Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File: yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier: UwdPZac/VXB47JxwLhF9Lg8mByZmxA3r72EixtcYvjg=
Subject key identifier: 8C:7D:CF:A5:6C:2D:1B:2E:82:84:4A:2E:4C:5B:3E:5E:32:99:E5:77
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer: /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial: 019674C2C9399D8BBDD620D902258ED58013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number: 04B7
Signing time: Sun 27 Apr 2025 01:00:44 +0000
Manifest this update: Sun 27 Apr 2025 01:00:44 +0000
Manifest next update: Mon 28 Apr 2025 01:00:44 +0000
Files and hashes: 1: OD_06SfZ3_hheASbKyQTBpKLvXQ.roa (hash: ybCs4Tm+I7vGFeJISbNMcOaCuI5hMEk5Vs5Dolkyuw4=)
2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: 4D0RRF1TavIMxKgy0mLJf0dVI71Fz8FKO30CcUIFvPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:c9:39:9d:8b:bd:d6:20:d9:02:25:8e:d5:80:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Validity
Not Before: Apr 27 01:00:44 2025 GMT
Not After : Apr 28 01:00:44 2025 GMT
Subject: CN=8c7dcfa56c2d1b2e82844a2e4c5b3e5e3299e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:e5:41:e9:f3:22:04:3b:c9:f5:c0:05:d5:
48:7c:8a:57:21:3e:66:74:59:6a:17:13:86:f0:18:
42:f4:c1:12:bf:de:61:be:d2:74:52:77:6d:46:60:
3b:18:44:fc:31:2b:52:b2:46:c3:ab:35:20:c6:16:
62:ca:1d:71:73:81:be:4c:6d:53:24:08:44:15:4b:
2a:af:56:72:6e:51:26:76:35:55:e2:5e:71:dd:ed:
2b:27:51:0a:eb:55:0a:8d:95:c2:e9:b2:90:cd:ab:
64:bb:e7:60:d6:a7:62:ac:a6:7f:75:51:6e:35:51:
65:1d:cc:e9:2e:b2:99:99:47:27:6d:af:a6:bf:8a:
5f:9f:b5:35:4d:22:0d:d3:82:6b:b5:8c:dc:8d:a9:
6e:16:62:95:f9:49:7d:0f:f9:5d:e2:14:91:52:ae:
33:d2:4f:6d:f2:45:11:f5:d0:06:33:18:54:1e:c5:
26:0f:53:2b:a0:39:f8:7c:f3:a3:50:3a:38:0c:85:
7b:51:55:0e:1a:5d:96:d9:73:a4:cf:75:07:30:8f:
d3:10:2f:89:c8:3f:52:a9:33:d8:02:4a:62:1c:85:
0a:f6:0c:89:98:c4:00:c9:04:ff:be:dd:3f:5b:60:
f4:d7:34:e1:04:51:14:82:9b:46:4d:f5:73:e0:0f:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:CF:A5:6C:2D:1B:2E:82:84:4A:2E:4C:5B:3E:5E:32:99:E5:77
X509v3 Authority Key Identifier:
keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:87:d1:f4:94:5f:6a:3d:91:07:88:5a:ac:1c:b1:c4:72:0e:
74:3d:a8:f7:97:f4:e3:73:1a:71:40:44:f0:7a:d2:b7:42:0e:
6e:b7:95:5f:38:5a:40:20:a6:38:ad:57:6d:9a:12:8f:92:23:
0a:b9:dd:82:6f:8b:b6:9e:c8:01:d7:05:ce:cc:df:04:3f:9a:
18:31:da:11:98:d3:8c:79:49:c0:1c:26:f1:7b:ca:cf:04:a6:
77:5b:b7:51:0c:d0:14:0a:c4:de:39:ae:64:fa:a7:94:1e:6b:
a3:57:2e:a0:65:44:a5:eb:4e:14:83:bb:93:6b:0c:8d:53:47:
03:a1:bc:a4:1d:2a:06:89:44:be:6b:cd:c6:20:70:b0:67:25:
b3:0c:ac:2d:d4:de:a7:77:57:9e:36:89:df:69:34:37:52:f2:
54:76:56:af:08:0f:71:5a:87:6c:1b:70:5f:e3:ca:5b:db:43:
6a:71:f1:50:59:78:23:ea:50:a2:9a:ae:31:82:dd:6b:3d:ec:
1c:5d:84:c6:08:ae:fd:03:f1:b5:55:f6:2d:86:ee:16:93:a6:
65:cb:6a:ec:90:98:15:33:43:87:c6:6f:dd:07:2f:df:2e:04:
6e:88:62:6b:08:31:22:72:bb:eb:40:0b:ef:a1:57:da:6f:81:
bf:ed:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:29 2025 by rpki-client