Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: egDWNRBxnX5UO2BvqimFbq4lP0UTDkW/Py6XM2cghbM=
Subject key identifier: 8C:D6:3D:BA:51:47:79:7F:86:64:79:D7:3C:AD:29:D4:13:5D:82:2C
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 01967868979DCA2B329AE47CA0481B59BA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 12EC
Signing time: Sun 27 Apr 2025 18:00:42 +0000
Manifest this update: Sun 27 Apr 2025 18:00:42 +0000
Manifest next update: Mon 28 Apr 2025 18:00:42 +0000
Files and hashes: 1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: q87gnxj5SUuenSxUc7iuSKA/1ARQoRxt8kndtjZeTUo=)
2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:97:9d:ca:2b:32:9a:e4:7c:a0:48:1b:59:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Apr 27 18:00:42 2025 GMT
Not After : Apr 28 18:00:42 2025 GMT
Subject: CN=8cd63dba5147797f866479d73cad29d4135d822c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:7e:43:55:53:c4:4e:07:31:74:32:3a:a9:
b3:e9:be:ce:53:1c:57:34:6f:19:a2:b0:fb:02:48:
fa:aa:c0:a2:f6:26:0e:0d:89:41:87:12:d4:b7:96:
3f:8d:79:c2:88:df:e6:2a:45:69:25:8b:22:5b:98:
3e:6e:cf:ee:a9:a4:69:da:a8:e9:f4:78:1f:cb:bf:
55:2f:9d:0e:fd:0a:be:49:86:2e:2f:25:dd:ed:8b:
23:2b:56:b7:a4:3b:df:68:26:60:20:17:14:7d:84:
03:0e:2f:ae:73:38:ba:0b:56:58:18:17:87:de:b9:
28:50:ae:80:8e:56:b1:97:49:79:75:26:08:cf:9f:
81:24:d1:70:de:ec:9a:d8:be:42:6e:43:f6:59:85:
e1:75:a2:19:b3:17:9a:52:83:47:54:87:9e:3f:24:
68:c0:16:cb:4b:25:07:c3:5b:67:f2:38:29:10:fc:
89:f2:fd:a0:73:cc:8b:3b:42:92:01:ca:72:23:d5:
fd:de:85:e8:6d:2f:1f:9b:b0:3d:35:f2:44:1b:b8:
d5:b5:58:6d:6a:ec:5f:f9:95:84:be:5a:3b:08:7d:
da:29:68:48:54:fd:ab:a4:bf:f5:81:3d:1b:d9:f5:
95:41:9f:16:83:85:6b:1c:da:99:1c:83:d1:34:eb:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:3D:BA:51:47:79:7F:86:64:79:D7:3C:AD:29:D4:13:5D:82:2C
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:94:f2:af:5f:91:8f:d2:33:aa:22:de:20:01:58:d1:c3:
f0:b2:51:cb:e5:71:da:5a:05:b0:67:f7:b1:56:5c:b0:02:ff:
b3:7b:22:01:d8:9f:28:dd:a4:b2:f7:17:31:0a:da:e9:0f:df:
37:bb:cb:5b:a6:ca:ee:bd:41:9e:b4:a1:90:8e:ad:88:83:19:
29:a7:5f:5a:e1:62:18:9e:2b:b3:aa:1c:ae:9f:e8:49:55:41:
83:28:3a:d2:93:d7:d5:b9:04:54:13:a4:60:57:60:19:91:ed:
b4:e3:b3:85:38:18:81:73:4c:6e:c6:21:bd:0e:97:fd:8d:97:
83:da:9a:ae:a2:72:73:7c:29:12:90:93:a0:6d:ff:31:c1:1e:
34:23:93:9b:43:80:bf:32:6f:85:7b:9b:c8:e7:c0:d1:9c:f5:
79:d8:47:d5:04:65:cd:fd:82:80:bc:f9:8f:a8:08:42:ba:e2:
6c:a2:06:48:b0:86:2a:9a:bb:31:4c:d6:b2:44:a9:85:d9:f3:
d9:bd:87:14:83:31:c2:f6:e9:1c:f9:b4:e8:2e:16:4e:36:ef:
c2:4d:cf:86:27:c1:59:3a:7e:4e:f5:53:9f:4a:84:39:cc:d1:
3f:4f:f9:d6:4f:cf:1b:70:0e:96:0c:2a:e4:0a:94:84:99:51:
8f:50:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:34 2025 by rpki-client