Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier: EH5JcJzWbScfsiv97Zpka4ajr66eJSTDFzK2iiAwfLo=
Subject key identifier: B6:E7:22:6B:5A:BC:EB:E9:13:38:41:0B:B3:14:8C:D9:85:7E:4D:67
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01967C0E515CD837956472C87F3B61BEAE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number: 080E
Signing time: Mon 28 Apr 2025 11:00:35 +0000
Manifest this update: Mon 28 Apr 2025 11:00:35 +0000
Manifest next update: Tue 29 Apr 2025 11:00:35 +0000
Files and hashes: 1: 2IgIKjFRZxy-bzZFKHn9K063leQ.roa (hash: TaUEcihPZQmLVAdKpeFJ7LvkJgT/8Wrq1d0eu+d7laE=)
2: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: Nn/qmwFnB9x+7VJKzRjd7yzmW3BuggvRwCtL6XA1heA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:51:5c:d8:37:95:64:72:c8:7f:3b:61:be:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Apr 28 11:00:35 2025 GMT
Not After : Apr 29 11:00:35 2025 GMT
Subject: CN=b6e7226b5abcebe91338410bb3148cd9857e4d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:8b:2b:f6:0c:99:d0:52:04:cf:17:37:2e:
29:7f:6e:d0:26:96:e7:8b:e0:3d:54:8c:ef:13:94:
06:4a:5c:70:36:e7:ca:ed:18:1f:dd:72:98:78:05:
94:81:e5:af:06:6e:9b:99:6d:5e:83:0d:d2:20:a7:
ba:c5:b7:84:46:0e:c7:81:9c:f2:c2:c1:50:d1:1e:
11:e0:ec:f4:b2:4b:08:77:18:d6:ee:a7:85:2f:fe:
23:d1:80:84:8b:a7:0a:78:b1:c3:23:11:e7:2c:03:
fa:15:b5:7d:bc:04:5d:f4:b3:e4:d2:9c:e3:dc:06:
39:e4:1a:e9:05:b5:bf:50:cf:2d:db:78:95:0a:e9:
de:d0:a3:8b:85:53:92:8d:de:68:f8:94:8c:cc:ea:
7a:a4:92:59:98:84:75:b8:a5:83:a3:e6:84:89:74:
91:19:ca:8a:a6:1b:e6:2b:37:89:86:fc:f1:44:a8:
00:f1:e8:ff:ee:65:09:21:c9:e0:4c:de:eb:ed:71:
d3:70:10:03:71:a6:33:95:03:86:cd:26:d9:d6:72:
1b:82:3c:6f:61:59:6d:84:76:e5:e7:a3:ef:11:2e:
6d:58:c4:d8:ad:5c:8e:53:73:31:f4:46:44:ae:d1:
87:dc:a4:68:87:d1:03:0a:5e:a7:89:9b:16:0d:18:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:22:6B:5A:BC:EB:E9:13:38:41:0B:B3:14:8C:D9:85:7E:4D:67
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:df:24:5a:dd:22:cd:e9:95:43:ca:97:55:6e:a5:79:d4:31:
4d:8a:92:f8:fd:fa:90:4e:8a:d2:c7:72:33:a8:8b:ec:41:2c:
76:ed:73:df:ed:3e:b6:54:58:36:21:1a:ba:c3:88:11:4d:d0:
8e:d6:ed:3d:00:54:8d:28:e3:72:3c:fd:5e:9d:5e:91:5b:07:
52:59:fa:1d:4f:bf:bf:da:5f:5a:41:5f:ee:d6:de:9d:2d:b2:
72:70:26:ba:79:6b:12:73:22:ae:7b:d5:db:87:65:90:73:47:
0a:e9:4c:e0:cf:d1:11:22:d1:c0:48:65:44:21:f1:2b:10:6a:
04:75:5c:03:af:91:d7:19:87:21:95:60:4a:f6:2f:3d:35:40:
3f:c0:59:0d:a1:13:53:0b:15:96:23:6e:e3:5f:17:f2:bb:22:
7b:0d:90:9e:5b:5d:6f:70:97:e9:7f:0e:52:d2:0b:92:f9:b5:
a3:2d:4a:a5:14:8f:08:72:00:6b:37:9e:5a:ea:12:f3:3f:28:
85:d9:a1:f9:08:bb:a6:8a:b6:a0:ed:e2:e4:fb:99:f7:29:02:
99:36:d5:f7:68:17:5a:30:e0:ce:21:b2:11:bd:e7:fc:5f:0a:
d3:01:d4:57:2c:c2:93:d3:4f:55:d5:4a:a5:61:7b:b9:e8:6a:
ca:c0:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:22:30 2025 by rpki-client