Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: +R8qUqaKFIKn/DU9SM1keqZ5laEYjlx1Q57RFTNP5nw=
Subject key identifier: 4E:6F:1F:BB:93:D2:20:AA:98:14:40:D6:69:D8:AE:1D:AC:14:94:0E
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019673E71CE5486C47BC4C061FBB82ADFAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0DBC
Signing time: Sat 26 Apr 2025 21:00:48 +0000
Manifest this update: Sat 26 Apr 2025 21:00:48 +0000
Manifest next update: Sun 27 Apr 2025 21:00:48 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: i5sej7rfLEVuegmwMDmNOS+v9TkRVO2Xdj/QtEo8fVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:1c:e5:48:6c:47:bc:4c:06:1f:bb:82:ad:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Apr 26 21:00:48 2025 GMT
Not After : Apr 27 21:00:48 2025 GMT
Subject: CN=4e6f1fbb93d220aa981440d669d8ae1dac14940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:b9:15:df:01:88:a0:e5:9b:5e:51:71:5e:
0d:a5:b5:d5:34:ef:61:e8:0e:79:20:80:f5:aa:10:
23:6b:6c:e6:ff:ed:49:b1:ae:a9:ab:f5:03:f5:93:
b1:18:42:b9:f8:a9:27:c4:e2:56:62:1c:51:9f:75:
03:d9:9b:dd:84:36:91:3a:52:53:88:c4:d9:fd:10:
26:be:16:48:f3:c5:41:fa:eb:99:36:47:a4:8f:eb:
40:94:e6:79:96:6e:57:25:28:4d:82:4c:ad:94:fc:
aa:1e:60:60:99:94:7f:20:ed:bb:8d:ca:89:56:d9:
7a:6c:15:46:7a:db:e0:cb:09:23:cf:4d:36:9e:34:
1c:60:d6:ad:1c:37:f5:1d:a0:32:c5:e9:95:a8:8a:
92:6a:0d:d9:4b:de:e6:36:4d:d7:52:a9:e7:80:59:
ac:3f:c0:f1:bf:41:4e:75:8b:57:39:04:af:8f:73:
3c:a2:a1:7a:99:5d:2f:4b:8c:1c:d2:e7:43:53:a1:
7d:26:e3:df:8e:93:21:f1:6c:00:5c:18:53:67:ee:
a8:b6:90:cf:18:cd:48:45:ff:bb:92:69:55:d9:82:
98:a8:d5:79:c4:ae:75:fd:2f:6f:2b:c2:62:71:60:
1e:96:cf:cb:ef:a1:4d:c4:97:ef:8a:d0:f4:a7:97:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:1F:BB:93:D2:20:AA:98:14:40:D6:69:D8:AE:1D:AC:14:94:0E
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:b7:46:db:1f:23:5f:94:7c:2f:bc:0e:70:b4:6e:05:b1:
ef:8e:6e:79:d4:82:f4:88:82:4f:69:af:a2:81:51:a8:a4:20:
7d:8f:78:a8:4f:bf:ae:db:87:a6:16:50:39:c6:8e:27:ad:9c:
c5:b3:c1:d5:81:03:32:56:ad:96:3f:c3:7c:ba:c1:03:30:23:
89:5c:0d:3e:d8:4c:c7:dd:80:d3:91:4c:fc:e3:f7:cf:37:32:
32:7e:ba:cb:25:55:27:11:43:a4:fd:5d:ae:e2:6e:af:4e:c4:
54:d2:f0:d9:cb:e2:86:b5:40:0d:64:5a:40:1c:30:9b:03:7a:
f1:66:11:04:60:22:b0:1b:19:46:4c:84:d2:11:cb:9d:39:04:
fe:ee:28:e7:b1:75:a0:7a:51:4d:6c:52:08:59:55:9c:c0:18:
a5:6b:d6:15:01:60:96:72:fa:fc:86:45:14:e2:66:75:92:87:
5e:2e:fe:09:da:c2:fe:ab:e2:7b:fa:40:aa:df:5e:7d:06:1a:
3b:ce:3c:b1:13:78:d7:5e:d4:0b:e7:2f:cc:fe:af:bd:ba:96:
b1:c4:38:ed:8a:f8:c0:56:4a:60:e6:f3:5e:5b:8a:e0:9c:52:
94:de:6d:38:b6:9e:a0:7b:69:4d:0e:c0:6d:a5:47:02:8f:3d:
c7:41:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:39:59 2025 by rpki-client