Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: T1TedsbCGgGt2iA0ofzsvqwtwtZs7p3r1/oaazXjiqI=
Subject key identifier: 5F:CF:F4:83:56:2D:9B:13:9E:76:E1:E1:CC:24:69:E0:1F:AD:F7:5E
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019678684971CF490DEEB0B733BABE2D6AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0D99
Signing time: Sun 27 Apr 2025 18:00:22 +0000
Manifest this update: Sun 27 Apr 2025 18:00:22 +0000
Manifest next update: Mon 28 Apr 2025 18:00:22 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: 4uY4UT4sfad+43rYT1a30VwfoS2SdVMAWYImLpkDRe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:49:71:cf:49:0d:ee:b0:b7:33:ba:be:2d:6a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Apr 27 18:00:22 2025 GMT
Not After : Apr 28 18:00:22 2025 GMT
Subject: CN=5fcff483562d9b139e76e1e1cc2469e01fadf75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:1c:59:4b:48:17:cb:92:2b:d0:36:bf:26:
7e:fa:70:39:8a:48:df:33:1b:36:5b:99:f5:d1:03:
45:79:c1:25:11:5e:a7:d5:0f:52:a3:23:0b:14:6d:
7a:e4:53:c6:4c:7f:15:fb:4d:7e:65:62:d1:60:0d:
d6:df:a8:9c:3a:87:cb:f4:d1:3f:2b:be:30:bb:ac:
5d:3c:4d:60:bb:1d:80:c9:70:c4:dc:62:a0:a6:8e:
0b:a7:ba:f5:14:d4:b5:53:44:0c:49:cd:b6:af:e0:
12:dc:18:e3:f8:c7:b8:d0:d2:b0:4e:65:35:cb:bc:
6a:4b:d4:41:a5:97:f2:fe:86:51:9b:0f:b0:61:67:
76:f2:17:fb:6f:09:16:4d:a2:5d:4d:ff:00:94:0b:
a0:27:38:08:0f:84:d9:51:37:17:a1:72:3f:30:a5:
4e:56:7b:bc:45:df:ef:64:2b:ee:c5:83:1e:13:9e:
cb:ee:5d:58:c4:04:59:5d:1f:cf:e9:85:b9:8b:b7:
65:e5:12:1e:08:07:44:2f:29:ac:d0:56:5e:9f:2a:
8d:f8:1d:b4:bd:47:9f:82:61:a9:9b:3a:14:47:f6:
d0:b4:eb:b9:dd:e6:51:06:c4:97:02:8c:33:65:f8:
02:0f:12:aa:66:64:8f:62:81:ba:05:e0:c0:e9:dd:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:F4:83:56:2D:9B:13:9E:76:E1:E1:CC:24:69:E0:1F:AD:F7:5E
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:69:73:c8:01:40:9c:09:bb:5f:16:38:4b:ad:be:b3:97:b9:
bc:f9:5c:5a:71:d7:cb:39:9c:ce:75:83:c6:7e:54:21:fd:c4:
3b:bb:27:fd:ae:34:c6:5c:cf:1e:5c:29:3e:b3:41:79:9a:32:
39:61:fe:ab:38:a3:0f:74:5a:9d:86:25:87:c9:7a:8f:c0:2d:
f2:d3:a0:5f:67:14:1f:16:bc:a5:d7:94:fe:7b:89:e4:0f:29:
61:ee:33:d8:5e:71:56:46:f6:22:5b:c2:54:ef:42:00:06:13:
66:40:da:e3:00:c7:fc:46:6a:5e:57:65:a3:09:29:3c:a3:16:
c3:7f:dc:e9:78:a8:08:94:cf:fa:97:63:7f:3e:7f:61:a0:36:
17:e7:1b:01:e1:d0:46:a4:08:75:2d:ed:97:01:f3:95:c7:52:
84:5a:6f:61:1d:06:ea:8d:66:ca:2f:0b:95:eb:3b:2d:23:bc:
8d:4b:c3:af:3e:ee:31:ad:a9:73:f2:8c:ec:e4:61:cf:1e:46:
eb:f1:4b:e4:ca:db:26:40:98:c7:da:9f:d7:0d:ec:87:8c:09:
64:f8:69:6c:7f:19:37:6e:cf:5f:6e:3d:5c:f0:58:29:9b:6b:
ec:4f:7d:12:6c:be:4d:ea:35:ff:1c:e6:a7:33:d8:7d:e0:8d:
65:1d:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:01:25 2025 by rpki-client