Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: s8wPruxaMNp8Uqvw8nnwnTggqQ6wSLr+ROgE6kVqubI=
Subject key identifier: AD:84:51:E6:62:CD:F0:7C:1B:AA:5D:00:27:28:55:D5:F5:59:D8:97
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 01967C7BD0D53ACDE5F1716B25AADDE2D9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 051D
Signing time: Mon 28 Apr 2025 13:00:11 +0000
Manifest this update: Mon 28 Apr 2025 13:00:11 +0000
Manifest next update: Tue 29 Apr 2025 13:00:11 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: AO7lTL2npsfAYm2BSbq3xmT5qaq2UCmeLoKZ4SNqM/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:d0:d5:3a:cd:e5:f1:71:6b:25:aa:dd:e2:d9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Apr 28 13:00:11 2025 GMT
Not After : Apr 29 13:00:11 2025 GMT
Subject: CN=ad8451e662cdf07c1baa5d00272855d5f559d897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:a1:3c:4b:29:4c:44:16:fd:8b:1c:f1:01:
fc:37:9a:3e:0a:98:ef:e9:80:e9:89:57:b4:72:d9:
f6:0e:01:bd:21:c3:09:bd:60:23:a8:37:45:3f:ea:
da:c4:b4:c2:58:7f:4a:78:0f:d3:cb:23:76:3b:6f:
9b:ac:2d:f0:1a:fb:90:94:fc:14:b8:b8:37:9a:5f:
09:ad:12:70:a3:2c:e7:ad:11:01:de:cc:97:a8:7e:
ff:fb:3a:83:e6:16:bb:90:de:84:40:45:22:16:ff:
77:e8:5a:3a:8a:3f:30:ad:4a:8f:f2:4f:2e:45:55:
de:a3:e2:ba:fd:da:86:35:84:ca:53:f3:95:3c:94:
0e:bf:91:e2:ca:ac:2f:f4:b5:6e:ae:73:1c:60:14:
8c:d5:d2:0e:11:eb:70:22:9c:a5:44:95:ff:b0:39:
cb:53:d8:7e:de:03:c8:d3:94:b7:c9:2e:84:0c:71:
da:8b:0a:79:cd:3f:65:4c:4c:16:0d:17:ec:91:e4:
58:21:2f:1c:77:c3:14:53:73:ee:f3:08:1c:93:01:
13:05:e7:ff:15:cd:98:51:ad:eb:dc:12:18:27:04:
19:7d:5e:fb:ce:ab:aa:20:c9:87:ed:f5:da:a2:38:
92:7a:1b:15:68:5b:cc:98:0b:21:ca:89:db:3c:08:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:51:E6:62:CD:F0:7C:1B:AA:5D:00:27:28:55:D5:F5:59:D8:97
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:a9:92:ae:1f:22:8f:8c:49:d1:18:ef:fc:17:50:e3:25:
b5:85:1b:27:85:bf:d3:1c:fc:d5:62:59:8d:a8:72:fe:53:60:
47:9c:8f:0e:4f:ba:97:3f:7e:b0:0a:30:6b:91:6c:45:3e:d4:
90:39:8d:8a:d2:e5:26:33:f6:09:5f:16:13:46:c8:84:97:b8:
2f:f6:bf:65:14:dd:76:25:d1:23:b2:d4:e2:9e:ba:bd:bb:cd:
ac:7e:7d:e0:50:9f:fa:16:3a:a8:c4:dc:40:9d:a2:92:dd:30:
fc:93:12:ad:52:0e:1c:cb:ce:bd:51:ec:85:93:e1:ed:08:9f:
9f:11:8c:13:8b:f2:6f:2e:90:12:c4:10:8a:61:4a:40:5a:e9:
15:03:7d:11:64:25:09:a9:06:de:f3:ff:04:1d:d1:cb:05:24:
cb:36:ed:4b:4a:50:b0:2b:a3:89:5d:dd:ae:39:c2:e8:bd:7a:
39:8c:d2:5b:be:19:f4:db:71:26:9a:60:cf:1a:b2:93:fc:78:
52:ef:59:34:be:1b:1e:e8:b4:a0:09:5e:9f:2f:5c:3a:53:4c:
f3:49:b2:96:57:d5:6e:e4:fd:5e:3e:d8:d0:5b:62:69:37:fe:
93:13:d6:09:f9:98:1a:ad:75:b6:cd:f4:be:b7:ef:90:fa:82:
02:58:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:59 2025 by rpki-client