:73:77:fb:5d:35:66:32:02:
fd:21:d9:1d:73:89:c7:11:0f:5f:6b:74:fb:8b:13:e7:f9:5e:
3f:50:88:9c:e6:0d:d5:c9:04:32:b7:5d:fa:8f:c2:cc:18:9e:
e0:1f:de:ef:58:7f:7e:57:c4:ef:cc:e9:fe:4e:95:97:d2:b3:
e7:a6:3a:f2:90:2f:0e:31:0d:58:af:68:b6:e4:27:ad:48:27:
f8:26:7a:c9:f6:54:ca:09:19:3a:fb:fe:0c:c6:c3:3f:cd:26:
28:5f:dd:12:6f:d9:43:e1:9e:f4:b1:ce:2b:94:1b:c0:51:07:
7f:70:01:08:c1:17:3e:15:40:08:8f:50:a7:ce:b6:79:f3:07:
e7:0d:72:ed:9b:d8:8f:bd:34:7f:a1:fd:5e:5d:5d:b0:d8:30:
61:76:4e:52:30:61:e5:2c:4d:11:ad:d0:e6:3d:53:74:a0:bf:
14:11:d9:8c:5c:e8:10:39:17:9b:d3:44:4a:c2:1a:59:47:44:
7b:e6:62:06:57:c9:51:8a:c9:a1:45:fa:d7:71:ab:99:8b:f3:
32:24:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:42 2025 by rpki-client