Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: ZNbBmmA/jcZlzdIoh2eSXHf2FVyYbu55SMxAhk9vzHg=
Subject key identifier: C6:86:A5:5A:56:FF:EB:CF:42:9C:08:3D:48:4D:16:1C:C0:DA:C5:64
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 01967C7C6B87C865EB379C1B13E55EF060B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 11B2
Signing time: Mon 28 Apr 2025 13:00:50 +0000
Manifest this update: Mon 28 Apr 2025 13:00:50 +0000
Manifest next update: Tue 29 Apr 2025 13:00:50 +0000
Files and hashes: 1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: 8aOwmQ4UIKYRUaZq+gu954wwkRlGg2ggIpuUc9v+jcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:6b:87:c8:65:eb:37:9c:1b:13:e5:5e:f0:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Apr 28 13:00:50 2025 GMT
Not After : Apr 29 13:00:50 2025 GMT
Subject: CN=c686a55a56ffebcf429c083d484d161cc0dac564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:47:e6:41:22:de:05:47:93:25:d9:57:81:
95:e5:3b:5b:1d:a9:cd:4e:16:91:0b:61:60:1c:12:
33:1b:95:32:0e:fd:6c:6b:dc:8a:5d:ad:f6:4a:49:
14:29:5b:86:9f:b5:3a:1b:8e:c9:2d:a9:c7:64:13:
6a:1d:22:18:fc:09:98:71:49:c2:a7:ef:90:4f:55:
c6:e3:88:7a:19:61:e2:ee:c9:24:ec:c7:e0:d0:88:
78:11:73:ab:eb:37:14:20:c2:3c:00:f3:7b:b7:e5:
b3:3b:de:12:29:7a:78:bc:05:03:69:75:05:9d:08:
ab:64:ad:ae:61:51:dd:8c:23:89:95:6b:3e:21:55:
54:a1:0a:f9:75:08:d3:49:eb:ec:5b:f1:6d:0b:ff:
dc:54:4d:10:a0:46:4a:c8:c2:4d:e0:84:8f:be:d0:
0a:67:79:b7:c2:00:e8:5d:5b:53:16:2a:e2:4b:50:
2e:fe:ad:04:b5:60:64:c3:5c:40:64:bf:da:e9:5e:
d7:e8:78:08:28:a0:8b:7b:6b:3f:0e:53:e7:5e:38:
98:54:6b:be:06:30:97:cd:14:2b:dd:f9:cc:3c:69:
2c:3f:f3:e2:85:ee:a3:9b:c5:26:72:a4:c9:d7:b2:
3c:cb:16:15:0e:4a:95:55:3b:18:ef:58:75:d2:f5:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:A5:5A:56:FF:EB:CF:42:9C:08:3D:48:4D:16:1C:C0:DA:C5:64
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c3:c4:07:d2:a4:e8:f7:37:49:4f:26:17:00:93:97:75:95:
61:33:ad:c8:3a:df:32:f1:62:8e:3b:18:c7:76:a4:24:e3:72:
13:02:46:e4:a4:75:ab:91:da:32:66:26:91:d3:95:3e:08:9a:
8e:ab:e9:92:58:1d:5e:43:d1:8c:c4:47:fc:d6:fb:0a:e9:37:
0a:fc:06:49:ff:07:cc:27:45:86:02:95:34:a4:b4:d4:56:59:
cf:bf:cb:68:a1:de:80:84:d6:7c:f7:f2:cd:61:98:c4:f4:6e:
af:ae:67:39:a5:09:92:42:1e:fb:26:23:9f:ef:82:60:64:d6:
02:39:7d:a5:bd:80:d4:e2:ab:88:49:2b:68:34:1d:63:85:17:
76:15:6c:54:ee:13:cc:11:4b:ca:31:f6:fb:d4:ee:98:50:af:
5a:1e:b0:39:a5:8e:56:fd:96:51:66:14:17:92:9d:2d:1c:ff:
cc:8b:79:72:54:db:5d:97:a2:f6:e9:25:02:e5:a0:49:dd:dd:
df:45:f0:3b:4a:77:96:58:38:d2:10:7b:80:1a:02:ff:2b:8c:
6f:e2:8b:1f:77:a0:e6:c4:06:11:49:55:10:3f:56:dc:97:4b:
48:f0:73:eb:8c:a4:82:aa:51:be:11:ae:86:f3:ad:2a:0d:24:
dd:30:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:29:09 2025 by rpki-client