Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier: yC5jxTZn6bb1NlRENMKzWKMhrMIqsg6dfANMPXCWQ0s=
Subject key identifier: 04:FD:7A:85:89:F4:CF:C8:35:77:7B:F9:17:B3:5C:E4:4C:21:D1:AA
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial: 019654933D0D68F8939D6884CD847EA88669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:57 +0000
Manifest this update: Sun 20 Apr 2025 19:00:57 +0000
Manifest next update: Mon 21 Apr 2025 19:00:57 +0000
Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: 9dJ4HzaETchDGOQZksgpMdb6aNQeJVwLOvghSod81Ww=)
2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:3d:0d:68:f8:93:9d:68:84:cd:84:7e:a8:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Validity
Not Before: Apr 20 19:00:57 2025 GMT
Not After : Apr 21 19:00:57 2025 GMT
Subject: CN=04fd7a8589f4cfc835777bf917b35ce44c21d1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:1f:e6:80:a1:17:af:44:06:c3:6d:53:cc:
4b:87:ba:c4:80:f8:52:c9:f8:c8:2a:25:d1:5a:b6:
74:21:9f:2e:d7:c5:f0:62:b0:62:b9:6d:6d:72:e6:
fe:f1:ee:93:14:e8:0b:43:b7:da:9c:06:c0:53:d1:
a2:98:b3:09:9f:db:85:62:ef:77:51:e5:29:7e:12:
98:3b:51:73:80:88:95:cd:b3:7b:22:34:92:43:c7:
12:ef:58:68:f0:7b:00:e8:b9:1a:9e:e7:f6:03:33:
3d:6f:9b:4f:e4:85:a7:89:6b:21:42:c7:e3:16:e8:
ee:82:ea:11:fd:ac:87:9d:4e:f3:95:e2:54:1e:1b:
92:67:03:5f:fb:b3:f5:80:2c:47:e0:83:9d:a3:30:
1b:19:a5:6f:2f:95:a2:fa:d1:f1:89:52:d0:39:ac:
24:36:25:19:9d:b2:0a:a1:9c:ff:28:7c:af:61:07:
d9:66:04:34:95:5c:41:50:7c:34:bb:71:45:33:46:
3e:3f:e1:92:6e:a2:16:04:53:df:13:59:a7:c8:f1:
a4:55:c9:9e:8c:7b:82:54:fc:16:23:bd:85:fb:f8:
e5:46:ca:2b:42:17:bf:8b:84:9a:08:39:3f:6c:4d:
b5:80:67:94:a6:cf:39:d4:e3:37:f0:61:10:28:e9:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:7A:85:89:F4:CF:C8:35:77:7B:F9:17:B3:5C:E4:4C:21:D1:AA
X509v3 Authority Key Identifier:
keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:cb:23:79:1e:e0:a0:ec:13:11:95:6d:0e:78:8c:ed:92:
cf:92:e4:c0:ea:c8:36:fe:64:81:4e:a2:20:3c:82:ad:01:0d:
7a:e8:0c:f6:4d:df:7d:01:1f:26:85:00:79:a1:e6:18:54:f7:
e2:fd:75:39:5d:29:ee:45:de:ec:cb:13:ba:75:9d:93:6a:f2:
c6:92:e3:03:d3:4f:9b:7e:f6:84:4c:81:59:7a:ba:88:07:f6:
e9:05:54:8f:68:16:5c:ac:7b:ea:a1:24:c7:61:71:0a:4a:e6:
53:47:fb:4c:e6:d0:42:92:46:83:88:b6:d9:f9:a7:3c:e5:73:
9b:fe:b2:42:f3:d0:00:a2:22:b0:bf:0f:eb:80:8c:34:4e:bd:
c1:ec:66:0d:60:3a:6f:be:61:87:f9:e9:7a:3e:03:5e:c2:1e:
d8:1a:2c:8a:af:80:68:3c:68:bf:8d:31:ce:4a:59:22:11:d7:
86:60:6c:43:16:00:18:35:8c:f0:31:3d:24:0c:ef:30:79:22:
9b:d4:ac:f3:bd:a3:2f:58:d2:a4:cf:0b:b9:ac:fe:9a:f5:9e:
37:4b:cf:c5:a5:80:cb:53:b8:f1:78:1b:f8:03:a8:4e:f1:68:
24:63:57:25:bc:d9:ad:03:f9:30:79:6f:d4:4c:0f:9e:bd:6e:
c6:87:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:46 2025 by rpki-client