Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: hGb3WHvC888WLIzNKA50M3UujJx1YoPNroEUmlCwwzo=
Subject key identifier: FB:99:54:67:60:9C:F2:58:FE:1E:44:69:EE:E1:B8:25:0A:AF:73:5A
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 0196753042329E3738CDF4C86B9C15D0C604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0646
Signing time: Sun 27 Apr 2025 03:00:19 +0000
Manifest this update: Sun 27 Apr 2025 03:00:19 +0000
Manifest next update: Mon 28 Apr 2025 03:00:19 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: lR+YGqFc/6/9FcLjlt0zpeuKXYeXWSOaVsDpFcaLxnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:42:32:9e:37:38:cd:f4:c8:6b:9c:15:d0:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Apr 27 03:00:19 2025 GMT
Not After : Apr 28 03:00:19 2025 GMT
Subject: CN=fb995467609cf258fe1e4469eee1b8250aaf735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:b6:99:df:d5:c9:9f:6e:e5:fb:d9:46:51:
68:32:96:13:94:0b:27:cb:9e:3a:29:03:df:8a:ef:
3d:98:7c:98:cd:ef:f6:ef:9f:eb:0f:db:61:3e:2e:
e1:52:ff:dc:83:16:8d:57:4a:cf:f2:6d:fb:36:e4:
7c:39:41:2e:a6:98:2a:09:eb:1f:a2:b1:d6:c3:5d:
09:36:9b:7a:87:3b:57:99:c9:98:5e:4c:8b:e8:e6:
59:eb:14:dc:3f:aa:91:0c:87:31:7d:dc:20:f9:e1:
8e:5c:d4:ce:c6:f5:99:8d:f2:ec:f6:cf:45:c5:16:
69:c7:b4:6f:91:43:f9:0f:bd:8e:cf:41:07:2e:08:
3b:2b:7a:b4:56:15:4e:ba:39:a8:d8:04:74:a5:cd:
7d:ea:6f:93:69:8b:16:77:90:8c:19:6c:12:3b:39:
3d:27:07:d8:c1:92:01:2f:3d:d6:f8:1b:2e:78:f2:
00:30:41:61:8a:1b:9a:0f:ac:08:f3:77:b1:7a:68:
3c:ad:a4:24:2c:2b:04:46:87:d1:61:e3:5f:97:59:
47:6b:dd:78:e0:58:b7:17:25:b3:85:ff:fe:45:3f:
f3:2a:bd:27:0e:9f:dd:5b:46:16:58:86:d5:35:8e:
44:1e:51:74:0e:6b:19:f9:bb:1d:43:f8:5c:f1:9e:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:54:67:60:9C:F2:58:FE:1E:44:69:EE:E1:B8:25:0A:AF:73:5A
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b8:95:75:e7:bc:83:a8:58:c2:b5:26:28:28:ae:71:8f:d0:
c3:ba:3d:a9:a4:4b:db:57:55:09:94:00:f1:63:cc:b5:1b:78:
c1:4e:ee:12:25:2f:2f:b1:ae:fa:02:df:ad:7c:0f:3b:10:dc:
a6:e3:ef:00:bb:79:46:27:8c:d4:16:df:3b:67:73:1d:3f:7c:
8e:64:cc:b1:2a:46:8f:4d:49:3a:53:07:41:dc:a7:7b:c1:ec:
55:65:e4:f2:6e:19:6a:5f:51:55:f0:61:ce:fa:df:b2:ea:3b:
64:87:80:b1:af:6e:70:40:b9:31:ea:b4:a4:6f:eb:9a:92:6d:
ea:3e:66:09:5c:0d:9a:1a:95:31:ec:13:fc:a9:a8:48:ad:e6:
03:c9:10:fe:2f:4a:1a:3c:fb:40:93:cb:21:89:34:a3:2d:3b:
25:e4:68:6e:78:6a:71:55:70:32:f7:80:c2:62:f4:c5:8e:c2:
34:a5:87:50:d2:de:ab:ed:27:2f:36:2a:45:32:d9:24:27:48:
06:2e:ad:1a:0d:30:95:45:40:98:4c:83:f4:74:51:93:33:ae:
9d:04:cd:c3:08:b5:36:f8:2d:27:d7:13:1c:00:40:55:b9:27:
47:56:0d:49:27:08:df:e5:f4:55:39:99:49:3f:75:22:1e:e4:
06:d1:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:30 2025 by rpki-client