Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: uqO8Rz6+VcQKSfToe4wc6IQsriSIzLgaEXHqvPdy1NY=
Subject key identifier: 2D:9A:66:F6:63:13:64:F3:A5:02:96:53:11:68:8E:DB:53:3B:4B:2B
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 019679EA038DA1A7BCB0B06D5480AE66C294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 01:01:41 +0000
Manifest this update: Mon 28 Apr 2025 01:01:41 +0000
Manifest next update: Tue 29 Apr 2025 01:01:41 +0000
Files and hashes: 1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: 2gUr+TP0tAHbXEn+BTqJTLUYjxeNw3p6UeE6mWBfs+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:03:8d:a1:a7:bc:b0:b0:6d:54:80:ae:66:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Apr 28 01:01:41 2025 GMT
Not After : Apr 29 01:01:41 2025 GMT
Subject: CN=2d9a66f6631364f3a502965311688edb533b4b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:32:bd:f1:7e:d2:2b:1a:02:ae:37:ba:09:
78:b0:c8:90:8e:35:7d:7b:86:20:ec:7d:2b:4b:05:
dc:c3:bc:a5:a4:4a:bb:8c:02:6c:1d:52:54:23:68:
c0:82:15:a4:04:b1:49:28:33:48:f5:00:58:75:4f:
b8:2b:48:de:41:d6:3f:ac:72:cd:02:60:30:ea:4b:
0c:4e:dc:bb:fc:38:bf:52:5b:f7:03:3b:60:ff:a9:
35:f7:46:61:7f:5a:7d:ca:8e:1c:ee:e6:2e:94:d1:
2c:e9:f5:08:aa:32:9a:d6:06:4c:ff:cb:c1:ed:3a:
cb:2b:ee:25:b7:25:75:39:ab:88:40:3e:93:ed:76:
b8:f0:d2:78:66:a0:7f:5f:be:5d:49:5b:f7:a3:9e:
11:f5:60:3f:17:bc:1a:0a:21:c7:2a:9a:9e:b7:3a:
6f:b5:16:2f:d8:23:f5:31:7b:fd:35:58:ce:68:51:
60:5a:c6:84:db:8e:7f:a3:81:0c:bb:a7:d5:ac:2e:
19:96:f4:df:f3:23:11:55:19:f8:d3:2c:8c:45:1e:
6d:c4:d1:94:b6:85:9e:bb:0e:4e:64:7a:1c:52:81:
90:2f:84:4b:4a:3c:90:e8:11:6b:66:e1:60:fa:96:
e0:f7:d7:13:27:ee:1a:14:e2:2a:80:02:34:ab:0d:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:66:F6:63:13:64:F3:A5:02:96:53:11:68:8E:DB:53:3B:4B:2B
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:60:3b:1c:a5:e4:e5:27:39:81:a5:66:bc:30:23:70:77:03:
f9:3e:c9:92:8c:db:d6:60:6a:68:2f:fb:9e:c3:df:fa:9b:d0:
b5:18:f3:36:ee:62:3b:bc:30:e3:da:04:07:23:7f:cb:37:f5:
d9:a7:f5:f7:eb:d6:ad:9d:68:41:a0:be:6a:98:c6:61:e7:4e:
8b:08:fc:93:18:4e:2b:4e:63:a0:ef:d6:3e:1f:16:37:00:bd:
ba:f6:e1:33:be:96:d4:f9:bd:2b:23:63:62:01:2e:93:c8:b1:
2a:a2:9c:32:3f:86:86:5d:2e:d0:f1:a7:8f:94:d0:db:ba:55:
c5:91:7b:05:4c:66:f1:ba:b3:ef:53:57:b7:0f:6a:33:53:12:
70:1a:bf:32:07:b1:45:4f:41:c3:f3:04:ed:99:55:b2:ea:54:
97:ab:3a:ca:41:27:5b:c0:01:35:93:0a:7a:d7:be:de:38:9e:
54:36:cb:a9:be:b2:62:b9:20:4d:a0:10:6d:59:51:23:99:32:
2f:bf:a9:c3:cb:f4:1f:a4:e3:7e:35:e8:31:7c:28:9f:db:16:
e0:ab:5b:07:08:f6:de:4f:8a:3f:b4:b8:1a:12:37:f4:52:ee:
ab:07:c6:3a:16:38:23:27:d3:ae:5c:ee:de:ec:ec:3f:74:a0:
25:78:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:42:09 2025 by rpki-client