Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: mITfxq2dlJjpnikzcLv4u98YVivgOpuAIUQfFiLXac8=
Subject key identifier: 44:F0:2F:3F:DA:24:9E:26:EB:64:FB:A7:5D:EE:18:9F:16:0B:51:26
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01967C45800FEE6F8259D53C5302BF9F5F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 143F
Signing time: Mon 28 Apr 2025 12:00:51 +0000
Manifest this update: Mon 28 Apr 2025 12:00:51 +0000
Manifest next update: Tue 29 Apr 2025 12:00:51 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: Kpb7NqoRP3UwECVEuNp+1gwq1qpCl5xdxKEYNMVfG0k=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:80:0f:ee:6f:82:59:d5:3c:53:02:bf:9f:5f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Apr 28 12:00:51 2025 GMT
Not After : Apr 29 12:00:51 2025 GMT
Subject: CN=44f02f3fda249e26eb64fba75dee189f160b5126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:60:dc:b3:9b:e7:22:f1:ab:a8:f1:96:46:
1b:f6:12:94:0a:0d:71:c0:ce:5d:a9:a6:90:23:9f:
57:41:3d:05:a8:0e:6c:ad:33:22:95:d5:e1:f8:96:
6e:9c:f3:3f:fb:07:65:dd:c8:ac:b9:8d:d6:44:0c:
7f:68:73:d4:1c:79:df:2b:7d:7f:8c:e2:4d:55:5c:
d1:ca:8f:00:45:c9:11:40:43:dc:f4:fa:a1:ce:cf:
7c:2e:84:65:b1:89:41:2b:ba:a0:12:44:f8:08:62:
ae:91:e2:2b:48:08:0d:fe:8b:20:5d:d8:bc:88:33:
69:5f:f5:4f:c4:78:6a:96:ac:8a:24:2d:ba:44:20:
9f:42:cd:61:1b:af:50:08:0c:ac:c6:df:27:da:26:
ce:5f:4c:f0:ae:2f:80:5d:13:a9:57:73:02:d4:a5:
f7:30:1f:31:88:6d:21:a4:ab:a0:37:d7:c9:ab:d2:
2e:0c:38:a3:ed:ca:48:38:ec:69:e7:e9:c1:89:37:
b9:6b:02:ee:42:cc:42:99:df:c6:c4:4c:fc:6e:8e:
c7:d3:8f:bf:f4:40:9f:32:62:99:f9:f2:51:28:27:
9a:55:64:46:38:6a:5a:26:fd:30:a8:1c:e5:8b:8c:
67:24:4c:fd:8d:4d:6d:1a:0a:18:09:74:31:2b:62:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:2F:3F:DA:24:9E:26:EB:64:FB:A7:5D:EE:18:9F:16:0B:51:26
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:71:f6:f8:20:f5:86:9c:87:b7:fa:89:36:38:59:f5:76:
03:87:0a:7e:cc:d2:d9:dd:35:24:c2:d5:bb:67:bf:b6:95:ef:
95:a1:bf:9d:5b:41:e1:cd:16:72:03:8b:89:ac:b4:a7:c8:78:
fa:eb:60:8b:b0:fc:d1:29:d1:99:bd:ed:ce:70:4c:d4:e9:a7:
23:f2:9a:04:83:50:5b:de:c4:92:76:41:ad:82:54:de:81:8d:
1a:c4:fc:0c:ad:d9:ff:80:84:93:8f:96:8b:cb:4e:ab:b3:ad:
f3:e2:ed:80:3f:10:dc:63:aa:d3:50:05:07:72:22:31:a0:9b:
3b:3a:8e:55:dd:2f:b9:fd:65:3d:02:1a:25:3d:b8:88:95:d9:
01:76:22:c8:57:e5:3a:91:0f:a5:3c:40:57:50:36:16:22:a4:
29:3e:fa:5f:94:b6:86:31:c5:4d:df:48:08:33:a6:f4:cb:75:
63:e9:64:cf:40:51:75:14:6b:2b:27:63:90:e3:67:4b:3d:7d:
e6:d4:9b:79:1e:3a:96:cb:2b:3b:a3:e0:94:48:02:ba:d4:bb:
01:90:5d:84:1d:5b:ff:00:db:4c:e0:5f:46:a0:d3:f4:27:8a:
7f:da:92:88:7c:8e:f8:80:28:56:8b:3d:a0:b0:d5:01:73:98:
8a:a9:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:40 2025 by rpki-client