Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: 2gTYRPxPgd4CchQorQf2dF7TLAyUbd5p5f3PdstFXyw=
Subject key identifier: 8C:73:BB:EC:C5:3E:7C:C7:52:BC:5E:F2:A5:B4:C4:D4:EE:B6:21:20
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 01967E6ABD4DD0DF5268669B959C8F68C40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 22:00:46 +0000
Manifest this update: Mon 28 Apr 2025 22:00:46 +0000
Manifest next update: Tue 29 Apr 2025 22:00:46 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: 0ULPf73hqyVOyyIpiTvYyFHagb5FZ7pjJJTBBsyuTx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:bd:4d:d0:df:52:68:66:9b:95:9c:8f:68:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Apr 28 22:00:46 2025 GMT
Not After : Apr 29 22:00:46 2025 GMT
Subject: CN=8c73bbecc53e7cc752bc5ef2a5b4c4d4eeb62120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:bc:00:5c:9b:14:11:2d:29:06:43:21:a0:
a8:e4:7a:f2:f6:08:6a:ad:88:60:c5:47:08:b1:61:
4e:a5:ad:2b:a8:11:53:9b:5e:f8:79:f4:e7:72:f6:
fe:b4:7e:7b:72:57:2b:04:92:a6:8e:9f:da:cb:40:
5f:48:da:23:36:a8:c3:c2:04:44:0f:a2:da:51:ee:
2a:f2:97:c6:5f:d7:75:12:bb:2e:be:26:d2:5b:6b:
13:fb:61:46:1e:5b:dc:ec:f7:ca:c4:f3:16:64:fd:
95:29:e7:e3:37:0b:b7:9e:32:39:21:96:b1:75:14:
ba:f6:ec:81:8a:b4:db:61:52:29:93:54:59:c0:4a:
7e:7f:65:f7:f6:1b:3e:8c:48:23:7b:e0:e8:ce:13:
b5:d0:61:fc:92:60:09:4b:da:78:cf:52:96:49:08:
1d:50:b5:19:58:68:4d:f8:47:c8:4e:fa:33:2c:f3:
d7:38:34:12:6b:f3:cf:41:cb:26:03:85:53:1b:03:
27:9d:fd:24:0e:2d:19:a7:a1:e4:36:b6:0e:3b:dc:
aa:fc:af:c3:16:a1:fb:96:b6:ad:e5:c2:ef:3c:de:
66:c6:23:d0:25:7f:68:3b:a4:c8:0a:d9:de:df:3d:
ab:0d:95:f2:c9:11:2d:bf:3a:79:98:94:35:03:46:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:BB:EC:C5:3E:7C:C7:52:BC:5E:F2:A5:B4:C4:D4:EE:B6:21:20
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:77:4f:c5:73:2a:03:b6:db:55:66:9a:8d:e2:c5:30:bf:2a:
4e:13:55:5b:ae:28:06:7b:53:c9:62:91:ae:f8:d3:67:75:3c:
19:d2:19:a7:d1:0d:ab:95:68:ae:8e:f0:db:13:cd:ed:55:eb:
89:9a:74:3f:b2:27:2d:13:01:b9:a2:43:a4:b5:c0:88:6f:a2:
5a:1a:01:b1:57:1a:2a:cf:25:a9:ed:6c:18:35:a4:f9:1e:0c:
d8:cc:49:53:4a:72:df:b3:97:69:16:5d:b2:f4:dd:2b:74:33:
e0:d3:32:17:da:1f:96:38:28:4f:7b:a3:9a:b9:65:ec:56:1f:
f2:7a:9c:bd:b8:b5:5a:5a:08:b2:9b:50:f9:3e:b7:c4:5b:42:
7d:71:5b:70:0f:03:09:97:a9:f0:dd:e6:61:a9:21:24:e5:7f:
76:e0:06:52:12:44:df:e3:0f:f5:cd:d7:59:5c:83:6f:1c:ac:
3f:19:3d:9c:ba:27:b5:64:ab:ba:c6:cc:f2:19:7f:c1:ad:38:
60:61:aa:70:fd:ac:ff:d3:ba:85:8b:be:13:f1:56:8c:9a:be:
c7:5a:a8:2b:c6:a4:80:aa:8e:63:ee:7f:71:86:4d:cc:e2:1d:
5f:eb:4b:1b:1b:ff:31:fa:da:6e:39:d5:99:a8:ea:d4:17:18:
46:8c:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:44:52 2025 by rpki-client