Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: C0abqZRbHvigBt8LKXeJ8CAGvvhuQp79vsVzga7/WCM=
Subject key identifier: DD:9B:BD:CC:02:EC:85:FE:4C:8E:53:9A:2D:50:55:ED:9B:D6:A1:A7
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019673B06396B1A1D3E71BD00FFA519974FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 13BF
Signing time: Sat 26 Apr 2025 20:01:01 +0000
Manifest this update: Sat 26 Apr 2025 20:01:01 +0000
Manifest next update: Sun 27 Apr 2025 20:01:01 +0000
Files and hashes: 1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: XwC16fKszxXdH5uuK7LtjZS1I5qfD13LPh7Ozf7zTa0=)
4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:63:96:b1:a1:d3:e7:1b:d0:0f:fa:51:99:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Apr 26 20:01:01 2025 GMT
Not After : Apr 27 20:01:01 2025 GMT
Subject: CN=dd9bbdcc02ec85fe4c8e539a2d5055ed9bd6a1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:4f:40:59:72:13:ee:57:69:da:3d:08:00:
da:4d:8b:a0:aa:d6:61:4b:05:15:02:36:31:ed:09:
7e:90:a9:78:85:0d:e8:b7:25:6d:54:a6:8e:8b:4e:
c7:8a:fb:f0:f4:48:22:63:60:7b:98:ba:3a:ff:d1:
8e:b4:9d:65:05:b5:03:c7:f6:04:b7:bb:8d:c3:16:
b0:7a:70:b0:d3:fe:7f:75:b1:ae:1e:ec:f8:a3:d4:
fd:e2:0b:3e:c8:26:65:96:4c:ac:c6:98:9f:a7:76:
84:e4:be:43:fd:c6:f4:2a:13:a1:54:39:34:b5:70:
50:3d:2d:9a:7b:9c:4b:d4:96:2b:48:e7:34:00:4a:
5c:ec:8e:c3:67:76:5a:fb:c8:89:16:7a:a1:50:9d:
9c:67:ee:d2:f5:1d:fe:94:c8:ae:de:6e:b6:0a:23:
5b:5d:67:8d:71:f1:f0:f9:8d:dd:b7:2c:86:d6:5e:
18:23:87:38:36:3d:d3:1b:48:d4:a5:0c:bb:b5:7f:
6f:eb:c4:5c:45:10:05:fa:6a:16:24:a4:54:97:1c:
7c:e5:c7:8e:b0:92:a1:1c:03:54:64:33:f9:8c:ae:
04:a1:98:4b:d0:4a:c2:7e:2b:d1:32:05:64:64:52:
5f:18:bf:4b:fa:33:35:e7:8f:58:bd:a4:b9:c0:f5:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:BD:CC:02:EC:85:FE:4C:8E:53:9A:2D:50:55:ED:9B:D6:A1:A7
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:84:f4:ba:f7:8e:40:bd:97:d5:18:86:ac:98:2b:9f:ff:4b:
00:81:22:77:6a:1d:9c:1a:82:f6:df:e9:16:38:32:0f:e7:09:
62:68:df:c8:6a:9a:7b:76:d7:e2:c4:0e:06:d9:26:de:16:bc:
87:ba:04:70:4b:5a:a8:a2:78:a4:c0:59:29:bc:ab:82:05:cb:
fe:f5:72:6b:d2:16:39:3a:af:66:76:ce:47:70:b2:d5:88:b5:
48:e2:44:e8:b7:0b:34:da:ec:62:a2:c3:97:34:2b:f6:46:df:
cd:92:51:9d:18:df:4c:3c:86:55:59:69:0d:db:53:73:ff:9f:
4b:dd:e3:7a:08:d9:05:6d:75:ef:ec:ce:c8:b5:ef:a9:04:96:
1a:c9:12:c4:cd:23:76:2e:90:a8:fb:c1:f9:d5:3e:cf:d0:d7:
c9:07:0d:1a:a2:77:ee:86:5f:21:b8:9c:65:5d:1d:1d:67:54:
7d:91:a5:72:e3:ab:03:3e:94:fa:d7:6e:8b:79:c7:cc:64:eb:
93:d3:52:10:c5:0c:c2:bf:70:5e:2a:5a:57:60:c1:72:78:3f:
b7:3e:f7:09:1d:b5:f6:df:fb:62:7d:0f:d9:d1:0f:04:ba:bc:
5d:67:f7:54:32:e5:fc:3f:af:9f:89:83:0e:09:be:ec:da:00:
c2:ca:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:13:26 2025 by rpki-client