Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: hApQRQuB+vbYYrv0Yp/jMBHhXEbcbw/ZLRAPv8F/+6c=
Subject key identifier: 29:02:FF:8F:9D:61:7C:EB:81:A7:4B:83:88:FF:B6:B2:40:F0:7F:27
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 019678D69A9FFCF8458F68838D4EFCD06786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 02B3
Signing time: Sun 27 Apr 2025 20:00:52 +0000
Manifest this update: Sun 27 Apr 2025 20:00:52 +0000
Manifest next update: Mon 28 Apr 2025 20:00:52 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: 4YGIU/LaESUmj728G+GtlrBIUCBhMbt87YD03VWwWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:9a:9f:fc:f8:45:8f:68:83:8d:4e:fc:d0:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Apr 27 20:00:52 2025 GMT
Not After : Apr 28 20:00:52 2025 GMT
Subject: CN=2902ff8f9d617ceb81a74b8388ffb6b240f07f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:e1:e2:68:a9:6d:9e:f4:59:8b:98:25:d8:
c4:98:1f:ba:53:ed:00:86:5e:3e:75:91:bd:3f:35:
f5:d7:18:57:cd:a5:50:81:07:d9:b4:fe:af:1f:1f:
3d:5e:68:79:02:d0:db:25:dc:3a:b1:04:22:1e:47:
e9:88:e2:4e:ec:28:de:24:8e:6f:ba:90:35:d1:52:
2d:42:92:2f:e3:62:c0:e1:71:02:67:19:2d:4b:c2:
25:00:ac:7d:d5:31:67:5e:d8:03:70:cc:46:1e:67:
d3:11:3f:8b:ee:b0:f7:56:aa:c9:b7:16:78:82:9f:
4d:2a:c0:81:4c:d0:b2:91:85:57:9d:f5:2f:25:7d:
cb:99:d7:40:80:d9:47:5f:91:43:52:30:68:09:90:
b5:73:36:b4:05:27:9c:8f:1b:cf:71:7b:ff:0e:88:
97:e1:5f:49:4a:16:8e:d6:4d:5f:91:c9:0e:2b:99:
ca:40:b7:4e:12:08:93:12:43:45:8f:71:4c:5b:da:
48:03:17:f9:70:70:91:61:93:d7:72:e5:56:f7:dd:
4a:5f:40:a4:e1:61:9b:37:26:8c:fd:23:33:e0:aa:
b3:74:5e:25:73:07:e2:67:14:f4:dd:0c:07:de:d6:
d2:f1:0a:3c:5d:eb:89:d6:ee:ca:88:72:5d:85:d7:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:FF:8F:9D:61:7C:EB:81:A7:4B:83:88:FF:B6:B2:40:F0:7F:27
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:21:01:38:0b:a6:70:a7:68:d3:93:59:1a:92:3d:a7:d1:
02:38:08:dc:7d:6b:96:f6:6d:19:d5:84:5d:ad:8f:dd:ab:ba:
ab:34:e0:87:37:f2:9f:7e:f1:82:c6:b7:6f:4c:fd:24:54:26:
62:65:58:23:38:28:e8:f8:54:9c:9b:64:a6:8f:ec:e1:46:6d:
45:4e:38:19:63:2d:80:fd:b2:49:ea:e5:65:46:a6:e9:aa:5f:
c4:24:b5:8f:8f:dc:47:8b:2a:19:ee:bd:c9:bd:23:11:3f:3a:
22:6d:60:9b:34:7f:45:f3:75:19:ef:ae:0e:a9:ba:62:2f:eb:
02:7a:0f:47:8d:76:46:cf:25:e9:ad:c2:f9:02:62:a8:02:06:
e5:10:6c:4b:9f:fe:61:ab:d5:eb:f3:ba:aa:2d:30:80:05:6e:
54:0f:13:c3:c0:be:48:e5:ec:9b:09:99:dd:f7:7e:2c:ac:37:
94:1d:9b:12:8b:6d:c9:96:53:51:57:c9:1c:48:93:a3:d4:58:
18:ea:5c:b4:e9:e5:81:cf:61:46:8f:5a:af:0a:62:08:17:05:
77:10:99:ce:52:92:00:f7:70:08:dc:f3:b3:7e:b5:f8:81:c9:
fd:26:99:40:3d:37:d3:2b:4f:d9:79:68:44:11:8c:e5:83:56:
fa:9f:0c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:24 2025 by rpki-client