Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: S309l72lq9iZS8sZ2ZdR2pYs8mzq+X2DFlSSNtGV6Kg=
Subject key identifier: D3:4C:B0:1E:8C:F4:AC:0C:54:CC:1A:19:CA:B9:FC:89:A3:18:32:A3
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 01968322FA2CDBE3EE4BE34FF2B1B6C7A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 0263
Signing time: Tue 29 Apr 2025 20:00:29 +0000
Manifest this update: Tue 29 Apr 2025 20:00:29 +0000
Manifest next update: Wed 30 Apr 2025 20:00:29 +0000
Files and hashes: 1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: ITWqlE6IdR95SyLElCE9jus63IK+WkSJfbJfrPVs92c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:fa:2c:db:e3:ee:4b:e3:4f:f2:b1:b6:c7:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Apr 29 20:00:29 2025 GMT
Not After : Apr 30 20:00:29 2025 GMT
Subject: CN=d34cb01e8cf4ac0c54cc1a19cab9fc89a31832a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:2d:b1:97:be:7f:4d:25:bd:e4:a0:2c:ee:
df:cb:e2:58:14:83:8c:e1:0e:47:44:99:12:f5:4b:
0a:26:71:50:c5:31:1d:45:be:f4:74:b8:2f:43:8a:
f7:5c:54:ed:a1:c8:42:bf:5e:34:36:0c:ce:7c:f4:
71:1f:70:ff:c5:63:31:28:79:87:a4:e2:94:c5:e9:
d7:d1:4c:b2:47:dc:86:7f:b6:99:23:70:c5:fc:81:
7e:59:1e:7a:0f:eb:17:5a:6a:fe:bb:d6:57:d6:bc:
be:51:5c:16:87:8c:47:89:42:69:5e:46:53:2e:45:
e3:6b:66:24:cf:4e:e2:ac:a8:f5:1b:1b:1f:82:22:
84:ac:68:9f:e7:1f:3c:a9:6c:c8:99:25:68:1b:76:
bc:a3:95:8d:d7:c1:b1:20:29:51:a1:a1:0d:79:84:
06:c9:a5:9c:d2:f7:73:4f:cb:93:e0:df:dd:f3:53:
4f:58:87:e8:b8:4e:30:eb:69:73:61:fb:98:cc:9d:
8f:ba:eb:46:aa:8c:58:56:08:2f:19:d7:42:0c:ae:
aa:38:ed:73:ec:63:ae:b1:55:3b:5e:7a:78:f5:f1:
43:e5:91:e5:72:5c:fc:c3:4c:c4:23:a5:bd:35:a0:
09:d7:6e:df:22:b2:a5:d7:57:31:e3:41:af:5b:63:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:B0:1E:8C:F4:AC:0C:54:CC:1A:19:CA:B9:FC:89:A3:18:32:A3
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:da:5d:e4:4f:5b:7d:4a:de:1b:8c:f3:5b:7a:59:2d:da:1f:
e2:c3:46:83:0b:ad:2b:f5:1f:bd:96:68:13:d8:db:96:25:af:
11:31:d6:12:9b:d3:8c:ab:7c:b9:11:07:fa:0b:05:ed:59:19:
1b:11:c2:0d:0f:44:e0:3c:d6:30:71:f8:6b:a3:06:3b:05:1e:
fd:9f:17:e9:70:70:3c:c9:65:8f:cc:f7:a4:b0:a6:82:4f:88:
9d:e2:26:10:c5:fe:be:0d:a7:23:67:fe:23:36:6c:66:2e:fd:
f7:df:4b:61:55:fb:51:48:68:63:6b:88:b7:28:bd:56:9f:bf:
cd:dd:db:71:d6:ee:e1:a2:69:05:d4:40:63:fa:68:cc:a7:9a:
40:0f:99:19:ff:f2:59:09:8e:74:4b:de:89:9c:23:08:75:f4:
22:4f:0b:d0:e9:9d:a1:59:c7:48:a9:0f:7a:cf:3e:dd:24:1f:
c5:c8:93:67:c0:1a:0b:05:b9:2f:fd:50:b2:8b:36:2b:9a:a1:
6b:8d:9b:19:8b:97:9a:7f:6a:3a:21:75:5c:65:3b:75:91:3e:
31:0a:c4:f5:39:b4:fe:2f:ca:a2:7d:9c:b2:8b:de:c8:49:bd:
1a:db:b5:5c:84:99:0b:59:3c:86:2b:3a:c5:4e:04:87:f3:b8:
61:62:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:49:34 2025 by rpki-client