Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: d0MSLXaw9RhBPafiTp8akPqk3n9+LgBvywZ6/ARr9GU=
Subject key identifier: 0C:65:EF:77:82:BA:27:5D:E4:00:C1:0B:21:08:5F:2D:E4:29:C5:FE
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 01965237091FFB30AD15DE78F038C780F211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 08:01:00 +0000
Manifest this update: Sun 20 Apr 2025 08:01:00 +0000
Manifest next update: Mon 21 Apr 2025 08:01:00 +0000
Files and hashes: 1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: rOMe0MWKG8usBfdFZOLchbFAKUIoaGEHJMzlhiF+Nc0=)
2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:09:1f:fb:30:ad:15:de:78:f0:38:c7:80:f2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Apr 20 08:01:00 2025 GMT
Not After : Apr 21 08:01:00 2025 GMT
Subject: CN=0c65ef7782ba275de400c10b21085f2de429c5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:33:d5:a1:a9:31:29:45:e7:1a:c6:a4:64:
26:17:a7:30:75:d1:5f:8d:62:34:e6:3d:1d:b3:11:
f0:29:29:d8:8c:a7:0e:b4:85:70:3f:6f:3f:55:2f:
62:ad:90:08:61:ae:3b:df:10:52:ce:66:62:3a:3f:
a9:c4:20:17:5b:1d:f3:6e:a7:2b:3a:7c:88:4f:ce:
70:7a:3c:d2:5f:22:a7:7f:93:50:75:fc:40:a0:78:
db:43:a1:25:64:67:9b:9b:69:1d:fa:1f:84:a1:57:
88:61:4c:9d:bd:db:9f:0a:80:71:69:1d:91:8b:ae:
52:67:66:50:f7:22:df:60:d5:86:e5:d7:d9:78:1e:
3e:47:a9:e3:44:39:66:fb:c5:2b:37:e3:03:cf:45:
59:49:9d:40:50:84:e8:c9:80:9a:b0:24:59:82:8d:
23:5c:06:e1:83:23:a9:56:46:0a:3b:65:ee:b4:ca:
b6:cb:86:39:7f:2e:32:6b:1d:94:e9:81:4f:97:8f:
64:12:77:c7:1b:ab:d0:51:06:1c:17:e3:79:f3:02:
e4:5d:78:a0:c0:e3:14:48:fd:a8:f0:a4:96:ea:63:
7b:94:ce:89:ca:c1:1b:b8:88:54:22:23:34:cd:d0:
79:eb:21:11:a0:88:e5:bc:f7:93:f4:1d:5b:bb:40:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:65:EF:77:82:BA:27:5D:E4:00:C1:0B:21:08:5F:2D:E4:29:C5:FE
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dd:53:53:4c:20:5a:22:b9:d0:98:b3:a6:1a:56:be:06:49:
5e:b6:88:cc:be:4a:49:1c:03:9c:21:4e:78:33:d0:ce:c9:0b:
db:8f:e3:a0:5a:0b:85:60:a2:e3:a3:54:0e:f1:90:e5:9d:b0:
80:36:75:01:fd:0d:70:9d:6c:00:2f:61:0e:4c:7d:1f:be:f1:
bf:09:07:e5:a8:65:66:7e:43:77:a3:6e:8c:16:55:76:62:76:
5b:33:ee:34:15:83:d5:ca:df:1a:e4:0f:59:50:bf:d9:72:43:
91:54:cb:87:81:61:15:99:1d:63:48:fc:9f:a6:f6:10:ec:91:
82:c5:e0:d1:8e:3d:5f:88:44:2f:0e:e5:bf:97:b1:8d:d0:73:
a4:f5:ae:6b:85:b6:c8:a9:f2:8f:2d:23:aa:78:94:9f:c8:cf:
11:e0:dc:68:7c:bd:38:7c:7a:7e:ae:d2:d0:5f:90:f6:fc:46:
c4:0f:ba:f5:ea:67:37:0c:5b:bc:b5:f0:84:c4:63:66:55:1d:
f4:66:28:30:a9:30:8c:f3:55:e7:73:cf:07:2e:e1:93:28:2e:
3e:2e:7b:58:9f:df:6d:71:5f:86:30:1d:8d:48:8a:26:73:e2:
b3:b8:f1:76:b6:b2:62:78:d3:b7:34:1a:4e:fc:a9:18:26:92:
66:8d:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:26 2025 by rpki-client