Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: otJ+d+7umT9V3RKkE82Ztulk2J9KvYDzN/ckkz++JdU=
Subject key identifier: 41:E1:CE:7A:13:B3:00:F7:AC:41:CE:73:B7:59:6D:5B:9B:F0:B1:EE
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 0196789F49C385CDD6C23FD094048381EAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 19:00:26 +0000
Manifest this update: Sun 27 Apr 2025 19:00:26 +0000
Manifest next update: Mon 28 Apr 2025 19:00:26 +0000
Files and hashes: 1: 92Huf3IHz49yEZcp8laODPaay4A.roa (hash: fHDvsxbqA8PNa+801vhXYVjpC3kLuwr6JG2deunc2nA=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: JU9Nc048XOeIDuObdTa67pZEEDdWHo4vRjS44xORy4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:49:c3:85:cd:d6:c2:3f:d0:94:04:83:81:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Apr 27 19:00:26 2025 GMT
Not After : Apr 28 19:00:26 2025 GMT
Subject: CN=41e1ce7a13b300f7ac41ce73b7596d5b9bf0b1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:3c:e4:0a:e7:76:9e:3e:1c:67:13:a9:77:
31:fb:3d:c2:0b:04:b9:ef:fa:50:1b:3d:8d:1f:f9:
26:ff:1b:0f:a8:fc:fc:ff:04:18:98:be:03:5b:ee:
c2:ff:1b:13:4f:a2:8b:cd:04:71:8e:df:26:0c:5d:
a9:47:86:28:fe:bd:6d:25:95:97:22:f2:cd:61:9e:
df:69:40:c7:26:11:02:39:cb:9f:e7:9b:c5:c4:c5:
95:0d:d6:de:ca:09:74:12:76:10:81:11:bf:11:66:
c4:3c:b6:ba:ca:b2:51:f6:a6:fa:e9:16:cd:89:95:
f0:03:39:5a:da:9f:15:56:8a:99:2b:aa:1e:0e:11:
3a:8f:15:41:1d:e7:d2:b9:cd:a3:3b:e1:e9:92:7f:
67:3c:55:c0:f4:34:3a:6f:27:95:84:a6:3a:15:4a:
27:ee:b3:16:1b:2b:ba:9d:74:47:5b:53:34:c5:e2:
83:7a:45:81:14:b0:30:de:dd:a4:79:a9:84:54:0e:
5e:de:73:62:8a:57:a6:9d:6f:fd:b8:c5:a1:3d:fd:
3e:33:e4:39:8b:e8:40:9d:a7:d8:d2:81:06:41:e3:
f2:3c:74:e0:48:8b:8f:50:2c:68:b0:7b:ce:75:1e:
31:5f:48:22:a1:7b:0c:90:c0:5a:ea:8b:bb:15:89:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:CE:7A:13:B3:00:F7:AC:41:CE:73:B7:59:6D:5B:9B:F0:B1:EE
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:72:f8:3e:48:98:5e:14:2f:d7:16:6d:04:61:db:da:ae:
4d:e9:20:b2:17:03:c5:5c:4e:9b:4d:03:a8:a9:6d:88:f0:66:
dc:6f:74:12:44:be:a9:7f:b8:5d:3a:45:8c:ca:65:fd:21:e4:
18:2c:4f:20:a0:24:71:83:d8:da:01:d9:c5:57:3d:4f:8b:5e:
4b:ee:00:28:7c:bd:a1:9e:9b:b5:72:5c:5b:e6:88:5c:89:8e:
7a:6d:44:30:4f:4c:16:21:8c:c1:71:39:dd:17:c5:47:a2:65:
30:47:bf:eb:c2:98:c4:ae:a0:e9:75:04:47:9e:bd:d8:cc:56:
53:ce:0d:78:14:c3:f6:8e:da:7e:c1:26:cd:c5:27:d6:e7:21:
14:4f:8f:12:cd:25:fb:66:62:85:2b:60:cd:2e:9a:96:98:2f:
8e:4b:a7:fa:e1:69:d7:d9:15:85:b0:c9:4c:c9:3e:ce:d9:f4:
44:04:11:c5:44:0e:72:48:20:25:0f:66:73:de:2a:c6:82:18:
c0:7e:00:70:62:35:b2:d8:7d:49:be:0c:60:ec:4b:31:52:a7:
48:23:40:0e:79:19:97:1a:91:ee:78:82:ff:65:33:4f:3b:63:
c1:90:20:7c:6b:56:a9:eb:88:81:a4:c1:bb:13:a5:b7:68:63:
db:e1:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:05 2025 by rpki-client