Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: mCLjOKeD2U56YuUWneUxQ1WwLv2dGCjg9fF5srcihvY=
Subject key identifier: B6:0D:81:07:20:56:EA:39:FF:88:82:CA:54:D4:E0:88:48:11:8C:47
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 019675305EE21C823E7A74E315C64E751D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0D2D
Signing time: Sun 27 Apr 2025 03:00:26 +0000
Manifest this update: Sun 27 Apr 2025 03:00:26 +0000
Manifest next update: Mon 28 Apr 2025 03:00:26 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: gcSC+AdSSvPsp7WSdp0crQ6W6YpZ6hf8PLDRMPuFbpU=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:5e:e2:1c:82:3e:7a:74:e3:15:c6:4e:75:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Apr 27 03:00:26 2025 GMT
Not After : Apr 28 03:00:26 2025 GMT
Subject: CN=b60d81072056ea39ff8882ca54d4e08848118c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:3e:95:5f:24:9a:01:a7:15:3e:33:8d:ed:
b7:dd:c8:fa:fd:c7:e3:eb:c3:79:67:05:4e:65:76:
8e:df:57:0d:c9:9f:68:0d:5d:21:9b:49:d2:57:dd:
60:84:db:74:7b:b2:97:8e:13:3a:d8:bf:3d:9c:af:
00:7e:24:94:4e:66:f8:d3:18:a5:89:13:02:0d:ef:
bd:1c:ab:03:a5:c1:b5:6b:4d:b1:6b:6b:d7:54:71:
83:80:c5:7e:38:5a:78:5e:ce:fe:11:22:c4:a5:79:
3e:c2:c8:6a:f4:d3:60:34:28:ee:ae:0d:61:51:38:
83:32:d4:c4:da:19:48:14:9c:6a:64:e9:a9:7d:bc:
5b:29:3c:7d:4c:1d:cf:14:8b:89:1c:2b:47:2c:8a:
c1:7a:75:a4:ca:b1:20:80:97:f3:51:4d:d5:7b:0e:
33:26:f0:00:23:7c:18:3b:a7:ae:f3:84:52:3c:ba:
ac:dd:e5:f1:f4:57:3a:b7:6c:ef:f5:34:5e:79:2a:
3f:51:25:5e:07:f1:09:45:5d:56:67:fe:de:5d:5c:
ad:2a:e0:cf:d5:c6:3b:18:b9:9f:7a:69:68:c3:49:
a1:93:6d:7f:41:50:40:37:40:bb:26:d2:2c:3f:cb:
71:e8:89:96:36:df:b0:d0:33:28:b9:59:91:a2:d1:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:81:07:20:56:EA:39:FF:88:82:CA:54:D4:E0:88:48:11:8C:47
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:31:1d:f1:71:54:42:ac:eb:bf:9d:84:b4:5f:5d:e2:1b:96:
6d:6c:cf:bc:48:9d:dd:5f:2b:0b:48:68:b5:7d:87:e5:34:49:
f1:c6:e4:86:0e:e0:73:77:73:40:b8:c7:05:10:9b:77:4d:f7:
b2:56:3a:d3:a7:65:f2:8d:f9:53:fa:ff:8a:cf:be:3e:3e:83:
a6:4d:a3:b3:76:ed:87:80:25:1b:30:95:6f:bc:00:df:06:c5:
ee:de:6e:5f:f7:83:6f:fb:a9:1a:a7:05:68:75:6d:0a:30:64:
0d:7f:33:00:0b:67:94:01:75:47:a7:1c:1f:c6:70:ec:3b:41:
bd:2d:e7:b5:23:f1:0f:3c:75:e9:3e:c3:e4:96:be:7a:c2:63:
b7:d8:70:24:a5:50:12:af:6d:45:76:81:17:dd:cf:eb:e6:09:
73:1d:c9:52:f2:54:f0:f7:46:46:56:bb:a5:6e:d1:f9:78:f3:
ef:b8:19:3d:51:ae:bd:f1:ce:57:47:7b:d1:a5:7f:c6:2a:d4:
7a:3c:36:fa:1f:d1:18:39:a2:4a:2f:da:9a:ed:8d:72:69:46:
ef:73:32:f8:94:55:57:b0:fa:d0:97:0b:45:76:11:99:a5:e6:
a2:1a:94:6d:72:21:25:43:45:72:ab:c1:1f:1f:34:ee:fc:74:
3e:bd:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:45 2025 by rpki-client