Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: CLJQJ5DsO8kA5yjM8lF4j2GUSwHvRMRPzDuVT6JQb8g=
Subject key identifier: 68:C5:39:74:85:05:32:16:84:F3:05:32:8A:D8:56:DC:47:B0:E3:9F
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 01962AF2EBD32589C9BC321023DC556458FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 17:01:25 +0000
Manifest this update: Sat 12 Apr 2025 17:01:25 +0000
Manifest next update: Sun 13 Apr 2025 17:01:25 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: JiSLI5cXVr1weM+6D4MUwEidWIgGwNZ6JP6rkvhFnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:eb:d3:25:89:c9:bc:32:10:23:dc:55:64:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Apr 12 17:01:25 2025 GMT
Not After : Apr 13 17:01:25 2025 GMT
Subject: CN=68c539748505321684f305328ad856dc47b0e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:7d:6e:de:2e:15:a2:1b:0f:b2:7b:46:0f:
f3:1e:c9:42:19:a8:4d:0b:9c:2a:67:1f:32:60:a8:
a1:47:f2:27:97:8c:b4:22:4a:27:24:ca:f6:0a:c0:
79:9d:3a:05:cf:30:69:a8:91:cf:3f:ea:34:ec:88:
85:7d:d4:33:bd:a4:4e:26:fd:9e:62:36:3e:1f:cb:
0a:13:e8:d1:59:5b:4b:0a:a7:ee:e6:c4:30:0b:99:
92:a1:4e:0d:57:71:64:e2:de:50:cc:ae:8f:82:a5:
c1:89:3f:ed:12:8a:e7:87:ab:38:e9:b5:cf:e0:9c:
ce:4b:0c:4d:fd:c0:d5:a3:63:98:af:d7:a9:64:a2:
50:e3:e3:16:07:63:6e:96:a5:75:d8:47:4b:7b:35:
7f:3c:61:f4:ea:a8:b6:10:5e:f7:ee:dd:0b:7e:20:
95:fd:bc:18:eb:13:bb:23:50:e8:c1:22:53:cf:19:
57:6c:e0:82:71:88:42:3b:2a:41:08:5e:95:64:22:
11:21:66:21:68:50:1c:6c:fb:ac:e8:22:ca:25:db:
08:13:7e:47:43:22:25:e2:1d:d1:13:d5:d9:06:1c:
3d:1a:69:5e:f7:78:fa:60:b5:b3:9b:24:3e:55:55:
3d:02:0a:ca:80:00:2b:27:95:21:b9:de:fe:95:a1:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:39:74:85:05:32:16:84:F3:05:32:8A:D8:56:DC:47:B0:E3:9F
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2b:0a:2b:5d:12:f0:e1:7b:5c:47:01:bd:a5:ff:d8:82:e6:
c0:f9:17:02:88:f9:88:c7:dc:14:8a:0c:f0:7d:13:c9:9e:b4:
80:c7:46:e5:a6:cd:60:49:e0:1a:d0:b7:6f:52:af:18:37:1c:
e2:8d:b5:b5:05:79:fc:36:b5:13:0f:04:7f:97:82:cb:b4:7c:
b1:6a:a6:f5:f7:a9:99:cf:25:6b:0a:12:ea:0d:90:e2:30:46:
7c:0b:d2:7e:67:b9:4c:92:88:74:b4:71:49:c3:cf:38:c0:53:
f4:ff:44:23:6f:80:65:03:16:e3:07:3b:64:3b:d0:eb:98:95:
c4:fa:f3:dd:12:41:94:77:34:e0:b9:75:6e:59:15:e4:05:03:
47:b8:f8:7f:a4:37:3a:54:67:69:cb:08:8d:6c:46:d7:26:40:
69:ef:70:ff:f9:4e:10:93:e2:b8:82:a4:60:2c:eb:ad:d1:4a:
51:31:a2:51:a3:bb:4e:a5:19:48:2b:05:e8:10:39:f7:f9:59:
a7:0b:c7:c6:0c:7a:d9:1a:61:a3:ab:53:73:3c:96:21:1e:81:
f4:f5:b7:88:4c:11:06:e2:ea:23:47:c4:40:3e:d1:d2:99:ff:
cb:58:09:89:b2:fb:9c:10:b2:58:e3:c3:f7:34:9a:48:5b:ed:
f9:e1:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:01 2025 by rpki-client