Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: K0bqkbpvkuhkYlr9q3dM2vwCtZPJhL6iG6vNkZZ5ltw=
Subject key identifier: 0F:AF:8C:64:16:DF:36:54:57:9B:2B:9B:C6:3B:E5:06:44:07:83:E9
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 01967F0F644A8F9C5C988FEA4F08CCE15C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 01:00:37 +0000
Manifest this update: Tue 29 Apr 2025 01:00:37 +0000
Manifest next update: Wed 30 Apr 2025 01:00:37 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: /J7dCK9zswg+JE2U58vthb6Le6FQEmh5LAa9cL1bGm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:64:4a:8f:9c:5c:98:8f:ea:4f:08:cc:e1:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Apr 29 01:00:37 2025 GMT
Not After : Apr 30 01:00:37 2025 GMT
Subject: CN=0faf8c6416df3654579b2b9bc63be506440783e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:6d:e8:8e:a1:47:7d:6f:49:32:2f:2e:be:
cb:57:bd:98:c0:01:48:76:d3:f4:21:33:49:3c:a0:
07:7f:ea:ea:90:b5:9f:27:84:67:eb:e3:a2:a3:73:
cf:c2:12:f6:80:27:a6:1e:5b:6c:39:bf:92:3a:79:
13:67:1d:8c:c5:4e:94:bf:ab:87:63:8f:bb:c1:33:
bd:d9:7e:47:83:c3:ed:a7:11:5d:c5:d7:da:5f:e4:
61:0f:d1:f4:7a:60:d0:77:13:58:95:bf:ac:58:d4:
dc:ca:05:2a:ca:7b:ef:54:aa:a2:75:57:e3:ac:ce:
b7:03:0c:6f:78:5a:62:a7:9d:6b:ad:43:13:42:8e:
a7:30:f8:cd:06:64:01:fc:3d:8f:9e:ff:af:cb:37:
73:a2:e1:0d:fb:f2:82:ad:e0:3a:d9:ae:aa:12:26:
66:26:39:cb:0b:3f:38:1a:23:9c:7f:4c:d5:ce:c7:
61:a3:5f:67:62:d4:e5:dc:d6:83:7f:ef:2f:b7:e8:
7e:9e:79:6b:16:aa:9c:bc:31:4f:01:ee:a7:23:aa:
5a:54:83:5f:7f:1e:96:0a:3b:52:ea:f5:04:02:8e:
8c:cf:0f:6d:04:21:87:26:9a:cc:85:8b:a2:99:2f:
6a:7d:da:33:db:0b:03:df:be:64:9b:5f:29:f6:bd:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:8C:64:16:DF:36:54:57:9B:2B:9B:C6:3B:E5:06:44:07:83:E9
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d2:00:1a:ac:97:78:38:0e:5d:34:54:fa:b2:eb:5d:fc:ea:
09:96:1b:4d:7e:c3:3a:ac:20:80:1b:93:d1:70:83:22:c3:40:
ff:15:c7:68:51:ce:46:76:73:b3:4e:a9:08:5d:68:69:6b:99:
5c:d3:f4:4f:10:f0:99:d2:26:95:59:10:a4:16:c0:5b:72:b1:
15:93:ba:6e:b2:ff:7f:9c:fe:ce:67:07:00:08:70:b9:d8:36:
40:05:31:3e:c4:fd:cb:57:3f:3b:00:2d:62:52:8e:0d:2b:74:
8b:95:05:7a:54:e2:fc:26:f8:88:21:32:aa:52:82:7e:a5:06:
5b:bc:9f:e3:ea:f2:8f:50:73:80:b4:94:73:c9:1d:39:6c:c6:
3a:2d:00:3e:59:04:b8:6a:86:2e:3d:24:8c:96:57:56:39:cc:
09:b4:7c:84:95:15:c8:60:73:f4:e1:be:d5:eb:42:41:56:24:
8c:4e:a2:3b:4c:26:97:bd:ee:49:8f:e5:c9:dc:45:51:cf:36:
f8:c9:74:8e:00:af:ff:36:de:c6:4e:65:6e:d8:71:f0:49:0f:
04:8d:45:dc:dd:53:fe:b4:09:91:55:3a:77:8f:b5:9f:64:80:
e1:b4:7e:37:b5:f9:ec:e5:92:97:87:24:73:0d:50:53:55:29:
ef:cc:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:04 2025 by rpki-client