Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: 9DC9OGB788imnVxYjnM5j0cQ3yYveJVGuXV8pBpYsCg=
Subject key identifier: 3D:0B:E9:99:B3:BD:AA:9C:06:46:77:6C:92:46:FB:D6:30:47:EB:E4
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019679B21197ADE61E8EFF03D24882C2FD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1030
Signing time: Mon 28 Apr 2025 00:00:35 +0000
Manifest this update: Mon 28 Apr 2025 00:00:35 +0000
Manifest next update: Tue 29 Apr 2025 00:00:35 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: l9tr24a+q1h5ihQpvkwa5HvLTNfXQtjAud0+Ygpl79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:11:97:ad:e6:1e:8e:ff:03:d2:48:82:c2:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Apr 28 00:00:35 2025 GMT
Not After : Apr 29 00:00:35 2025 GMT
Subject: CN=3d0be999b3bdaa9c0646776c9246fbd63047ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:fc:70:ca:65:89:f3:f8:a9:61:e0:5a:d9:
d0:5f:2b:b3:5d:08:d1:9d:40:1f:43:fa:ea:59:3d:
5f:4e:4c:9b:bc:37:37:e0:cd:be:15:6e:5c:80:93:
69:e8:52:8b:55:88:94:ac:ea:96:02:f0:8f:ed:05:
85:a8:35:b4:70:26:6f:63:9e:a9:30:c9:16:0a:c1:
05:56:b6:25:58:cc:3a:66:41:9c:44:3b:10:f6:b3:
82:ce:69:ef:61:9e:4c:ae:f4:7c:fe:7b:1d:ef:47:
fb:0d:aa:c5:c0:a4:05:56:ae:6d:14:3b:5e:5d:06:
e7:e3:a6:53:46:de:10:f7:e0:bd:bf:2e:5a:b6:bb:
7d:5a:1c:19:92:80:93:6d:40:db:b4:be:04:ac:19:
71:d6:06:71:be:82:38:ae:cf:78:82:23:42:a7:3f:
c0:27:68:01:9c:d4:c7:b2:a8:83:6a:8b:9b:98:47:
f3:fa:a2:96:ac:0d:67:f6:35:33:2c:aa:09:8e:af:
ec:88:9f:27:9f:c4:3a:2e:03:a7:7e:a5:7e:77:80:
f4:78:9e:8a:5e:96:9e:8c:37:48:06:d5:b8:c2:46:
a2:0c:6e:ec:64:ee:10:22:bc:20:b2:93:2a:60:49:
3c:d2:21:4b:e1:4b:7a:d5:92:a6:4e:e5:fa:53:89:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:E9:99:B3:BD:AA:9C:06:46:77:6C:92:46:FB:D6:30:47:EB:E4
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:41:b0:b3:19:dd:33:35:f6:a3:ea:4f:06:eb:f5:0c:1c:11:
02:31:24:ea:4f:2a:37:d2:a8:07:6e:8a:5c:1d:fa:b2:25:99:
fc:06:a4:29:df:69:d2:37:b8:fa:d7:4c:39:37:e5:38:9d:1b:
79:d2:8b:88:d9:22:43:75:30:ba:dd:ed:4e:95:fc:f9:f2:f9:
a6:09:64:9c:75:e1:35:08:0d:a2:2a:5a:33:34:e7:31:f2:19:
2d:85:b7:1c:da:c8:64:4b:9d:4a:fa:22:26:d8:44:e1:ff:26:
d6:6b:f2:00:68:4d:11:ed:8c:74:fb:12:04:2a:fa:8e:f3:f4:
d4:68:e9:fd:ba:5e:cd:70:ce:8c:17:14:6a:91:ae:11:d9:1d:
a4:88:0b:f2:49:bb:12:58:98:04:b3:3c:d5:0c:74:d2:0d:c7:
80:a9:63:a2:51:42:f4:d4:62:f5:77:47:0b:07:00:64:be:2f:
9a:04:6d:bb:8d:50:7c:be:13:49:49:7f:21:2d:48:2e:ef:62:
ac:3a:21:6e:95:74:27:63:77:4a:73:fc:a4:94:d2:1b:bc:71:
30:ed:ac:72:83:77:bd:e8:5e:b5:6e:34:cc:fa:88:d4:52:54:
b8:d0:3c:04:52:14:b7:44:75:52:15:00:d9:78:c7:42:ed:cc:
4b:1f:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:01:41 2025 by rpki-client