Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: 8CM6E2XC8ej5WL0opXHMQWz7sA9OuomppJWrzQQ6UUM=
Subject key identifier: 9D:A7:C4:81:AA:C9:4F:7F:F4:AF:9F:B7:5A:FB:53:3E:E3:0C:A7:7A
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019676B0CCF42496171F959E86229AEDACD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0D30
Signing time: Sun 27 Apr 2025 10:00:20 +0000
Manifest this update: Sun 27 Apr 2025 10:00:20 +0000
Manifest next update: Mon 28 Apr 2025 10:00:20 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: 0R/IHx3AfJ2YRYdYNjdAqbu/Ah8Z48Nn7yDzhSwh1aY=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:cc:f4:24:96:17:1f:95:9e:86:22:9a:ed:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Apr 27 10:00:20 2025 GMT
Not After : Apr 28 10:00:20 2025 GMT
Subject: CN=9da7c481aac94f7ff4af9fb75afb533ee30ca77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:98:e1:6b:41:e4:17:2c:24:fc:98:3d:d1:
94:2b:d5:d5:a7:13:a5:0d:32:24:3d:d1:c7:d3:ec:
45:b1:7c:d4:de:77:6d:f7:30:29:56:36:75:e7:72:
3f:1c:a9:39:4e:0a:e2:8d:2e:f4:a5:a6:f1:5e:0e:
4f:f0:f8:80:4b:98:20:7a:13:05:77:f5:cf:11:9f:
de:ce:31:ef:7f:22:4c:84:cf:91:76:12:d0:5b:0c:
a0:a6:3f:ec:19:f8:31:20:69:02:62:20:bb:43:c3:
dd:1f:6e:9f:f8:8c:d6:22:ed:25:30:3b:3e:f0:6c:
fa:3b:0b:b6:c0:71:40:8e:88:68:6c:70:31:83:8f:
a1:bd:4c:a5:c1:d2:1d:bb:dd:fd:82:4b:71:30:00:
89:41:8b:0f:62:cc:05:e8:cb:2a:82:e7:d9:3f:c6:
5a:45:6e:5c:2c:1d:8f:ee:67:61:8e:33:3f:a4:d7:
2b:d9:c7:30:5f:35:71:46:8e:b8:10:ab:ef:28:f3:
8c:31:a9:ca:05:ed:e9:15:44:c0:27:cf:a8:b5:2a:
e2:a1:2f:7c:fe:ec:64:b0:c5:72:5c:43:c3:fb:59:
1a:45:b7:e9:bb:91:a2:7a:a2:45:1e:ab:02:0d:e3:
6a:e1:fd:a5:86:15:1a:6c:12:c1:62:92:fe:28:39:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:C4:81:AA:C9:4F:7F:F4:AF:9F:B7:5A:FB:53:3E:E3:0C:A7:7A
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:79:e9:f3:32:13:b1:b5:53:32:fa:00:3b:b3:9b:5b:da:27:
3a:b7:58:35:c6:97:05:58:97:a5:a4:41:69:ea:4a:99:d6:75:
8a:4e:7c:ed:23:41:04:6f:12:a6:06:fe:76:02:49:94:da:89:
ad:99:52:f0:59:dc:57:e3:40:bf:f1:b4:78:1c:f7:dc:03:2f:
61:d0:ad:8b:b8:c2:e7:77:b6:23:77:5c:1e:26:17:ba:ad:d9:
98:2b:1d:5f:2a:d3:30:cd:2f:9d:a6:81:69:7f:93:ab:be:2f:
66:6c:08:0d:db:47:97:9c:0a:0b:03:04:2c:bf:a3:73:be:6f:
8c:cf:6a:b7:68:38:52:7c:30:d9:76:7a:c3:5a:84:75:cf:09:
7d:a8:34:e9:2f:6f:d2:67:f7:29:f1:09:13:a9:11:80:b6:40:
e1:39:b6:a4:57:52:96:6e:b4:3d:f2:f7:23:bc:d3:25:61:50:
eb:bc:5d:86:d2:b6:7b:2f:1d:cc:4f:d8:44:59:38:f9:1b:48:
9e:1c:e6:41:6e:39:b4:42:65:c1:16:c7:10:cd:d4:91:98:b8:
5a:1b:5b:11:4b:de:97:a0:84:6c:23:36:6f:84:94:94:77:28:
99:85:2a:1e:52:41:5a:f2:d3:ed:a8:4e:f5:06:c6:8e:7b:81:
2d:57:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:59 2025 by rpki-client