Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: In4+mcFlnIVXekvFcOsmNX4MB/ZfLb7wOu1EGI0MyLY=
Subject key identifier: 56:7B:FD:1C:2F:CA:03:3A:2D:F8:99:10:F2:16:CC:33:8C:3A:28:FE
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 01967FB4CE0714AFDBD11CA375A479D1A5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 04:01:17 +0000
Manifest this update: Tue 29 Apr 2025 04:01:17 +0000
Manifest next update: Wed 30 Apr 2025 04:01:17 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: 5KVcW0EvxePMj3J2OdEwMqhTYjt8QfErWFLmTs9KbIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:ce:07:14:af:db:d1:1c:a3:75:a4:79:d1:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Apr 29 04:01:17 2025 GMT
Not After : Apr 30 04:01:17 2025 GMT
Subject: CN=567bfd1c2fca033a2df89910f216cc338c3a28fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:15:02:8d:32:1f:c1:f5:f3:a0:f6:aa:76:
0d:1b:d2:e1:48:be:74:f9:68:d0:9a:15:b3:cd:b2:
59:97:a8:34:22:b3:74:94:f6:95:17:6b:0c:50:49:
22:44:a1:df:39:d0:a8:e7:c1:c6:28:23:6c:49:0f:
46:61:b0:34:d7:e6:0b:b1:e4:80:4f:60:16:fd:5b:
ba:f8:be:39:53:6e:af:c8:c0:3a:45:91:21:e8:36:
e2:3a:f7:3f:88:29:f0:c4:66:48:25:7e:b1:d1:1c:
7f:f5:cd:0a:84:c8:9a:58:35:7c:08:00:f3:39:59:
27:6f:da:01:4b:d3:16:35:47:04:6f:76:4a:f2:c0:
0c:41:f7:f2:b6:2a:bc:07:31:21:fc:95:86:4a:67:
42:da:3a:78:e4:7a:f3:a6:ce:90:4a:84:c7:dc:e6:
42:e9:91:84:34:60:d1:69:56:aa:0f:ce:80:8c:64:
f6:0b:26:44:ca:23:a7:84:da:bd:3a:e5:61:57:3e:
10:aa:5f:4a:65:46:a9:60:92:3f:62:34:21:23:dc:
65:3c:11:2a:56:a4:7b:ee:2b:7c:f3:e5:1b:3d:31:
40:06:c6:2a:02:5e:8d:01:15:dd:cc:d5:0f:a4:d3:
f8:7a:fa:4f:d4:0c:16:84:56:de:5e:fa:5d:30:33:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:FD:1C:2F:CA:03:3A:2D:F8:99:10:F2:16:CC:33:8C:3A:28:FE
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a1:65:a9:a7:61:81:67:d0:e8:da:31:fe:cf:60:bb:dc:a4:
e8:d4:5f:a6:34:b4:45:72:01:91:f7:e6:8a:2f:09:c1:c2:cb:
b7:78:a6:45:05:95:a9:9a:78:24:6b:c2:60:b1:d6:39:bb:47:
0f:54:b4:92:01:75:68:1b:52:d0:c9:e1:f4:05:b0:10:73:69:
58:d8:df:c8:7f:19:87:35:37:0f:0f:63:f7:e0:70:ac:63:08:
c1:01:1d:bb:26:6a:f7:27:12:72:5b:93:70:22:67:a8:a3:6b:
ac:b0:01:a1:74:82:a0:6b:9f:84:a9:9e:db:37:29:18:09:24:
74:d5:54:10:23:a4:70:88:49:65:77:de:5c:6d:ae:ca:b2:95:
9a:da:c7:a2:60:5c:75:f0:fe:fb:b3:67:f2:e9:f0:4e:ff:c2:
34:31:26:90:83:d6:af:5b:72:2c:81:66:cb:9f:0d:88:f1:a1:
42:8b:13:ab:78:b4:62:31:8b:3f:06:dd:1c:f0:3a:06:f9:f8:
df:3b:26:59:4a:80:72:78:a5:90:f3:fd:8c:f1:fb:fb:5f:9e:
41:e6:54:40:23:26:61:6b:fa:a1:60:67:2a:4f:b8:af:dd:75:
bc:63:86:a7:73:d4:04:85:4f:c4:51:06:f2:17:a9:74:1a:4b:
07:dc:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:02:33 2025 by rpki-client