Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: arpGVHTiSDxgSLE73cZWVTQstd73lIei5Rettsdl+hE=
Subject key identifier: E3:B4:AE:5F:C2:C3:6E:04:B4:F7:BD:54:4D:8B:34:A9:86:13:17:EC
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 0196575CA4BDE7AA1B8318F389B30B867CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0A28
Signing time: Mon 21 Apr 2025 08:00:11 +0000
Manifest this update: Mon 21 Apr 2025 08:00:11 +0000
Manifest next update: Tue 22 Apr 2025 08:00:11 +0000
Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: E/km9EaPwK0slfQWirtSUc/t5KQy3gHwxmByBXwusXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:a4:bd:e7:aa:1b:83:18:f3:89:b3:0b:86:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Apr 21 08:00:11 2025 GMT
Not After : Apr 22 08:00:11 2025 GMT
Subject: CN=e3b4ae5fc2c36e04b4f7bd544d8b34a9861317ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:6b:43:f1:03:9a:19:3b:91:bd:a7:41:a7:
d6:1d:0c:25:0d:a8:95:3b:14:ea:8e:c6:94:78:51:
66:d0:d2:98:4c:54:9b:2f:20:23:43:d8:06:4e:07:
e9:bb:e6:ca:ab:25:82:49:00:16:5d:b2:0f:06:db:
7f:4e:52:50:1b:5d:21:f3:67:a6:61:11:bd:2f:86:
44:b5:50:85:a0:9f:de:f5:0f:ef:16:bc:40:19:f2:
66:e8:ff:83:5b:f6:95:ff:d7:20:9b:c3:15:8b:8f:
4c:f8:ed:e5:3d:07:c0:12:e5:40:e8:d4:44:fb:39:
8f:55:b1:ad:11:59:81:f1:b5:bd:be:88:32:b4:b9:
1e:c4:4a:5a:9c:47:a6:e2:27:1a:b4:1b:11:7c:ba:
09:30:90:dc:97:5d:f2:81:b8:49:0d:1d:8f:26:77:
07:a9:79:ed:e1:19:87:2f:5b:1c:d9:a3:95:12:53:
76:e0:e8:94:a3:91:3e:5d:e1:ce:a2:53:6f:a8:c4:
46:5e:d9:bb:e1:2e:f3:d1:f0:09:48:4d:a6:04:83:
b4:48:fa:45:0f:15:1e:1d:49:4c:e0:5f:56:33:58:
01:99:48:79:47:0a:76:e6:a2:66:ab:d9:bb:f6:00:
5b:43:76:ad:8d:2c:0d:01:b9:3e:be:71:5f:86:72:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:AE:5F:C2:C3:6E:04:B4:F7:BD:54:4D:8B:34:A9:86:13:17:EC
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:fb:87:02:71:2c:d9:d4:0a:6a:e1:34:26:cd:ff:95:89:
64:d8:33:8a:db:80:73:07:4a:4e:5e:03:ca:3e:0a:32:4b:9f:
6e:c0:59:ac:4e:62:e1:7c:f2:4a:ea:e7:15:8b:23:28:de:77:
a2:e5:a3:d4:49:15:83:f0:fd:8a:4d:b7:72:6c:0d:95:5b:3d:
e7:a5:25:63:0c:3c:c5:61:23:2d:04:14:59:54:eb:2f:d1:1d:
f4:82:b3:92:74:8f:47:2c:e6:11:3a:c7:53:9f:ee:c0:d3:80:
79:32:de:a5:25:e0:f8:23:bd:d0:fe:cd:bf:f8:4d:4d:81:42:
75:09:40:5f:ec:15:4e:16:9a:d6:cb:4c:91:1a:90:60:d4:66:
9e:05:17:54:73:2a:e6:e5:09:4f:9b:77:b5:59:ed:97:e0:b1:
71:9c:0e:07:82:60:44:e0:ba:2a:15:70:14:22:16:67:b8:41:
9a:9e:cc:87:19:12:ab:cc:23:55:4c:b6:4a:ef:7a:b2:0a:80:
d7:34:49:8a:82:2c:4e:97:59:24:a9:e3:b1:65:b6:7c:f9:9f:
36:ba:45:73:ef:74:28:cb:72:e2:ce:61:9d:4a:c2:b3:4e:95:
5b:cf:70:a8:12:15:e9:a9:fb:66:0d:71:a3:54:ab:c3:f5:11:
a9:c9:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:45 2025 by rpki-client