Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: KtwQSwD9icWM2m4pHzbMcnf4xxfvmQzePFrJy9etCIA=
Subject key identifier: 46:5F:79:66:17:05:D6:AF:86:DB:54:B6:DB:D1:A7:77:4B:15:77:FD
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 01967FB4F1180E8BBCEE741B1C990A597C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 04:01:26 +0000
Manifest this update: Tue 29 Apr 2025 04:01:26 +0000
Manifest next update: Wed 30 Apr 2025 04:01:26 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: ofcA/LhEgS/R9z0+Ji3pGHrfLnsuSKXUlETA1Xep+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:f1:18:0e:8b:bc:ee:74:1b:1c:99:0a:59:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Apr 29 04:01:26 2025 GMT
Not After : Apr 30 04:01:26 2025 GMT
Subject: CN=465f79661705d6af86db54b6dbd1a7774b1577fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:9e:47:8d:ef:99:b4:b5:41:29:4c:e7:02:
45:53:d0:c1:1f:b0:d3:01:f6:02:cd:f9:cd:ab:e8:
6b:79:0c:4b:05:84:01:68:c0:16:ee:a4:49:d2:82:
ce:b7:61:91:47:8d:cc:d4:29:b8:b5:ce:b4:35:97:
63:fb:08:65:7d:12:c2:8d:3b:82:bc:a0:04:31:65:
3d:73:54:57:84:36:16:a5:a8:17:4b:3c:9f:91:0f:
67:e1:1f:44:4d:15:92:74:ba:2a:14:2e:cc:0f:00:
9d:67:6e:ac:ae:f3:ed:e3:f2:af:6f:d3:39:9c:1a:
85:9c:af:0c:95:6c:47:23:b0:bc:5a:63:8b:3f:fd:
01:a3:c5:55:d3:02:5a:d9:6e:5a:42:aa:33:12:d0:
f5:fa:2b:83:91:61:82:3c:b7:bc:9a:34:f8:b9:a6:
74:cc:78:8d:3d:a1:dd:39:a5:bf:40:00:e7:f8:14:
fe:91:35:aa:ff:11:55:42:7e:5a:8a:59:64:2b:41:
58:b6:95:15:c0:97:20:1f:13:91:ab:25:07:d4:53:
c6:9d:37:72:f5:3d:24:cf:a0:e1:bb:93:f6:0a:92:
ee:20:21:f7:00:d5:3a:4c:13:86:43:37:08:bd:5b:
1c:c5:cf:34:00:d4:37:00:39:99:f3:77:81:62:bf:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:79:66:17:05:D6:AF:86:DB:54:B6:DB:D1:A7:77:4B:15:77:FD
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:95:19:ad:b2:b3:17:bd:87:47:87:99:52:5c:d6:98:41:
f1:bd:90:44:78:95:77:0e:65:9b:a2:79:ea:61:a1:ff:9f:cb:
1b:37:ca:f7:fc:cf:69:e9:74:2e:29:19:59:20:5d:90:46:a3:
83:e2:1a:86:a2:0b:d1:03:0e:ac:da:1a:e1:48:1f:ab:2b:39:
cc:e5:51:75:d6:07:98:12:63:84:99:dc:db:83:81:72:43:4a:
ef:4c:b1:a0:9b:f9:47:29:3a:95:03:c2:f7:c0:91:ab:c7:05:
86:ed:15:c9:31:66:92:16:aa:2e:36:de:b6:02:c7:71:b5:d2:
62:4e:61:91:77:0c:b4:a5:91:c1:53:d7:3d:3a:d8:52:07:24:
01:69:80:fe:b0:d5:02:83:5d:0f:cc:6c:1b:d5:9d:66:de:3d:
27:2b:9d:0d:8a:fa:f6:42:7a:a5:8b:1f:bf:3a:c1:14:35:6b:
4f:17:3a:60:2c:af:19:36:44:39:4b:72:7c:ba:5a:fd:f5:ae:
e1:40:4d:4e:ed:f9:bf:c4:b4:e3:1f:90:2d:49:4b:ed:42:20:
f2:d5:3b:13:bb:3c:36:41:1a:92:d4:33:64:d7:b7:e6:b9:d1:
a5:45:49:de:4c:a0:ea:af:d6:cc:1c:6f:6f:7d:7e:df:60:41:
fb:d3:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:28:34 2025 by rpki-client