Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: cXcqKmBB2QINfQALOSUhbh1TU5Ok6AP+iVPn1j7yoJE=
Subject key identifier: FE:9D:D2:89:0E:FC:90:60:19:96:98:9E:38:0E:77:D6:44:F0:14:E8
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 01967D8E8DA5546D150E5B567C1850876AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 18:00:16 +0000
Manifest this update: Mon 28 Apr 2025 18:00:16 +0000
Manifest next update: Tue 29 Apr 2025 18:00:16 +0000
Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: +0m/WYxxOn4r0wnbE3tZeEQ0U4DCy5Yp7qN1oP3RYh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:8d:a5:54:6d:15:0e:5b:56:7c:18:50:87:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Apr 28 18:00:16 2025 GMT
Not After : Apr 29 18:00:16 2025 GMT
Subject: CN=fe9dd2890efc90601996989e380e77d644f014e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:7b:b4:0c:54:ad:a9:74:ee:84:52:d7:52:
16:b4:2b:a1:17:a1:72:42:14:71:18:20:29:c3:82:
6d:74:38:63:87:71:91:06:7f:9b:38:09:db:75:80:
c0:81:56:80:54:5e:d5:09:93:6f:3c:68:1d:ea:48:
8b:de:01:82:9a:8b:00:44:82:3f:40:be:b2:7b:fc:
ea:e9:ef:4d:4f:0b:30:00:c8:9a:4e:b6:09:7b:56:
b2:90:39:7c:fb:eb:9d:13:54:3e:02:7e:bc:2b:5c:
88:71:ec:cf:57:be:e3:93:78:d1:76:5c:4f:e5:bd:
59:ed:e9:7b:d3:d8:95:cd:c6:75:21:4f:a6:6e:29:
bc:1f:8e:22:26:a6:27:71:bd:bc:8d:0f:2c:9c:b1:
2a:6b:49:b2:10:8a:c4:d9:58:3e:0a:f3:88:99:bb:
2e:e6:ae:51:b5:61:02:e2:c4:90:39:eb:a7:73:02:
1a:6e:48:b1:80:bb:34:cc:69:5f:0c:7f:b9:84:5a:
5b:98:04:0d:7f:29:a0:91:ca:91:8f:89:20:09:98:
a1:c9:f1:57:fa:f3:8a:e9:54:9d:6b:a3:72:64:a3:
b5:76:9b:75:71:34:56:45:58:c7:0a:92:6d:a7:2d:
0f:e0:8a:f4:bb:3d:e9:ca:db:ff:5b:9e:d4:1f:b9:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:D2:89:0E:FC:90:60:19:96:98:9E:38:0E:77:D6:44:F0:14:E8
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:3b:e7:2f:a2:f8:cf:6d:4f:16:c7:45:84:01:06:2b:b7:
03:24:fc:8d:da:04:32:2f:94:49:40:8d:18:2d:68:4b:e0:75:
98:01:c4:d2:f2:1d:b2:43:e0:16:67:2f:e7:c0:44:9f:a9:ed:
ea:01:30:ad:85:fb:e1:21:b2:63:d0:78:a2:3a:32:2c:65:2a:
04:20:01:26:e0:f7:fc:9b:9f:54:01:40:18:37:02:f8:9a:c1:
2a:83:70:0f:e2:43:44:4d:c2:7d:42:69:43:fb:b1:03:3f:a5:
da:be:88:36:21:ef:b5:81:d9:bf:b3:40:16:b4:7c:a3:0d:33:
44:76:72:a6:d1:2c:4e:2e:14:a9:e1:c3:92:ea:39:86:84:52:
28:76:b9:7b:06:b9:dd:eb:ed:3a:6f:c9:4a:03:cb:fa:22:12:
7c:e7:8e:e1:40:6b:dd:8e:d1:1a:9f:e9:d6:1c:32:00:08:52:
da:47:e8:90:a6:53:2b:79:bc:25:97:26:38:44:11:ca:6b:92:
83:26:ea:86:79:3f:26:6b:be:f6:5f:ec:ca:d2:5b:9f:3d:81:
d2:40:8a:ce:35:de:c4:85:85:8d:48:74:15:17:7e:e1:bf:da:
4e:e8:0e:67:39:a2:59:93:45:12:82:6d:e0:9c:0e:a9:57:0a:
3c:73:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:26 2025 by rpki-client