Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 6qbLbrQHcDbfC/Ssq9CvVbGAtyK0Goxg0TseLQUgHIc=
Subject key identifier: 84:EE:77:32:FA:C8:46:FD:D1:F7:A8:94:30:13:C5:F1:EC:48:42:AA
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019655DD21516DE29BE083FF24D8FAB2DCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 120A
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: W7Ou2rgELzwguYEcoMfV5H5vrOy0E0BoeWT+bWMU8ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:21:51:6d:e2:9b:e0:83:ff:24:d8:fa:b2:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=84ee7732fac846fdd1f7a8943013c5f1ec4842aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:44:2a:9d:f8:01:92:a1:be:32:1a:38:8f:45:
24:87:97:03:77:ad:90:1c:62:0e:b1:07:fb:47:6c:
15:44:a9:d4:6d:73:d9:d9:4c:5b:a4:b2:ea:42:53:
23:6d:ef:73:89:6b:ca:31:a6:ef:9f:51:55:a4:82:
6a:9c:4b:a5:7d:af:ea:50:ee:6e:57:42:b8:7b:23:
ba:83:7d:08:05:e3:bc:bd:3b:8f:a9:1d:4c:e6:93:
ab:97:58:93:d5:9c:e9:fe:e3:7b:61:2d:0c:90:2a:
50:3a:a2:e2:b9:14:9d:d4:6a:99:97:ca:d5:7e:fe:
ec:b6:70:2b:75:ec:a0:65:be:99:59:c0:a0:0f:e8:
83:fd:64:2d:e5:af:71:37:c8:94:ae:cc:d0:d8:0d:
24:65:d4:a0:05:b8:44:24:27:0d:d8:50:11:72:30:
7e:6b:71:5e:70:4d:77:a1:8f:3b:75:fc:82:1d:44:
b3:66:82:1d:1c:cc:79:8a:48:b3:7f:96:11:7f:56:
7f:8e:76:11:c0:c2:7e:e4:12:f3:c3:0f:85:9b:1f:
33:1e:b1:44:fa:3f:a8:57:9a:b6:67:91:13:c4:57:
f3:ed:ff:05:47:ae:d9:16:88:fe:01:97:88:44:31:
68:17:73:76:d8:dc:87:d5:f9:77:23:fc:ba:9c:6e:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:77:32:FA:C8:46:FD:D1:F7:A8:94:30:13:C5:F1:EC:48:42:AA
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:6a:cd:a7:6c:85:52:85:55:3f:1a:c5:f4:14:b7:f5:5a:
2d:b9:1a:c2:d0:82:88:bf:9f:7d:2c:ce:63:c0:9e:6c:bf:10:
cf:2d:d2:e9:53:02:d2:39:17:6c:15:34:cd:75:59:82:17:de:
41:4c:df:e4:bc:e7:0a:3e:fa:35:13:69:ea:7d:7e:14:73:78:
39:fa:8d:43:c9:56:2b:cf:91:9a:e7:15:17:d2:ae:38:04:74:
fd:fe:02:bd:11:29:5a:cb:ae:52:df:b7:47:d2:80:56:e7:59:
f6:3f:d3:66:10:e3:b4:47:37:c4:da:4c:3d:cf:76:a5:8f:77:
99:5f:93:96:57:87:63:71:5a:b1:a5:b0:c1:89:6c:1f:8d:e9:
04:ef:43:32:d5:a4:12:04:eb:35:f3:5e:91:f6:55:54:3d:9c:
77:42:96:d7:46:78:62:7d:16:70:87:82:64:08:cd:d6:1f:82:
69:54:a8:42:3d:c3:d2:33:b2:84:ac:12:a3:48:28:cf:ea:9e:
d5:8d:48:9a:c4:b7:cc:98:49:d0:ad:ac:03:e2:ad:20:63:d2:
af:61:89:17:03:ef:cb:b0:6c:2e:53:8a:85:81:d0:c3:52:5e:
ae:5f:4e:fc:a1:1d:71:aa:8c:1b:01:53:62:e2:5f:37:59:0f:
d6:5e:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:05 2025 by rpki-client