Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: cnSKGgzxNVGKj94COv1nxZmGm71tBud01OOOMLDMrUY=
Subject key identifier: DC:A7:9F:30:E4:52:1F:1D:4F:5F:8F:89:23:FF:D9:E4:23:63:84:CF
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0196741DCA44BB7094E99EE948C88CDC650D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1514
Signing time: Sat 26 Apr 2025 22:00:31 +0000
Manifest this update: Sat 26 Apr 2025 22:00:31 +0000
Manifest next update: Sun 27 Apr 2025 22:00:31 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: dEDQsDGJ7H+0eFtQ5elliL+f4no9JvfzmUtNVbmRK44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:ca:44:bb:70:94:e9:9e:e9:48:c8:8c:dc:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Apr 26 22:00:31 2025 GMT
Not After : Apr 27 22:00:31 2025 GMT
Subject: CN=dca79f30e4521f1d4f5f8f8923ffd9e4236384cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:cb:a5:0b:c5:a5:94:93:dc:53:2f:a4:16:
9b:8a:3d:f6:4f:86:eb:dc:a4:c1:fd:c1:53:eb:3e:
30:f6:89:92:7d:6b:e1:33:67:13:49:b9:47:b6:68:
cb:99:7c:ed:92:08:ad:a3:5c:cf:27:52:20:4b:35:
5c:3a:5e:85:b8:97:f9:ca:a7:96:62:1b:34:03:d6:
7d:6a:74:c9:28:c5:74:c4:ad:c5:94:f6:e1:4f:b3:
c5:6c:0a:85:48:49:16:9d:e8:71:80:62:0b:e2:cb:
4f:fc:9e:c1:ef:69:32:c2:2d:86:f3:7a:5e:79:cb:
3a:2f:11:0b:81:e4:af:d7:83:ce:dd:d5:4d:07:ef:
8f:48:89:01:b5:09:ef:2d:84:94:6c:c2:8e:d3:a1:
00:35:ff:07:95:ac:d4:72:63:d2:81:67:fa:c5:3a:
d2:65:42:66:bd:6c:e6:ea:51:7a:68:74:4b:ca:45:
1e:9d:d4:96:df:f9:10:b9:44:9c:41:a2:fb:a7:e9:
81:7d:b0:fa:4e:c1:e8:f6:8e:30:92:94:d5:69:c4:
34:91:1a:9c:ed:5b:09:ae:07:ff:7d:d9:16:b7:06:
7e:a0:05:4b:f5:af:e7:6a:fa:26:82:c6:e1:51:a7:
9f:3e:6e:32:2b:66:99:85:1a:49:91:b2:cf:73:c7:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:9F:30:E4:52:1F:1D:4F:5F:8F:89:23:FF:D9:E4:23:63:84:CF
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e2:f9:25:1b:92:86:73:f4:96:a6:e9:4a:12:fe:97:38:9d:
f9:d6:0c:84:9e:6d:c4:43:a7:56:6d:f4:9f:8b:23:b7:48:91:
19:27:14:6e:5f:95:da:75:94:67:46:a8:cb:a6:96:bf:a3:ce:
8c:07:2d:20:a0:e6:b5:83:d2:77:48:cc:d8:83:9c:ef:f7:cf:
4b:cb:d1:47:aa:c0:f6:b0:90:d3:eb:dc:d3:0b:77:aa:32:d9:
9e:ec:d4:a4:4e:98:c3:15:0c:73:a3:5a:c3:72:5a:a9:1a:56:
0e:db:04:61:66:7b:4d:0c:99:0e:88:ad:db:ab:fc:c0:e0:b6:
e1:b8:30:1b:7a:6a:6d:93:d1:9b:83:c9:f9:4d:af:02:a5:10:
e3:ef:ba:1c:92:9f:3c:6e:72:6d:cd:0c:c4:8f:c5:12:eb:d3:
e6:e9:e3:4e:96:1e:22:64:1e:d8:d3:0d:5a:8f:26:07:b1:93:
c0:9a:47:88:6e:6e:27:59:c0:5d:f4:4a:06:82:fa:36:f6:48:
c1:21:84:37:d1:cd:ce:aa:79:65:cb:68:9c:66:37:03:3b:51:
a6:da:8e:59:d6:29:cd:c1:ea:02:4c:fa:67:f3:ab:62:1d:17:
29:27:97:6d:a2:80:82:57:db:ee:b7:b9:fb:43:c9:57:bd:c1:
bb:3d:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:52 2025 by rpki-client