Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: W/58jZ7gLDesvdXq/7XlvWznOvN3wU+/cRN+9hnxCIg=
Subject key identifier: 43:F3:E2:91:F3:17:57:2B:C0:D7:0A:E5:77:21:FB:D6:8F:D8:E7:D1
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 01968090403281985DBC2B156BBAA803114B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 08:00:59 +0000
Manifest this update: Tue 29 Apr 2025 08:00:59 +0000
Manifest next update: Wed 30 Apr 2025 08:00:59 +0000
Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: UuiQoteG0SxECtuVuYGs7pu5lo6n9LsJDLlF45Iogrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:40:32:81:98:5d:bc:2b:15:6b:ba:a8:03:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Apr 29 08:00:59 2025 GMT
Not After : Apr 30 08:00:59 2025 GMT
Subject: CN=43f3e291f317572bc0d70ae57721fbd68fd8e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:54:c4:36:76:2a:ea:f9:82:3b:47:bb:17:
a1:81:b9:b5:2c:8a:fc:76:c3:71:44:81:ca:44:b4:
e3:0f:08:fd:6f:2e:e0:84:e8:4d:4a:51:aa:cb:fd:
62:e4:e3:a4:2b:0f:f4:32:76:46:73:33:c8:79:51:
4f:ae:0a:a1:80:5b:79:f4:55:72:5c:ba:4e:21:37:
4d:26:bb:cf:c2:a2:ea:9c:3f:c8:3e:ae:1e:0e:c0:
98:40:e7:a2:ac:a2:7f:42:02:a2:ad:a5:b5:24:31:
41:bf:98:e3:bb:14:70:9b:7d:e3:d7:88:44:a7:83:
54:1e:25:04:56:e3:87:f2:12:75:0a:0d:c7:71:96:
fd:27:c7:41:57:f3:45:30:ea:af:b0:c0:f2:56:1b:
e9:86:e2:69:36:e6:61:28:17:97:aa:8b:a9:cf:7e:
13:ac:4c:47:82:2f:f6:d5:18:fa:11:f9:ad:3f:12:
11:64:4d:0d:92:b7:5f:23:a1:c6:b3:72:bc:18:65:
e3:bb:1b:ea:09:d8:66:4d:3a:56:be:33:65:48:9a:
20:67:1b:34:c4:d2:6c:3a:34:3c:37:f3:00:ff:3d:
97:f4:e2:de:cc:d1:e9:33:0e:f4:cb:ba:44:6c:65:
74:a8:cb:5e:75:ee:9f:55:1e:7d:63:00:cd:ee:e4:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:E2:91:F3:17:57:2B:C0:D7:0A:E5:77:21:FB:D6:8F:D8:E7:D1
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7f:0f:ef:bc:c1:98:25:24:42:1e:e2:29:a6:f1:05:90:3e:
7b:bc:0f:df:ef:4e:db:d8:f1:b4:92:bc:13:20:8c:22:5b:df:
12:08:c3:09:f9:69:0b:3f:d2:95:89:f3:3f:b9:eb:1b:90:6f:
f8:17:8f:41:35:f2:50:7b:30:5e:8b:ce:16:09:60:ff:e4:b2:
1f:d2:f6:1a:18:cb:d6:25:bb:e8:c8:2e:c8:93:ac:86:85:5d:
58:60:f8:50:57:07:e7:40:ef:34:e6:30:bd:6c:ca:31:f0:3a:
89:b0:d5:1d:52:1f:df:99:3f:ea:09:9e:19:49:56:6e:52:cf:
b1:97:56:8e:6c:2d:fd:ad:00:f5:b1:0d:c7:b0:37:af:88:54:
66:f6:3c:21:5f:b1:33:45:f2:db:d5:bb:37:b8:25:26:2d:6f:
cf:bb:f1:e8:a3:90:01:ce:bf:5b:bc:a7:15:ed:d8:91:fd:8a:
c3:8b:8a:32:53:35:23:71:be:ee:d7:00:7a:63:73:1e:1d:02:
59:af:54:fc:e9:97:9e:c0:05:ba:a6:4c:01:f3:74:1d:9a:f2:
42:7c:09:77:f9:5f:0e:63:10:81:e1:e2:96:2d:a9:1a:ef:06:
f2:e4:91:18:c3:01:91:89:4a:ce:d1:a4:6d:59:1c:63:4f:2c:
8b:ec:66:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:29:03 2025 by rpki-client