Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: zCzaqbAT6oGA18TgSCwMS3/RPAy7VZmYDLqYEvR9uQA=
Subject key identifier: ED:39:73:61:5F:CC:8A:82:61:0E:B2:0A:C4:FC:C5:EF:2D:0B:10:D0
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 0196748C18A87ED97D89BAAE95E3E13A347B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 00:01:00 +0000
Manifest this update: Sun 27 Apr 2025 00:01:00 +0000
Manifest next update: Mon 28 Apr 2025 00:01:00 +0000
Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: fCXjPYdIiuXLj3Qcql/xUiL4+39UIb502qDnJ6wBA+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:18:a8:7e:d9:7d:89:ba:ae:95:e3:e1:3a:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Apr 27 00:01:00 2025 GMT
Not After : Apr 28 00:01:00 2025 GMT
Subject: CN=ed3973615fcc8a82610eb20ac4fcc5ef2d0b10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:df:fd:2f:ed:43:e0:9c:77:fe:3f:8b:b2:
89:f1:1b:9a:ed:8e:53:12:63:70:44:d6:75:77:cd:
00:e1:06:e1:da:9e:d6:8a:7b:b6:18:b5:53:16:28:
87:60:b1:06:93:ea:93:6f:74:d6:52:40:ae:cf:b9:
29:5a:82:6b:c9:5b:0d:fd:04:62:fe:a2:85:27:a0:
98:f8:e3:b1:97:ed:46:1a:0d:a9:77:6d:a7:38:0b:
2a:cb:f4:5d:dd:55:f5:db:f7:df:7a:ba:36:e7:f7:
8c:1d:2f:82:dd:cf:19:5d:62:e0:03:57:80:30:67:
b3:3a:89:7d:1b:a5:8c:c2:33:46:da:d2:52:ac:5c:
ac:35:7c:16:4e:f1:e8:c9:6e:d3:b2:2c:40:21:3c:
3c:21:ca:b4:13:d9:72:eb:b3:42:be:b5:3f:1e:f6:
6b:9c:4f:fc:fb:3d:57:8d:1d:de:7b:e5:bf:18:d6:
9e:39:38:eb:cd:c9:56:b7:94:6a:f1:81:7a:6c:26:
15:05:1e:66:a9:59:c6:f9:fa:9b:29:69:cf:e0:0b:
c9:53:f0:f8:43:df:7d:da:ce:6f:c2:6f:50:9b:f8:
29:7b:ea:1d:25:13:c5:42:35:a4:9e:a3:46:bf:8e:
b6:35:56:9b:e5:de:6d:40:35:33:7e:84:52:97:61:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:73:61:5F:CC:8A:82:61:0E:B2:0A:C4:FC:C5:EF:2D:0B:10:D0
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:db:79:bf:17:85:62:1c:36:3f:73:97:62:1d:86:e8:13:8f:
cd:bf:b1:c9:8e:86:92:62:98:08:33:a7:92:a9:71:98:dc:2c:
cb:e6:09:e6:49:d7:71:67:44:1e:a1:c9:bd:38:b5:af:13:91:
c3:2b:f1:3b:31:cc:22:36:d0:e8:9a:b7:02:af:2f:3b:8e:4f:
15:15:01:f1:a4:ce:0a:8d:6a:8c:88:1a:17:e0:50:2f:1e:6b:
d3:f6:b9:cf:5e:d6:ee:41:9b:1f:95:4c:40:39:b9:ba:1e:7c:
63:5f:c6:00:ab:13:1e:b1:b3:20:50:55:f7:59:62:5e:a7:7e:
92:f3:06:7c:d7:11:16:60:22:19:97:51:ee:73:bb:64:f3:02:
3a:35:d5:ad:2e:f1:07:f1:bb:ca:26:b9:c2:bf:c0:d1:a1:69:
6f:09:6d:9c:92:d9:e5:1e:f5:7b:ec:4f:48:c4:c6:22:b0:29:
00:b7:1f:89:e2:72:29:c9:24:3c:6d:8a:af:06:cd:06:b4:ef:
b4:cf:fe:9c:86:aa:07:63:b9:83:3e:8f:cf:26:75:9e:ea:f5:
1a:69:f0:23:3d:85:ff:4f:65:25:09:15:64:7a:b0:09:11:c1:
1a:dd:b8:86:84:d0:25:63:be:e4:a1:c7:aa:c9:72:bf:8e:97:
a5:24:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:45 2025 by rpki-client