Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
File: YninaMkQutzVxK73wXKp8GFUfow.mft (raw, json)
Hash identifier: m9oxXELZ5knpzMNR9Yy0R28b5aCzYszMYWunF4CfdBQ=
Subject key identifier: 44:44:C1:2A:16:BD:CF:FF:6F:95:AB:5B:AD:14:5B:BE:5A:8C:C1:AC
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 01968736E753DBEFFCC0F98D5BE1F13DE9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
Manifest number: 153C
Signing time: Wed 30 Apr 2025 15:00:44 +0000
Manifest this update: Wed 30 Apr 2025 15:00:44 +0000
Manifest next update: Thu 01 May 2025 15:00:44 +0000
Files and hashes: 1: EADtwJ5y-VjWcy83_mVH2SKUAPo.roa (hash: R8INT7bheSvFgtGeR+Ql091pm76iqBbhKkxxFZZqBPc=)
2: IToPllDsr4xQft5YpECWPhbaxic.roa (hash: iA339JgrkHvOUwtBrlDpj0JMtenbRgjIS2jHaIgw4OY=)
3: KBd5kN60RABk_aPy5jhjXA2d4rM.roa (hash: F9wyU/gh7GBbrKA9V2nWxFNNYZNmutVEH+bSjiNICq0=)
4: Xu-pgqhOX0b1I_9AutHwqHHQH6s.roa (hash: Sqvmgn86ZbXy8M1JF+5dXsFEi7o7b9VXmnZYW5oa6sg=)
5: YninaMkQutzVxK73wXKp8GFUfow.crl (hash: e9v3zJI//wJwrSF9FMrUoPgZqKx4U99CEjPJes58UFw=)
6: iUmlhe7GBpSAFSopQzbl9BrMrY8.roa (hash: 1kM9Q1lsdCfCBHNzqJzQksIZSOAccEnrgDWq7f/U9H8=)
7: qGhr6imBDGgujLXBWS0DEYFPzJc.roa (hash: 5YtHZEQ4HdQrSJb2I3o65jo+fHhfbV2A2EukdInfLlo=)
8: xbAnBjLqGjs9MoebU27xTpAXF-E.roa (hash: Q80N11JbIqnaJwMmz573rLhvL647301AWxsGwoimeQk=)
9: zx5ZcprsDJCzFXiQa1PXGNrl7dw.roa (hash: V86wda9mpMAc2Rmv/1Cmnj8+RhHjXsEsrS9auS3g0EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:e7:53:db:ef:fc:c0:f9:8d:5b:e1:f1:3d:e9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Apr 30 15:00:44 2025 GMT
Not After : May 1 15:00:44 2025 GMT
Subject: CN=4444c12a16bdcfff6f95ab5bad145bbe5a8cc1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:79:cd:39:31:fb:f6:7b:53:69:52:9e:cf:
ed:e2:41:3f:1f:67:92:c9:45:ff:b0:84:f4:4c:f3:
99:d3:8a:36:8d:a8:3b:34:d4:4b:bf:67:b0:fe:5d:
c1:d0:96:31:ed:40:00:4b:a2:19:c8:ab:21:fc:81:
0b:bf:70:9a:41:dd:10:67:73:45:2d:18:4b:9d:2c:
8f:d2:1e:37:a2:47:eb:6e:12:6e:a1:0a:0a:42:c3:
d9:8e:e8:62:a6:57:85:15:01:f8:4c:c3:65:64:a7:
49:28:5b:55:ee:39:ba:f9:c5:6c:e7:1d:13:43:3e:
22:08:b8:07:9c:6c:55:be:57:da:be:6b:81:8a:a2:
cf:e1:7d:5c:b8:4a:a3:3a:c8:07:c1:15:86:45:61:
24:87:3a:53:64:5d:8c:47:68:52:61:a9:bd:e5:7e:
c6:d2:a3:72:bd:97:5b:d1:27:23:06:16:f6:bb:85:
ae:ee:9a:76:be:cb:fd:13:2a:0e:a4:2d:b7:e9:67:
94:b3:a3:be:4e:f3:7e:25:94:b6:3c:49:1a:4b:c5:
99:1a:37:7e:cb:d5:28:49:fd:8a:14:81:48:34:44:
28:02:3e:13:57:db:24:e0:c0:57:a9:24:4d:bb:31:
ec:43:87:7e:95:dc:39:6f:d2:40:b8:5c:52:7e:c8:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:44:C1:2A:16:BD:CF:FF:6F:95:AB:5B:AD:14:5B:BE:5A:8C:C1:AC
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:50:bd:34:c9:81:4d:ab:64:40:4f:9e:d9:15:e0:90:31:
73:ae:cc:19:8f:17:42:f8:8b:de:b0:78:01:1e:a0:2c:ed:95:
0c:55:87:e0:25:51:8b:85:f2:23:16:f8:ab:09:f5:1c:e3:e2:
d7:15:ad:af:39:db:91:02:f7:69:0f:60:ae:77:5c:01:ed:b2:
d0:51:5d:97:ca:e6:2a:ba:21:24:73:67:64:cc:d1:15:04:54:
e0:b7:95:e7:96:0f:e1:39:c1:b5:5c:64:a5:b8:a9:3f:dc:b7:
6f:14:0d:28:22:fb:d5:9f:b7:2a:3b:67:f3:2d:f2:c9:01:22:
f4:cd:21:5a:ac:5d:fa:72:0d:ed:a2:03:14:30:5f:94:fd:e5:
51:fa:ce:c4:a3:e6:df:9d:1d:45:14:7b:e7:ab:9e:92:13:46:
8d:2d:00:90:27:ec:aa:e8:0f:b7:0d:f5:58:16:df:0a:f2:2e:
f0:94:cd:24:5d:7a:f6:c2:85:13:10:c5:0d:f5:4a:bf:bc:32:
22:d4:5f:d4:9a:84:0f:a2:ec:50:26:ab:e4:83:c7:1e:14:c4:
5b:21:17:68:6c:e0:91:a8:f0:c1:14:28:aa:dc:7c:98:5b:f6:
5c:a5:3e:f3:f9:98:3d:bc:3b:1c:20:95:c8:61:c3:37:44:9d:
2d:10:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:07:19 2025 by rpki-client