Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: U8qPn66+UjhQIROZbYNxTxOAAy7z4O0pv37L760/Fe8=
Subject key identifier: 01:81:3B:A0:EC:30:C1:AC:28:D0:0C:37:57:55:67:71:FD:9C:E3:D7
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 01967AC4B381AD656C3CCFB60E8B979554A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 046D
Signing time: Mon 28 Apr 2025 05:00:33 +0000
Manifest this update: Mon 28 Apr 2025 05:00:33 +0000
Manifest next update: Tue 29 Apr 2025 05:00:33 +0000
Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: 0N9hQfR5FIVlKwgA81ErkzfJR+Y3yNg3Qv3/FQKnDRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:b3:81:ad:65:6c:3c:cf:b6:0e:8b:97:95:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Apr 28 05:00:33 2025 GMT
Not After : Apr 29 05:00:33 2025 GMT
Subject: CN=01813ba0ec30c1ac28d00c3757556771fd9ce3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:b6:07:b0:e3:4e:37:d1:b2:83:d2:e2:da:
be:28:10:ea:0f:09:1f:6e:f9:c0:00:df:9c:a0:c1:
30:89:90:f2:15:e9:b9:4c:e5:62:24:ae:3a:19:ee:
b5:a9:75:98:9b:fb:99:41:e4:62:bd:c2:84:4f:7f:
81:81:71:28:f1:51:10:d4:07:69:71:e9:1c:f0:e4:
1b:69:4e:88:d2:fa:2a:f4:00:3d:f3:fd:36:f6:8c:
dc:f3:cc:c2:e9:c9:b7:86:da:8d:ad:da:d0:e4:c8:
1a:4c:dc:cf:76:13:8d:cc:9b:6a:e7:0d:e5:10:90:
be:63:61:c9:91:5e:ee:8f:1f:1b:f2:bf:17:3b:b4:
a3:78:a3:ce:7f:a5:05:9b:a9:bd:21:2c:d2:3d:c4:
43:8e:c9:d6:a1:9c:91:d2:0b:eb:de:3a:85:d1:a8:
08:d6:4e:02:01:fa:2f:e6:9e:13:44:f9:1f:74:ef:
70:c5:ca:2a:f1:ab:18:ea:8e:d8:e3:a2:2e:59:52:
d3:54:28:02:af:67:5b:62:0f:f6:e0:3f:7b:04:53:
c9:b2:e6:73:b6:3f:ad:be:1d:4f:b7:7d:79:9c:3d:
12:3a:6d:ea:43:bc:62:8d:e5:6e:7a:11:f2:6a:fc:
22:a7:9d:cf:46:93:bb:f5:c4:3b:87:b9:e4:20:3d:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:3B:A0:EC:30:C1:AC:28:D0:0C:37:57:55:67:71:FD:9C:E3:D7
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:5d:0e:a4:75:76:b6:5b:c5:d3:99:ca:f5:f2:70:ad:23:
53:70:23:ff:62:7a:3f:50:39:3b:f1:a5:ae:88:72:89:ef:e7:
84:61:ff:a5:30:40:46:36:5d:ef:f9:d3:81:b9:de:8f:6a:01:
6d:8e:fe:f6:02:a4:9b:25:0d:37:01:84:7b:48:be:55:40:2c:
8c:17:ca:a3:ac:e6:00:c4:40:9d:14:0c:24:18:8a:ca:8e:13:
26:b3:e8:f2:da:c6:a6:28:80:d9:1a:9e:9b:a2:2b:80:f6:fc:
6e:47:da:70:0d:cb:2c:95:1b:e5:bc:50:c3:52:a8:22:24:b6:
5f:bb:9e:f3:15:b8:3c:18:98:e6:6c:f5:92:ab:20:15:d1:c9:
78:3f:fd:9a:5b:62:0b:41:53:af:0a:c9:81:0f:31:ec:d8:62:
7d:3d:84:02:c5:b3:d5:ca:e7:c6:d8:a3:a8:59:e1:68:5d:58:
e0:3a:f2:64:a6:52:fa:9f:b2:5a:4c:fb:cb:c5:f1:22:26:42:
e0:1d:54:70:f8:01:6e:82:b5:34:5e:54:1b:f3:ad:cd:73:ff:
d1:2a:f3:20:55:35:0d:02:47:ee:fa:44:91:f8:06:8e:b1:57:
76:ac:59:83:26:c2:bc:a7:f6:85:16:67:52:27:1a:77:a6:47:
13:08:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:19 2025 by rpki-client