Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: RE69xgPnw8+Zk9XTgvxDDuDQ47LGDHt+Z5S2jCQr11A=
Subject key identifier: 4A:93:96:1B:96:08:08:84:7A:2D:50:51:33:E2:20:B7:13:85:30:0F
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 01967F0F9FCB50306A704D71BBA14E1CEA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0D81
Signing time: Tue 29 Apr 2025 01:00:52 +0000
Manifest this update: Tue 29 Apr 2025 01:00:52 +0000
Manifest next update: Wed 30 Apr 2025 01:00:52 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: 76nI93LwHu/Sd4fi45E+FcmmhbP7PUC2Ur3a+zkVWTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:9f:cb:50:30:6a:70:4d:71:bb:a1:4e:1c:ea:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Apr 29 01:00:52 2025 GMT
Not After : Apr 30 01:00:52 2025 GMT
Subject: CN=4a93961b960808847a2d505133e220b71385300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:f3:e5:82:78:4a:c8:02:42:cc:07:73:69:
9d:d3:e0:7c:e2:3e:35:72:47:5c:a3:f7:21:a9:b4:
46:87:13:c7:d6:29:0d:33:45:56:3d:7d:39:a2:5f:
05:48:be:c0:f0:e7:fd:a8:8a:05:be:ea:4b:bd:c7:
66:ae:b2:b7:7b:6d:6c:41:d7:d1:5f:34:58:11:59:
8b:2c:fd:03:1c:9f:db:70:f8:8f:9c:3a:f7:43:ac:
e8:7a:ea:f1:44:cb:6f:9b:66:91:b1:ba:42:fd:fa:
27:38:8b:16:99:c6:00:12:d5:a0:46:c2:87:d7:55:
91:84:41:b4:e8:d6:a1:52:ec:6d:fa:28:ff:d2:0f:
9b:f9:09:f8:84:03:0a:5e:20:9e:0f:03:14:ee:bb:
5c:2d:b6:6d:4d:db:30:23:a7:73:2b:f1:bf:e3:58:
30:d1:5c:80:cb:09:01:80:7d:9b:78:1a:9d:28:58:
97:0f:76:4c:34:df:d2:7f:1a:ec:16:f0:6c:a0:fa:
c9:18:1c:1b:58:e0:5e:1c:56:15:86:a0:66:df:cc:
f7:f4:9b:84:63:87:b6:96:08:24:d0:47:30:e5:7b:
b2:5c:5c:dc:87:b4:e4:af:a2:34:21:6d:ba:8a:22:
ca:61:fe:7a:da:9c:78:27:d5:5d:0e:38:b4:5b:f5:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:93:96:1B:96:08:08:84:7A:2D:50:51:33:E2:20:B7:13:85:30:0F
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:db:cb:64:69:53:43:94:a6:f9:39:67:13:b8:cf:48:b8:9e:
60:a4:9b:42:73:92:b0:87:38:0a:f9:69:1c:8b:86:3d:e1:30:
0e:f6:65:53:29:9a:a8:94:40:56:32:88:41:89:b4:e5:7b:b5:
6f:e6:82:7c:b5:1c:94:ea:b7:1e:04:25:f9:6d:34:a2:2d:40:
36:00:82:2b:9d:ed:e9:23:d9:fd:94:ea:d4:02:4a:28:e9:d0:
5d:58:fc:5e:66:00:2b:af:f1:75:25:de:0d:9e:c2:59:cd:26:
b4:30:94:38:83:18:64:f0:47:5e:d9:c1:59:49:11:a5:bb:bd:
86:cb:f6:f9:d7:19:28:8c:b6:82:f2:2c:8e:40:8d:e6:53:ab:
3b:89:ea:b9:04:80:96:0f:aa:6e:ef:a2:96:ff:34:3e:63:3d:
be:10:4e:02:4a:38:cb:65:f6:7d:9a:97:a0:9a:d4:9e:b9:f0:
d0:96:f0:39:59:71:0c:fb:de:6e:07:e7:92:da:d9:76:1b:f0:
a8:82:b2:a6:fe:39:4d:38:5b:48:47:8c:2e:09:03:b9:a5:8a:
e0:3c:30:a3:72:b8:0f:91:90:f4:69:94:64:14:bf:e8:3d:e5:
3e:26:38:90:fb:cb:8a:f1:9c:75:cc:5a:ba:7b:35:10:3c:bf:
cb:f2:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:49:38 2025 by rpki-client