Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: FUUdqBMSmZ2IaPn9ZqovMy6hW77XwOqY5twKsV5TC6E=
Subject key identifier: 9A:C9:00:AA:96:8D:23:20:61:FA:EF:8A:AA:14:46:3A:4A:DC:27:18
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019672661CE5BD36363BF2C83720F4AB5E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0DF3
Signing time: Sat 26 Apr 2025 14:00:16 +0000
Manifest this update: Sat 26 Apr 2025 14:00:16 +0000
Manifest next update: Sun 27 Apr 2025 14:00:16 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: GvwhxEzcIPrLFFB1l0wxPcLCgq20c1+Xyj/UYadO2Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:1c:e5:bd:36:36:3b:f2:c8:37:20:f4:ab:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Apr 26 14:00:16 2025 GMT
Not After : Apr 27 14:00:16 2025 GMT
Subject: CN=9ac900aa968d232061faef8aaa14463a4adc2718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:50:d0:3c:7d:40:99:a0:8f:cc:1c:be:ba:
6c:91:93:51:cd:41:56:db:c1:b7:52:ff:03:6e:1c:
89:30:4f:9a:4d:25:00:aa:f6:5e:5c:ad:68:8f:c2:
7e:ab:7c:0c:1c:47:fd:5f:47:fc:00:bc:cb:7a:50:
fb:80:78:69:8b:3f:43:27:cb:b5:90:07:70:38:52:
bd:2b:85:39:db:ca:3d:89:3a:42:83:f4:a9:50:ba:
73:c1:09:91:a7:dd:3a:7f:d0:d7:85:47:a7:8b:b6:
5d:f1:a2:a5:20:a2:03:de:38:cf:cb:fb:5d:2c:80:
cc:cd:11:a7:07:bd:5a:d5:8d:ca:cd:f1:75:71:84:
9f:bb:6c:54:91:f9:7f:00:32:1b:9e:51:22:f6:71:
46:44:fd:fc:23:78:5d:56:89:f5:ff:24:ad:46:f4:
da:88:5d:9e:6b:7b:9a:c3:72:87:4d:f9:e0:99:f0:
ae:d1:ef:3f:76:5f:6d:73:dc:bc:1e:03:cf:79:35:
69:db:9c:4a:51:10:5b:41:61:d5:88:2c:d3:0f:bc:
65:7e:2d:af:71:45:5e:9e:6c:28:5f:6b:bf:64:68:
c6:32:73:35:d2:01:77:a5:27:a7:45:4c:d4:6a:23:
26:71:dd:e6:09:3e:6d:67:19:7b:1e:7d:fc:ed:f7:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:00:AA:96:8D:23:20:61:FA:EF:8A:AA:14:46:3A:4A:DC:27:18
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:4a:45:09:66:2b:b2:8d:bc:b4:f7:bb:34:ec:28:16:db:
55:7c:e5:bc:9d:58:92:21:1e:92:d3:f1:63:92:b6:0e:63:ab:
6d:3b:da:69:f3:f4:12:8f:b7:4a:1a:7a:1f:04:2d:d5:6b:cd:
10:ef:c7:40:02:fa:41:7c:2e:75:a9:c8:24:0f:8d:6e:55:14:
a0:16:ab:eb:a2:24:a4:d9:d5:4d:35:32:9e:07:6f:fa:79:6e:
b4:a0:aa:4d:57:a8:45:82:34:18:85:ff:2c:1a:3c:69:a2:c2:
c5:23:0f:cc:06:30:d4:d6:50:90:f3:a3:2d:4e:94:e3:90:02:
7c:2e:f7:eb:d2:05:d7:41:ac:71:69:f7:46:2e:29:39:fd:fd:
dc:9f:57:af:c4:6e:76:a9:d8:a8:bc:bf:b0:7e:42:bb:a5:21:
99:12:9d:36:82:cb:41:88:4c:fe:90:11:22:25:8b:fb:b6:11:
dc:c2:ae:e0:8f:4e:cc:56:76:d7:fa:b6:eb:e1:28:4b:a0:69:
06:56:77:68:08:8d:bf:73:8f:e2:75:1c:1b:66:22:fa:f1:91:
a6:a1:60:d8:32:20:b6:29:bf:12:ca:3c:3a:a7:ba:1e:d3:82:
8a:96:8a:10:ef:e2:b1:62:19:15:86:71:d0:22:34:74:40:25:
54:f0:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:48:38 2025 by rpki-client