Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: XhlCRDH1c2xTM4WVdAiKCH8nxRAC+LNJgxA6IwMoB2g=
Subject key identifier: 04:04:90:42:FD:BC:0B:F7:15:B0:33:39:37:E4:1D:08:4E:31:EF:27
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01967BA087EF856C410D822E47B25FF07AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0347
Signing time: Mon 28 Apr 2025 09:00:40 +0000
Manifest this update: Mon 28 Apr 2025 09:00:40 +0000
Manifest next update: Tue 29 Apr 2025 09:00:40 +0000
Files and hashes: 1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: MHeuz67GVKXSM8n3b2epFQwNDU6xINe4ERx/q99700c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:87:ef:85:6c:41:0d:82:2e:47:b2:5f:f0:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Apr 28 09:00:40 2025 GMT
Not After : Apr 29 09:00:40 2025 GMT
Subject: CN=04049042fdbc0bf715b0333937e41d084e31ef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:4c:bb:4b:8d:c5:9f:fd:d5:7c:9b:2b:3d:
70:dc:6c:39:e7:95:75:a3:d0:d7:40:4d:0a:4d:9f:
44:1b:47:83:13:27:ba:1d:19:76:2c:85:e7:be:f3:
cd:5f:49:c1:02:5f:3d:c6:0d:fc:da:2e:09:ea:84:
66:05:7f:c5:cf:a0:03:98:af:66:c3:00:5f:88:7e:
b1:69:07:bf:f5:c7:81:21:66:7e:c0:bb:cb:ab:8e:
a2:67:0d:22:d2:da:de:e6:13:fd:83:18:1c:25:77:
57:b6:29:7f:cd:84:ed:56:7b:4c:a0:cf:32:29:3e:
19:37:74:26:ac:c1:e6:c0:62:67:5f:bd:fe:63:13:
60:5f:d9:e7:87:58:fa:79:ff:d8:61:b0:b5:7b:97:
d4:ac:e2:0e:a8:da:b1:10:ff:31:be:74:d1:23:29:
a9:7f:a9:39:73:59:aa:7a:d6:0b:38:8b:19:be:09:
e8:ed:cc:cd:35:6b:0e:99:2e:cc:63:0f:dd:4e:2c:
93:6e:11:a2:4c:d5:3c:a3:de:3d:c7:a8:44:09:14:
60:4a:89:b0:44:7a:ff:c7:e6:36:20:25:ac:8c:fa:
f5:a3:ab:46:9a:ff:26:9c:55:f6:f7:f0:cb:49:32:
09:5c:8d:e0:53:7a:01:cb:b6:a7:a3:48:67:ad:c1:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:90:42:FD:BC:0B:F7:15:B0:33:39:37:E4:1D:08:4E:31:EF:27
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b5:fe:98:63:60:ea:08:1f:06:f1:4e:25:4c:2d:26:55:0c:
e8:a7:43:da:4f:9f:67:f6:89:21:61:ff:21:c5:57:c8:f8:fc:
ae:ad:71:71:e6:30:22:5e:e9:35:a2:bb:25:e3:fe:47:d2:7f:
c4:86:19:f1:ac:cb:17:6d:f0:7d:0e:da:da:28:bf:4d:38:bb:
f2:d9:fd:6c:9c:c0:39:d5:5b:93:21:e2:9e:6f:b1:b5:7c:5e:
a7:72:11:ab:b1:89:3f:32:83:cc:47:d0:ba:8d:b3:a8:ff:77:
4e:c9:3d:3f:78:b6:45:94:2e:cf:cc:44:99:02:8f:4d:28:ba:
f6:ce:89:47:71:7d:57:63:13:69:00:2c:18:3e:14:17:fb:0d:
de:51:5d:5e:5c:7d:f6:16:36:f7:98:d4:92:46:fa:b4:ac:5e:
14:51:67:ab:37:39:cc:08:cf:23:3c:27:20:79:35:f9:4a:44:
4b:40:2d:a8:5d:aa:e9:7a:b9:b7:62:20:27:a2:2f:ee:1a:81:
5b:f2:3c:eb:ef:80:89:ce:57:d7:9d:e5:d2:69:dd:97:95:7d:
0b:c4:e3:42:86:77:90:cf:9b:9f:a8:ba:1b:5a:da:18:ef:3f:
49:2e:4b:cd:0c:c9:d1:9a:72:97:e4:bf:08:aa:f0:e6:48:20:
67:22:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:36 2025 by rpki-client