Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: GgYSETnQ6kEPygjrPnabPzl5gqVoEBAkaoMMLfXYzY8=
Subject key identifier: B1:F2:D4:AC:85:92:FC:A8:47:92:5A:29:94:81:2A:EA:D4:C8:20:56
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019642FAB9E05CDD0CC2119B2AAE78C9E8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0BDB
Signing time: Thu 17 Apr 2025 09:00:49 +0000
Manifest this update: Thu 17 Apr 2025 09:00:49 +0000
Manifest next update: Fri 18 Apr 2025 09:00:49 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: jISmGtbZcFHjLLJ1OesB/2S9XuVWXz6/q6RnA4wcoOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:b9:e0:5c:dd:0c:c2:11:9b:2a:ae:78:c9:e8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Apr 17 09:00:49 2025 GMT
Not After : Apr 18 09:00:49 2025 GMT
Subject: CN=b1f2d4ac8592fca847925a2994812aead4c82056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:31:b1:ce:60:a0:4f:f0:60:2a:d5:31:c4:
27:92:ad:30:f4:2d:cb:ab:f6:a4:ed:86:41:b6:fe:
36:3c:60:e3:ed:dd:34:a0:b2:28:5e:d8:a7:a6:a1:
61:6a:18:2f:3c:cf:24:9d:f5:6d:ba:a7:fe:e0:44:
fd:5e:26:d8:1b:27:da:2e:fc:8b:e8:7c:41:36:f9:
87:d9:cf:47:79:4a:2d:ae:97:2f:d8:d8:e3:59:ef:
8f:8c:9c:b8:05:fe:d4:21:fb:63:91:da:71:b0:98:
73:bc:cc:62:6f:2a:5a:d3:3f:8b:04:5d:2a:34:91:
38:0a:f8:db:c9:79:57:86:52:7f:26:43:25:02:2e:
21:e3:06:36:90:70:77:22:99:52:69:1a:c1:55:b1:
b5:83:fa:8b:bd:cc:4b:2c:e6:2d:cc:db:17:67:fe:
e1:8e:8d:18:2e:b1:a3:89:47:7b:2b:ff:e1:77:37:
3a:48:e5:07:98:78:e5:80:f4:79:1b:eb:fa:4b:5c:
23:19:36:1f:02:a8:39:2a:6f:42:a6:c4:dd:c7:20:
42:37:16:9d:dd:19:7f:b5:cb:e9:72:ee:02:f6:ce:
bf:62:99:37:ab:44:c3:53:70:fb:7a:1a:7e:14:c8:
7d:53:6a:6f:b6:ec:fd:d5:21:fe:ad:1c:d2:39:44:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F2:D4:AC:85:92:FC:A8:47:92:5A:29:94:81:2A:EA:D4:C8:20:56
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:93:df:b8:d1:7e:fd:b7:6f:09:50:e3:cf:20:b8:1e:49:0d:
24:12:b1:bf:31:ae:e3:0e:bc:7b:f0:de:bb:54:05:4a:da:e4:
0f:de:9e:6a:c5:80:5b:1b:7b:93:06:8f:81:65:14:8f:cb:a7:
9b:0f:11:0b:5e:61:6d:2a:41:75:1a:83:10:72:ef:82:13:ef:
3a:07:27:77:76:98:d6:8a:a9:58:ce:0d:6e:6a:cf:c6:78:bd:
64:0b:9c:4e:28:3e:f8:3e:18:a6:71:19:7a:56:01:7e:db:e8:
dc:a0:3e:08:4e:b5:48:9f:5d:0c:4c:c4:4c:85:1b:7f:01:74:
8d:5e:92:07:ff:89:da:04:04:81:92:b0:92:19:44:87:28:86:
c8:6a:75:ae:7a:6d:f9:58:b3:95:94:c4:32:d0:41:57:61:ba:
87:5a:d3:e8:1a:08:f7:13:84:ad:56:71:01:e0:c1:21:82:f3:
91:4f:d7:7e:ba:85:2c:d8:65:ad:b0:03:e6:dc:c4:15:90:ce:
6d:10:38:22:00:96:f2:85:c0:bd:57:ee:5a:c8:e8:e2:1d:c6:
c4:cf:41:ec:0f:96:79:67:23:11:35:7a:89:0a:66:ac:5a:83:
a7:ba:e1:7d:20:f8:36:3a:55:ae:d7:e4:fb:f9:a2:66:5d:75:
f5:72:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:53:51 2025 by rpki-client