Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: Fr6OnY22aiVirAaVWVgCRgFTy+FQfd1uhfvsXKGR6hw=
Subject key identifier: 94:7C:B8:95:E3:3C:AF:86:77:BD:67:79:5B:31:93:EE:83:DA:3B:38
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01967A8DAF2DA30D287FC8A5A8B2E787AF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0645
Signing time: Mon 28 Apr 2025 04:00:27 +0000
Manifest this update: Mon 28 Apr 2025 04:00:27 +0000
Manifest next update: Tue 29 Apr 2025 04:00:27 +0000
Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: z002ew/XVybqX8Kyi6k9tuIGMSmCEV7dWxe2ztj8SWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:af:2d:a3:0d:28:7f:c8:a5:a8:b2:e7:87:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Apr 28 04:00:27 2025 GMT
Not After : Apr 29 04:00:27 2025 GMT
Subject: CN=947cb895e33caf8677bd67795b3193ee83da3b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:73:bf:9a:84:e2:8a:0f:8e:6d:54:21:64:
90:f6:7d:19:00:fb:62:b8:b0:93:9d:65:d4:2e:2d:
c6:a8:51:2b:cf:14:cc:a2:13:f0:87:48:00:5b:5c:
d2:91:71:01:10:62:51:4c:c8:39:c9:d2:58:3d:27:
6c:8a:f8:1f:19:8d:47:0b:46:ec:38:36:68:3f:80:
c4:52:23:e3:b5:65:cc:26:d6:b5:a2:51:7d:69:af:
bf:1d:5a:92:59:7f:d1:81:23:ce:04:d5:35:17:ce:
c7:47:61:fc:b1:4b:18:fd:c5:23:2c:46:8d:a0:cf:
97:7e:fb:68:93:a6:d7:d1:d1:8d:5f:10:cb:da:db:
e9:ce:28:ea:ad:c0:4c:85:ef:bb:0c:75:2d:72:fc:
e9:eb:b2:22:eb:2d:84:2a:71:0f:af:51:5b:02:4e:
18:3f:8c:4e:5f:82:68:eb:64:50:cb:c9:87:d2:57:
b2:6e:da:26:f8:ec:31:d5:54:b4:f9:e7:f1:ef:7c:
b7:d0:7a:a3:87:50:13:2b:73:00:5f:84:ed:80:6c:
b8:ef:08:a7:76:ba:b2:a0:46:68:97:d5:1e:a8:34:
19:eb:16:16:29:86:af:c2:a0:f5:82:13:a7:62:3f:
9a:9b:29:cd:00:ee:2d:88:96:ff:21:dc:7a:51:01:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7C:B8:95:E3:3C:AF:86:77:BD:67:79:5B:31:93:EE:83:DA:3B:38
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:65:8c:cc:1b:34:01:66:d9:65:30:e7:d6:1c:ee:95:89:2e:
88:76:8d:87:8a:61:62:9d:2b:7f:e4:58:68:a2:28:54:67:55:
6d:27:57:2b:73:34:34:c7:fa:b5:28:be:d4:f0:ab:16:76:d7:
53:ca:44:4d:cb:9d:e3:9b:2e:e6:64:b4:02:95:1c:33:cc:de:
b3:c1:10:f7:e2:c2:44:d4:13:d6:59:8f:23:fb:69:c4:22:20:
af:52:f2:af:93:2e:33:54:b9:42:95:12:fe:f3:43:95:c7:92:
99:78:f5:21:ec:7d:95:56:dd:58:d2:44:e0:6e:cf:c1:f4:bc:
0f:c7:62:81:ce:21:c1:a1:f2:1d:7c:08:26:ed:8c:ba:f4:3a:
11:22:ef:27:81:a2:be:22:9f:91:34:4e:cd:e4:e3:86:8c:45:
b4:2e:2d:d2:92:95:2b:58:1d:26:47:98:d6:e9:c4:38:14:d6:
4c:8a:23:e4:6e:e8:8b:ce:26:23:df:d6:94:68:f5:b3:ac:f5:
81:94:86:9f:68:1a:db:67:56:6b:5f:83:f3:9b:ee:19:2f:15:
28:16:52:01:fa:d0:c4:bd:0f:27:9c:ee:c7:58:c1:a1:b2:34:
5f:db:35:76:e4:d8:d8:d8:b1:ed:21:1f:e3:a9:96:75:7d:fb:
12:d9:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:42 2025 by rpki-client