Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: MxY/E7eIWa5jsVX8mg19Mnd+7JD+0NAtP/uycTq/Q/M=
Subject key identifier: A6:2B:6B:A0:1A:17:55:2D:8E:31:1B:C1:1F:03:3B:88:20:8E:97:60
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 0196759E702C40D986662BE8A5A89C1F81C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 11A2
Signing time: Sun 27 Apr 2025 05:00:39 +0000
Manifest this update: Sun 27 Apr 2025 05:00:39 +0000
Manifest next update: Mon 28 Apr 2025 05:00:39 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: F2dvX1mQZhnrFSnIi9xlVYnh9LQMAJ/5BBmw3SbvwY8=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:70:2c:40:d9:86:66:2b:e8:a5:a8:9c:1f:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Apr 27 05:00:39 2025 GMT
Not After : Apr 28 05:00:39 2025 GMT
Subject: CN=a62b6ba01a17552d8e311bc11f033b88208e9760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:9b:aa:a9:6b:18:1a:06:25:ae:c7:13:cb:
d0:4f:13:6e:66:c0:7c:34:3a:f6:e5:3b:14:14:fb:
4c:c2:76:71:11:a4:00:9c:86:86:c0:96:4d:e9:74:
59:75:b0:cc:c7:35:f6:4b:7b:2c:09:9a:ff:82:05:
9b:98:01:ba:9d:15:2e:92:1d:64:d1:63:53:fd:9e:
ec:fc:4d:7c:75:b3:0b:c8:62:1f:fd:4b:f6:03:c9:
ce:d2:c3:d3:e5:ff:b4:61:4f:2d:7a:27:b8:71:6f:
3d:1a:78:43:29:2b:c0:d5:a8:e4:6c:9c:e0:6e:25:
27:3e:8f:cc:ec:28:74:23:e3:e1:6a:67:b9:5c:4e:
5e:3f:17:3c:4c:20:38:65:dd:61:04:e1:58:04:3d:
f6:cc:f8:00:08:07:da:4c:93:7b:06:58:22:35:dc:
8e:e9:9b:06:84:bc:11:7c:e3:51:5e:71:07:26:c4:
93:6d:bb:90:2f:85:67:96:c0:47:4d:7f:c3:da:3c:
bf:e6:df:ab:31:3b:3e:46:c6:c9:f3:bf:f2:d5:a2:
1f:81:c3:58:94:13:df:73:44:08:fb:01:36:a7:2c:
3d:a0:7e:b2:a7:77:3a:92:e9:f3:39:ee:6f:dd:e2:
78:42:f8:28:cc:69:fd:00:39:3b:ef:3a:00:64:3e:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:6B:A0:1A:17:55:2D:8E:31:1B:C1:1F:03:3B:88:20:8E:97:60
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:6e:98:d2:ef:09:b9:b5:57:d6:15:1e:98:c0:8e:f8:a5:
f6:2f:70:93:42:51:9d:2b:ed:7b:ad:4f:47:f6:a9:0b:07:db:
00:bd:a6:cb:92:38:bd:b3:a4:88:f5:2f:ee:d3:8c:33:9b:f0:
57:bb:0b:2b:be:9c:02:13:bd:5c:7e:70:ce:29:41:d4:05:93:
3c:99:59:36:1b:45:0a:d3:f6:2f:5a:1c:ea:59:46:9e:d4:66:
17:42:9a:0b:5e:7a:cb:c6:a1:ac:3b:d7:b0:f4:6c:f0:d4:a9:
87:9e:47:6e:60:29:8f:d0:67:50:74:8a:65:ea:64:c0:45:0a:
5e:e9:52:3b:2f:48:bd:eb:97:85:4c:94:6e:e3:15:f2:71:4a:
4a:a4:5e:65:92:e9:fd:3a:e2:71:b8:aa:34:cf:de:79:8a:78:
7b:9b:fb:7f:71:3b:01:77:a0:ac:7d:8a:b9:dc:05:cc:5e:f4:
07:c6:7d:90:38:6e:bc:a3:97:08:82:aa:44:5f:47:a3:20:c6:
a0:70:aa:20:a8:89:69:ff:cd:a7:1c:67:81:7d:b1:12:4e:64:
81:68:92:dc:40:ef:36:71:20:f8:8f:52:6a:66:06:76:91:59:
cd:d9:1f:22:f4:cc:73:ad:92:17:33:7b:0f:70:cf:35:79:02:
83:02:ca:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:57 2025 by rpki-client