Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File: yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier: z90++OZWnFb40mmDr3ji8rHsXWuRo1Tqd0pSXiIWyyM=
Subject key identifier: E3:C3:B2:61:A6:5D:F5:48:5C:5C:D5:1A:E5:0A:34:49:13:63:E0:78
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 0196767A23CC5BFF000E245EAB247D8C8009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 09:00:38 +0000
Manifest this update: Sun 27 Apr 2025 09:00:38 +0000
Manifest next update: Mon 28 Apr 2025 09:00:38 +0000
Files and hashes: 1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=)
3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: dWbn2lz88z/1dim/e+LxNzbJL4GByZLGotj0sZCJn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:23:cc:5b:ff:00:0e:24:5e:ab:24:7d:8c:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Apr 27 09:00:38 2025 GMT
Not After : Apr 28 09:00:38 2025 GMT
Subject: CN=e3c3b261a65df5485c5cd51ae50a34491363e078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:99:ed:a4:22:6e:c0:33:47:86:1b:b8:a8:
bd:9d:d9:0a:55:e5:91:c7:9d:82:f2:b6:33:44:3a:
85:cb:64:78:aa:09:64:d2:13:d6:37:56:23:9e:70:
42:09:89:29:90:f6:a8:42:a2:5f:ce:9d:43:ae:67:
fd:38:52:2b:1d:5e:06:18:69:57:f5:a3:30:59:e0:
be:37:c7:6a:3e:f7:80:81:7c:d5:9a:80:6a:e6:82:
05:9f:20:71:92:ff:74:9c:27:b9:27:90:aa:ea:f3:
6c:97:f1:80:5c:71:27:a2:cd:f7:40:85:9b:8b:70:
c8:0a:ea:46:97:3f:99:ef:b2:fe:f6:f1:f1:f8:ba:
ce:e6:b2:50:ca:55:25:bd:53:d2:ae:09:f4:a9:c9:
c1:38:70:71:e1:29:d3:72:45:ec:3b:aa:b7:ea:59:
b8:ce:9d:23:98:8f:c3:09:97:11:30:f4:66:a4:4c:
d9:41:06:37:94:a9:2e:2c:41:da:9d:e3:55:5d:a2:
b8:59:04:c3:52:67:b5:10:1d:20:74:31:97:67:49:
06:66:60:5e:dc:23:9f:d2:a4:59:6e:4b:e2:e6:97:
b9:37:59:74:9d:b8:a8:e9:7f:8a:98:f2:fc:d8:3d:
e6:57:c6:5c:c8:f1:64:5c:9c:fc:31:20:09:2e:8f:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:B2:61:A6:5D:F5:48:5C:5C:D5:1A:E5:0A:34:49:13:63:E0:78
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d2:14:6d:ab:01:53:24:12:1e:77:a7:d2:ea:e6:77:a1:27:
4b:ef:71:fe:30:56:5d:dc:6a:df:e0:1f:be:73:0b:67:66:8a:
bc:6a:e8:10:bd:af:88:0f:b1:45:51:5a:0d:53:0b:85:ad:15:
54:53:c7:ea:48:2a:bc:55:f4:0b:28:bb:71:4a:69:40:9b:9f:
9e:3e:e5:6a:89:83:a2:73:d1:be:e3:03:9f:fb:26:6d:40:cb:
bb:bc:cf:7a:c6:bc:d5:fd:8e:7d:b2:4a:55:4b:ac:93:36:df:
c2:81:95:92:30:9c:21:2a:08:7f:2b:51:14:db:fb:1c:65:2d:
81:cd:27:89:ed:30:ab:9b:a8:49:b7:db:5b:7b:62:8c:a0:16:
21:23:99:ad:26:32:9c:be:0e:f0:7a:2e:80:78:c7:a5:00:95:
04:bf:87:1a:50:32:6a:91:7f:ef:0a:ca:ae:56:66:db:b5:17:
99:24:b9:07:8d:2f:bb:03:20:2f:c6:b5:37:09:5c:2f:0b:11:
2b:0e:55:09:a3:43:cb:18:71:f6:91:92:8a:34:b7:64:cc:d9:
40:d0:96:f3:00:7b:22:8e:bd:9c:bb:21:e8:6f:84:93:41:d0:
b0:f0:b4:a2:6d:28:42:42:e4:e6:0d:8b:94:52:06:ea:bd:a2:
f3:bc:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:52 2025 by rpki-client