Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: NLw8dBg8rGfFPcHeB23AJA5S4osEUhHj9iTqSPh44Ek=
Subject key identifier: 12:B9:0C:C5:99:5C:96:28:43:B8:D7:C9:00:60:17:83:B4:B5:83:DF
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019680FD6533213E35BB150BA24C5EDA6156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 14A9
Signing time: Tue 29 Apr 2025 10:00:12 +0000
Manifest this update: Tue 29 Apr 2025 10:00:12 +0000
Manifest next update: Wed 30 Apr 2025 10:00:12 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: wcaFdNx3lRnR+kwIh59iGI06Co+vG8zFchOPBUErnAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:65:33:21:3e:35:bb:15:0b:a2:4c:5e:da:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Apr 29 10:00:12 2025 GMT
Not After : Apr 30 10:00:12 2025 GMT
Subject: CN=12b90cc5995c962843b8d7c900601783b4b583df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:75:b5:7e:38:4e:fc:a9:61:3f:dd:d2:2c:
85:4a:d3:8d:83:92:a5:f4:0c:8f:e1:a5:ef:d5:39:
99:91:d7:b4:37:d1:25:72:08:03:74:44:a6:0d:5b:
23:e7:24:a6:e0:bc:9e:6d:4a:98:93:3f:54:3a:83:
c0:3c:36:df:95:29:72:5f:33:0a:2c:32:f7:11:12:
cf:09:e5:7a:a8:71:5c:41:30:cc:b8:4b:20:c8:2c:
35:fb:1e:97:97:39:76:44:84:72:aa:73:30:42:f6:
df:9e:64:cc:21:dc:b9:06:8e:48:a8:78:05:b0:ad:
f9:67:1a:ef:ea:a0:19:32:af:93:28:d8:3d:8d:43:
bb:08:fa:aa:b4:d8:e4:77:5e:5a:6a:6b:ef:4b:ef:
0e:1f:97:5d:2c:68:ac:7a:c2:e6:f4:8c:33:b3:69:
13:a1:67:9c:03:67:db:b1:56:92:59:81:59:1a:86:
b0:21:32:4e:ca:3e:c3:03:b5:cc:e9:23:1d:ef:dd:
97:88:10:33:59:67:45:2c:e6:1b:31:77:66:b5:df:
21:68:73:d5:22:11:e1:f4:94:0c:e3:02:fd:47:3c:
95:23:cc:1d:04:db:16:5d:46:76:fe:d9:4c:39:18:
a4:6a:66:35:0c:06:66:dc:fd:fc:9d:c7:a1:63:53:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:0C:C5:99:5C:96:28:43:B8:D7:C9:00:60:17:83:B4:B5:83:DF
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c8:4f:9a:cb:b5:bc:77:6c:1d:e3:92:b2:0a:31:4b:39:f4:
1d:f7:28:c6:4c:3f:00:e5:4c:31:9d:14:d6:73:0b:b1:c8:91:
ef:5d:c5:c2:ce:d6:1e:11:16:9f:ec:ba:36:19:f5:fc:4d:7c:
0b:80:6b:3f:99:87:52:c4:b8:22:d3:ea:9a:7e:b4:97:87:f9:
e3:46:7a:b8:a1:2b:46:e2:f0:4d:bf:82:d6:b6:fa:58:39:d2:
54:1d:1b:80:9b:68:68:cf:01:46:30:4a:b2:06:ad:cd:c0:c9:
b2:94:3a:25:c6:a8:6e:1d:62:6f:e1:74:c6:88:ca:93:a2:d8:
b3:23:9b:37:c0:af:93:cc:a8:4f:bf:64:1e:cd:1e:4f:11:27:
94:fd:f0:7b:8d:58:fa:d1:31:59:96:00:dc:09:30:7e:17:ab:
1c:65:a0:6c:fe:6b:c4:e2:8e:0f:e6:ef:9b:a0:32:6b:fa:6d:
88:19:ab:63:ce:1f:8a:f8:83:85:88:82:95:bc:94:59:f6:25:
28:7b:4e:5f:47:56:6c:5f:07:e4:0a:16:20:7c:f9:6a:c8:0e:
2e:24:80:21:36:6f:8c:40:ce:d3:56:a5:99:69:68:2e:fe:24:
d1:08:30:ff:11:81:1e:c4:89:9f:e2:5b:1e:74:a5:84:eb:de:
8b:17:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:47 2025 by rpki-client