Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: X0txnOwPpQMQ71J1ZRm/+rdWuU7YcoodxmnDAh+Bhgk=
Subject key identifier: 11:D7:B4:98:23:3C:B5:7E:C2:DE:01:A4:0A:BF:F0:A5:06:19:94:85
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 01967A8DA92AFE74A05E801A3C04AFDAC96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 14FA
Signing time: Mon 28 Apr 2025 04:00:26 +0000
Manifest this update: Mon 28 Apr 2025 04:00:26 +0000
Manifest next update: Tue 29 Apr 2025 04:00:26 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: bmpOkWVD3GsjPJUc+B+PQb0Kjds/HxowI6G7Nk0MxGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:a9:2a:fe:74:a0:5e:80:1a:3c:04:af:da:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Apr 28 04:00:26 2025 GMT
Not After : Apr 29 04:00:26 2025 GMT
Subject: CN=11d7b498233cb57ec2de01a40abff0a506199485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:03:b6:33:e6:24:7c:aa:c3:c5:f6:02:5c:
64:b8:9c:60:4e:7a:ec:41:68:7d:5b:f0:35:7b:6d:
00:c7:22:a9:19:01:fb:df:44:60:07:79:c2:bb:05:
f7:84:09:97:d6:26:08:4e:87:9a:e4:17:64:c9:fe:
40:23:fb:f5:80:5e:5b:32:f5:d8:b4:e2:78:76:1e:
46:88:e9:38:56:63:5a:ad:fd:a1:cb:7d:ae:16:45:
34:88:f5:ab:55:18:cf:d2:40:77:07:48:26:05:65:
4f:81:06:47:3d:a6:76:30:0b:72:28:94:85:14:49:
5b:5c:98:ed:e3:39:9a:36:eb:e0:ed:51:f2:62:76:
e5:5d:2c:ad:4c:aa:15:0e:cc:cb:65:51:51:73:3d:
43:ba:1b:b6:7e:f2:1b:f6:73:2d:03:00:f6:97:80:
bf:be:29:ab:ea:58:a6:58:88:ac:07:24:17:98:d9:
19:03:e7:37:d7:ff:0e:a5:ac:a7:41:c6:9f:9e:1f:
41:34:52:9b:82:24:70:b9:58:66:ab:c7:5f:90:0d:
a9:a6:bb:90:92:ac:ea:a8:98:fa:64:ef:a1:17:54:
c1:5a:f3:5e:c6:50:22:a9:95:69:5c:d3:70:4c:47:
8c:d3:e5:de:fe:7d:51:3a:2e:c7:62:f6:d1:35:70:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:B4:98:23:3C:B5:7E:C2:DE:01:A4:0A:BF:F0:A5:06:19:94:85
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c1:fe:9a:69:88:23:40:08:d1:53:9a:ac:b2:99:66:38:71:
63:4c:74:88:e1:7d:7e:a5:f7:99:60:8d:13:93:e2:e7:01:de:
f1:39:78:dd:2b:75:25:0f:51:9c:fa:49:99:ee:f5:55:fa:ef:
3b:6a:5a:31:6d:fa:de:c8:b8:94:94:ca:f9:20:72:22:af:e4:
05:2e:38:57:22:0e:e5:38:03:39:4b:a4:9a:f4:c5:9a:26:bd:
3e:74:00:97:7a:86:7b:64:cc:f8:54:6b:d7:88:65:dc:cf:02:
71:58:62:b3:68:76:eb:78:15:d6:ae:b3:77:1b:33:78:24:5d:
70:9a:a9:28:18:0d:0a:8a:73:ba:ae:d7:a2:fa:cb:49:a9:eb:
17:46:8d:8d:5b:d2:3b:08:17:54:d3:7f:54:74:17:de:2d:f9:
f3:18:e2:bd:3a:33:07:77:29:1a:75:dc:5a:eb:88:cf:b1:92:
fe:16:42:17:2a:f5:47:18:74:23:62:7d:5c:e4:c4:b6:0d:e4:
88:a1:1f:d3:c4:18:92:c4:16:59:81:81:d9:69:98:0f:fc:df:
32:92:e3:75:d1:e1:bc:2e:5a:85:4f:c7:09:ae:07:5e:86:e3:
a5:5b:b2:a7:fb:e0:b6:39:51:54:b6:72:7c:8b:bf:ee:88:2e:
5f:a7:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:26 2025 by rpki-client