Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: PhqrW9FveA9XqPojeqcrU40XdlTjpysb3U/CX4LQx/A=
Subject key identifier: F8:BA:CC:01:BD:9F:D8:18:F8:84:29:22:4A:4A:DC:6E:6E:E4:E4:9A
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 01967F0F1B03E59E27157222194849E54242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0562
Signing time: Tue 29 Apr 2025 01:00:18 +0000
Manifest this update: Tue 29 Apr 2025 01:00:18 +0000
Manifest next update: Wed 30 Apr 2025 01:00:18 +0000
Files and hashes: 1: GP-mcsPVfkxFR6BakAdLWMHzvnk.roa (hash: 46Gy5AnSQQR4RzlnLScg9/HmedHrQU8V47NDaOoaI7E=)
2: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: J+GcOaKaXOx5UGJy89z1a3eksiC6zKa9PWfXR2mZe44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:1b:03:e5:9e:27:15:72:22:19:48:49:e5:42:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Apr 29 01:00:18 2025 GMT
Not After : Apr 30 01:00:18 2025 GMT
Subject: CN=f8bacc01bd9fd818f88429224a4adc6e6ee4e49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:19:d9:1d:00:1b:e6:87:85:1f:9a:5b:d8:
62:3a:66:30:a6:66:41:6f:45:e7:8d:4c:fe:a1:06:
fc:b1:98:33:63:35:1b:f2:b6:d6:41:6c:cb:16:d9:
fc:18:42:02:f1:de:a8:64:9c:47:ef:43:7e:82:c2:
ba:2b:68:31:1b:fe:83:0b:4a:28:d3:8a:2e:9d:82:
37:f9:0e:58:70:9f:96:6d:f4:0a:e2:06:02:45:3f:
77:ff:4b:56:20:e4:1b:f7:78:d1:95:3d:98:85:33:
56:8c:90:ff:9e:69:e4:7b:e3:b7:57:2c:09:91:07:
36:a5:c0:ac:05:cd:8f:66:7a:5e:2c:18:37:fb:5b:
23:7a:68:e8:70:ed:70:98:07:84:9f:31:fc:a3:fb:
77:5d:eb:19:36:9a:9b:7d:38:11:0b:c0:ba:00:f8:
df:f0:0f:86:c2:4c:c4:80:b4:43:0d:03:af:ac:63:
df:a5:5f:67:b2:07:3d:de:b3:b7:fd:76:9a:50:82:
31:3d:59:e5:f2:92:a9:2a:b2:ce:dc:c6:b2:c4:ad:
fe:1c:d3:c8:3e:00:e7:84:9f:c6:4d:17:93:77:80:
ed:98:a7:cd:c0:c9:aa:4d:ad:e5:47:a5:0f:00:19:
02:61:6b:ea:b0:90:6f:47:69:8c:24:57:4d:77:dc:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:CC:01:BD:9F:D8:18:F8:84:29:22:4A:4A:DC:6E:6E:E4:E4:9A
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ad:4f:0c:95:a2:a6:c6:be:7a:b9:87:51:7e:f4:52:5c:eb:
f8:bf:bf:a0:2e:ff:6d:9f:89:81:ad:81:2e:4c:9b:7b:e3:c0:
a0:10:91:70:0c:39:39:4c:32:4e:eb:7f:20:bd:0a:96:c4:4c:
73:b4:0b:09:e5:89:c6:8b:05:ff:46:92:12:ea:b0:63:fc:bb:
cb:cc:a0:46:d6:55:7a:d1:3b:87:26:5d:ae:3b:f0:5b:dc:9d:
ed:94:03:8e:ed:3c:e0:05:f5:4b:21:af:8d:4c:e9:7c:37:f2:
a8:1e:62:ce:fa:42:77:bb:07:f5:55:d7:86:a3:f7:1f:7c:70:
6e:5a:90:92:53:76:66:c8:3c:6d:71:f1:3a:22:70:1a:6b:73:
f7:cf:ab:ca:51:74:3a:52:fc:0b:a5:91:6a:84:0c:34:ab:fc:
56:ff:9b:bb:5f:9d:4a:1e:df:a3:a1:6e:de:e7:a7:97:5e:a0:
95:f4:1f:bd:04:5d:5a:94:1d:2a:c5:8d:ca:eb:6c:55:14:a2:
b7:8a:de:8e:54:1a:dd:89:0b:12:4b:3a:0f:ac:a6:aa:79:b4:
39:c6:e5:2d:0f:2a:10:bd:08:9f:22:f3:aa:e2:72:d7:ea:21:
09:ca:64:b0:99:ff:f1:69:04:70:b9:1d:9c:06:58:af:44:2d:
ae:35:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:36 2025 by rpki-client