Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: 57mja4rTzxRbCMD1L1Eu3jRDWNEnHtMHGz+Sq3AHrAo=
Subject key identifier: 5F:8A:D5:68:BE:BF:20:33:44:28:CC:79:62:28:8A:F0:D6:BA:63:21
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 01964A0EEE62FA2C5F7E4CCFB457203A0568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 18:00:14 +0000
Manifest this update: Fri 18 Apr 2025 18:00:14 +0000
Manifest next update: Sat 19 Apr 2025 18:00:14 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: izzj8KEusBulBjZiGcqLRueA/KPmhlRC3eyua+c9PJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:ee:62:fa:2c:5f:7e:4c:cf:b4:57:20:3a:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Apr 18 18:00:14 2025 GMT
Not After : Apr 19 18:00:14 2025 GMT
Subject: CN=5f8ad568bebf20334428cc7962288af0d6ba6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:23:0d:05:77:8d:fa:2a:51:12:54:4d:40:
70:65:ac:f4:9f:79:a5:e0:e7:68:f3:d0:df:fc:70:
56:16:32:11:db:79:26:75:38:30:4e:72:a0:13:b9:
29:b0:b3:a2:c7:55:75:4c:8b:84:8f:68:99:67:ad:
6d:ef:70:2e:5f:14:8a:12:cd:a3:6c:24:bf:4a:25:
44:c4:4e:10:3c:6b:ba:41:07:a9:67:29:64:63:b9:
f5:67:f3:a8:d0:b8:ca:d0:03:f5:0b:5f:70:4f:a1:
4e:7f:b7:dd:0b:3b:35:73:72:93:82:78:ea:71:0b:
15:69:17:e8:e6:c5:cb:9a:55:91:0a:cf:93:f3:4c:
84:8e:bc:d2:d1:8c:3b:84:3d:f5:3e:8f:06:63:80:
44:48:ba:91:d6:4a:9d:8e:51:34:8b:5f:fe:5b:79:
39:eb:b6:1f:e2:d4:08:d4:cb:43:26:58:46:8a:bd:
6b:22:10:60:a3:fa:32:f6:a4:74:3e:a4:65:ce:ba:
6d:7b:42:b8:2f:69:17:3f:c7:26:3f:2c:34:20:12:
3d:00:56:be:e7:26:a8:20:95:6c:ef:bb:2d:af:4b:
b9:36:42:4f:a9:fb:da:44:7d:52:9e:5f:ab:6a:2b:
b0:f2:09:ee:ad:95:87:13:b9:a7:2e:55:2d:b0:8d:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:D5:68:BE:BF:20:33:44:28:CC:79:62:28:8A:F0:D6:BA:63:21
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:39:26:e2:20:03:f4:15:38:8c:ab:01:8b:65:36:c5:18:43:
6d:55:05:c6:42:53:a2:d8:b1:02:6d:c4:97:1e:99:96:38:33:
15:73:29:bf:d2:de:29:7e:21:11:bf:bd:b3:7e:ad:e2:bb:51:
0e:2c:bd:fb:7a:e8:01:86:d5:ab:3b:98:20:97:33:94:9a:0c:
34:17:ee:9a:bd:25:8c:6f:3e:6f:c0:f1:71:9e:be:8c:e5:61:
21:be:ed:8b:f6:69:93:5b:4f:ca:72:85:22:f8:52:95:a8:7d:
a8:a4:9a:4f:95:4b:6f:69:68:5b:7c:ec:4d:fc:f8:f1:df:b1:
66:19:8f:43:54:df:eb:fb:1a:6d:d4:52:2c:9b:b1:da:69:b7:
4b:88:96:58:e2:a7:36:4b:d2:ad:41:e0:04:c2:14:06:ed:16:
cb:a3:89:1f:61:73:aa:85:38:a2:35:2d:4f:2d:ba:b4:9a:11:
11:8f:80:4f:2a:58:76:c4:73:c5:e6:b2:b0:b4:c0:f1:f4:3c:
1a:48:26:2c:8f:ab:03:5e:17:f0:a4:a6:2b:6e:d7:03:60:c1:
25:25:12:2a:7d:61:38:9e:b7:ac:74:c9:69:02:85:e8:88:e7:
40:8f:f6:11:4e:78:87:d7:ac:28:1a:51:a0:25:9a:50:17:4a:
fe:fe:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:30:21 2025 by rpki-client