Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: ur22vn6DhUQW/WA197KuIBec6xT9Mr6BXfHnhkY1FSY=
Subject key identifier: A4:BE:6D:5C:29:74:0B:D0:5D:22:F7:CE:A1:26:4E:73:EC:EB:DA:97
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 019680591B6FF9361FD9ACFCD0A71D4B0738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 1459
Signing time: Tue 29 Apr 2025 07:00:45 +0000
Manifest this update: Tue 29 Apr 2025 07:00:45 +0000
Manifest next update: Wed 30 Apr 2025 07:00:45 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: Me/UbZ9JT2ZzhiKDTIyQPTqRA5YuPzaYwRNRicAeqKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:1b:6f:f9:36:1f:d9:ac:fc:d0:a7:1d:4b:07:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Apr 29 07:00:45 2025 GMT
Not After : Apr 30 07:00:45 2025 GMT
Subject: CN=a4be6d5c29740bd05d22f7cea1264e73ecebda97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:dc:f6:a6:95:32:3c:d9:03:4f:42:c5:80:
e6:65:5a:dc:46:bc:14:e4:3b:9b:4c:27:36:38:81:
09:6f:6b:b2:c6:03:59:60:20:17:ec:e9:dc:e0:c8:
22:1c:8c:67:e3:52:6c:3f:c3:a7:21:d1:78:f9:3f:
ef:1e:66:4f:98:9c:c5:e6:97:df:d3:a0:f3:4a:c8:
a5:5b:ec:f6:1e:14:5c:da:4b:84:fb:a6:f8:b6:b3:
4a:6e:cf:fb:99:48:d6:de:78:9e:02:c4:f2:a3:5b:
a0:eb:10:2c:37:6e:0b:d6:b1:72:c1:59:1c:c1:b0:
59:e4:e8:76:f1:21:b9:41:63:1f:c7:7c:83:da:b4:
a6:96:60:c8:74:49:80:87:dc:28:8b:56:a1:9e:13:
2f:9c:1e:07:f0:9f:8f:1a:2a:55:07:71:2f:59:f0:
03:92:db:8d:3e:c6:a9:98:2c:a5:d3:21:d5:47:41:
c3:76:45:c3:6e:1b:e4:3e:6f:2c:be:64:1e:ec:04:
be:a5:8f:01:81:2a:13:e8:e8:6f:97:1d:1a:b8:5e:
a5:33:c2:f7:69:65:ea:16:be:b4:cb:2d:81:2f:0c:
63:93:7b:36:62:27:d0:72:ef:96:2a:de:52:da:58:
96:fb:3a:99:7c:6a:50:bb:1a:fa:50:05:d7:25:bb:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:6D:5C:29:74:0B:D0:5D:22:F7:CE:A1:26:4E:73:EC:EB:DA:97
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:65:5a:ee:b9:f0:5d:2f:ac:68:97:4f:f5:df:38:44:ae:bc:
d3:ab:6a:b7:c9:e0:f1:ce:c9:18:1a:5d:a8:f0:23:f4:71:3d:
51:38:68:27:6b:9f:25:0d:a7:3e:29:39:22:88:a5:e7:a4:07:
68:7e:2e:37:85:d5:ee:97:db:e3:8e:d8:58:85:9b:95:fd:b7:
63:2c:db:ac:f5:d3:b1:20:bf:6d:e7:f9:4c:8a:91:91:b8:04:
03:5e:df:77:9f:ff:ca:01:a3:57:27:d5:3f:5d:c5:8c:7f:24:
f6:32:c9:25:f1:d6:65:91:dc:39:02:ae:46:6f:54:ce:bf:53:
02:7e:f6:37:62:fd:03:4d:32:99:12:c1:92:f0:5a:67:da:ba:
94:d7:8f:a1:61:ac:cf:a9:e5:cb:06:aa:60:50:97:a5:65:60:
b7:19:6d:06:75:1c:ff:54:42:cb:3a:6c:70:ce:ee:ce:89:68:
c0:48:54:80:08:be:c6:eb:1c:d8:d9:58:11:29:30:3b:49:4b:
9c:03:5a:84:c6:e3:7b:bf:56:c2:6c:3e:d5:1f:1f:24:2f:09:
1c:cb:a9:25:cd:53:10:8f:d0:05:3f:f4:7a:17:55:2c:bb:64:
6f:12:c9:e2:86:b1:10:34:8a:52:2e:f7:53:53:7c:ff:7d:d7:
d5:51:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:05:24 2025 by rpki-client