Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: INq8qLximtdYYb/ItdPl2dsDu11FyIeSDbZC4PvSRM8=
Subject key identifier: A3:D9:C4:B2:8E:95:11:25:33:D9:BF:D3:34:3E:78:52:27:0B:76:26
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 01967266076F42389FEC24035645D6AE1D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 0D
Signing time: Sat 26 Apr 2025 14:00:11 +0000
Manifest this update: Sat 26 Apr 2025 14:00:11 +0000
Manifest next update: Sun 27 Apr 2025 14:00:11 +0000
Files and hashes: 1: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
2: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
3: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: uBo/TefDfpN+VaEUyV/C6de21bSx7tXwimT38CAjaYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:07:6f:42:38:9f:ec:24:03:56:45:d6:ae:1d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Apr 26 14:00:11 2025 GMT
Not After : Apr 27 14:00:11 2025 GMT
Subject: CN=a3d9c4b28e95112533d9bfd3343e7852270b7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:fa:52:bc:ee:10:90:32:68:ac:fe:7c:25:
eb:b4:67:86:b8:5d:09:06:d4:09:bd:c4:03:4a:c5:
e4:2c:59:9a:39:62:d1:c6:35:fb:91:e3:42:d5:7f:
52:81:d2:4f:2a:b5:3c:7c:d0:8a:57:1f:c7:a0:f5:
6d:4c:b9:19:0c:b0:f7:2c:c3:65:bd:ea:4f:97:32:
45:9f:b1:aa:d7:cc:9f:26:54:ec:62:cb:41:7c:e6:
27:79:15:b3:48:2c:c9:d0:44:b3:d2:c5:e9:98:8f:
98:75:21:46:c3:37:bf:3e:fd:a4:eb:b6:e4:5d:8a:
74:e4:d3:35:57:27:11:ac:3b:04:b1:56:9c:6c:c5:
e2:c9:8e:d2:e4:af:85:5f:b6:12:81:ed:40:4e:4b:
7f:29:fe:2a:cd:f7:21:38:1f:d2:10:5e:6b:d1:71:
1d:e0:8a:cb:39:ba:13:95:67:5a:66:8e:2a:80:3c:
2b:47:3b:ad:3c:7a:78:11:76:8c:ee:f2:34:f6:61:
ec:3b:5a:d9:c0:c9:19:3d:13:25:77:99:6d:64:54:
0e:48:7d:e6:65:ce:fc:21:c5:b3:2a:c7:ea:0c:e8:
a9:78:7b:ed:81:01:0d:02:5e:cf:0e:9c:28:36:43:
bf:c4:d6:4f:b5:91:74:f4:46:36:34:da:33:be:dc:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:C4:B2:8E:95:11:25:33:D9:BF:D3:34:3E:78:52:27:0B:76:26
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:d7:0f:7d:3f:f7:36:c1:04:d1:c5:77:ab:92:be:a1:7b:
87:f2:a7:82:52:4d:32:2f:0d:64:e1:64:92:ae:77:90:9a:dc:
84:8b:d5:6a:f5:22:4e:cc:4e:9b:9a:aa:ad:62:19:95:6f:5d:
7f:9c:6b:37:d8:81:b6:c8:d1:08:4e:5c:b7:b0:ea:c2:f7:02:
29:a3:dd:7e:7a:5d:03:c5:ec:7b:20:bd:c2:99:63:16:4b:80:
10:5b:dd:3a:ce:6f:7d:34:d5:b4:7a:18:d6:f0:fd:f1:25:2e:
df:95:d6:21:ae:76:17:b1:21:e5:b0:64:f0:74:b3:6c:a9:74:
5b:c0:48:89:31:ef:06:00:5c:20:a4:e2:59:8b:7f:af:85:df:
ac:f1:ff:5b:66:1e:58:f4:40:2e:a3:a6:78:66:94:a1:68:78:
f0:20:c5:52:0c:56:5a:1c:ce:a0:a4:d9:be:b2:8e:9d:a9:37:
ed:94:53:45:fe:0e:5b:42:b9:d1:f9:f1:6d:89:1b:a6:cd:2a:
a3:ce:fc:2d:a6:22:12:1e:36:b1:e2:f8:ea:f1:37:7b:b2:28:
f0:3b:1a:51:0f:79:b9:8b:18:91:a0:72:02:d1:54:91:0f:1b:
80:b4:68:d7:64:40:d6:fd:d4:d6:c2:67:92:00:95:d5:c8:1f:
7e:15:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:54 2025 by rpki-client