Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: 2+xcwEP+FRHcrEBxEPBB8quhj9s+fHBVaqNnOG6L8yg=
Subject key identifier: 41:87:A7:AD:D1:B3:08:13:AA:8E:5E:1F:37:DE:B4:78:C2:BF:0E:3C
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01967AC527BDBC27AA163884196CB2AE9522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 093A
Signing time: Mon 28 Apr 2025 05:01:03 +0000
Manifest this update: Mon 28 Apr 2025 05:01:03 +0000
Manifest next update: Tue 29 Apr 2025 05:01:03 +0000
Files and hashes: 1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: DXs8u5gsIpnnL4/B7Zk1cQuXB3MqcbmbckC3rZpJ5WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:27:bd:bc:27:aa:16:38:84:19:6c:b2:ae:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Apr 28 05:01:03 2025 GMT
Not After : Apr 29 05:01:03 2025 GMT
Subject: CN=4187a7add1b30813aa8e5e1f37deb478c2bf0e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:99:e9:37:2c:88:bb:1b:15:69:b7:04:01:
5d:61:d1:19:69:4c:60:01:bd:10:86:09:21:bb:f7:
6a:48:14:cb:f4:d3:aa:b3:1b:99:7a:b6:88:17:00:
4f:1d:ff:59:ba:24:f9:9a:74:c2:d6:df:ed:47:b8:
95:c9:5f:a2:cd:32:6d:0b:1a:ec:b9:05:6e:06:f1:
b3:76:22:be:5e:7a:7e:11:d6:85:ad:a8:a4:28:47:
7c:35:6b:2f:4f:f7:bd:0b:ca:d9:9a:15:de:69:27:
f7:62:29:d2:bd:c9:cd:39:f8:a3:06:27:69:67:6a:
36:df:7f:8a:3c:88:3f:df:13:73:76:a6:23:7b:11:
ad:35:8e:b3:b9:da:12:2b:a0:b8:6d:6f:5f:07:e6:
07:8d:95:e1:11:3f:83:cf:a9:8f:c4:cd:29:90:b4:
10:77:89:56:09:cc:66:bf:26:27:3c:f6:7a:33:d4:
e2:24:53:bd:da:7f:52:e1:a8:17:0f:e6:fb:ef:a2:
73:5d:7a:5b:12:18:29:94:ac:c1:ba:b2:98:7c:cc:
be:8c:25:21:a5:2c:bc:91:25:96:cd:c6:46:37:8f:
a2:4a:77:60:51:63:93:54:73:2a:a2:cd:3a:9e:64:
3f:59:bd:7a:e9:4a:1b:02:29:3a:ff:6c:e9:05:a8:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:A7:AD:D1:B3:08:13:AA:8E:5E:1F:37:DE:B4:78:C2:BF:0E:3C
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:95:55:40:38:db:1c:c3:fe:6e:54:1e:b9:c7:00:9a:05:
74:f8:54:11:55:0b:ae:a7:33:26:ba:c0:3c:ca:4d:56:90:13:
36:fc:29:6f:01:3a:b6:ab:94:bb:0b:c7:2a:69:18:2c:aa:ae:
35:f5:eb:aa:4e:4a:9c:85:50:99:19:6f:38:a3:97:6f:a4:08:
05:07:d0:f0:45:fe:7c:11:66:b9:ab:df:ae:51:a0:05:c0:9a:
40:da:a5:6a:8b:ff:a7:70:f3:fd:d8:4e:50:55:48:b2:25:db:
00:f4:12:b7:c0:f2:11:94:05:6d:c9:39:67:b1:fa:7b:42:53:
10:4a:a0:fa:ff:7c:6f:ca:3c:5f:ba:24:37:29:08:99:f3:c8:
55:50:9f:6f:cb:83:eb:8e:7a:08:7b:26:dd:69:47:36:57:e2:
5f:df:0f:99:83:21:8a:40:fb:2d:50:9e:b2:85:5c:76:14:62:
8b:9b:03:f6:71:06:d4:8a:00:fc:e9:50:80:39:c3:71:c1:75:
7e:68:df:84:cf:56:a1:1c:73:0a:d1:b1:96:1f:49:5b:bb:a7:
39:5b:a3:b3:ce:84:0c:f3:e2:fd:cc:d5:cc:96:a9:7b:0f:28:
4b:c7:a2:06:77:47:8f:69:62:7c:89:34:f1:a5:06:f1:36:86:
54:a9:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:28:06 2025 by rpki-client