Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: Hm6IBxRHCfqS7KjQOR9NIc6mkqgozIOAIss9Nn4oi7A=
Subject key identifier: CC:A3:1D:FE:7C:06:E1:EA:87:B7:5E:DE:C2:B8:1D:45:7A:6F:95:64
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 01967E6A36560B4280F1445404D35E5AAC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0C48
Signing time: Mon 28 Apr 2025 22:00:11 +0000
Manifest this update: Mon 28 Apr 2025 22:00:11 +0000
Manifest next update: Tue 29 Apr 2025 22:00:11 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: mDiiKo0aP75aNS4ryjXdn36s6T/X5xD7cG3lxEyM3q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:36:56:0b:42:80:f1:44:54:04:d3:5e:5a:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Apr 28 22:00:11 2025 GMT
Not After : Apr 29 22:00:11 2025 GMT
Subject: CN=cca31dfe7c06e1ea87b75edec2b81d457a6f9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:37:81:9f:fc:54:b6:f9:e6:78:f9:f8:86:
ac:78:dd:6c:e3:48:d1:1a:0c:61:3e:fd:23:98:b2:
92:f4:92:d7:2c:04:78:99:88:ba:f6:4d:c4:e0:a1:
ec:de:0c:10:45:c6:5e:fb:b5:30:ed:e7:82:bd:30:
a0:88:e7:06:f5:0c:ce:b3:ac:99:d7:86:db:e3:b1:
a7:26:e6:b5:e6:98:af:43:7a:1e:3e:b8:f2:39:10:
b2:f0:3d:78:3f:af:75:05:18:f6:fa:36:27:31:c5:
bc:30:50:be:38:7c:bb:f4:ce:04:00:e2:8f:cc:8b:
7f:79:dc:e7:d8:69:00:7b:d8:2b:da:1b:21:e6:c3:
07:a4:01:ac:9b:ca:59:47:1a:b0:f0:11:e2:03:ab:
73:17:35:f6:5a:21:41:bd:48:95:fd:67:0a:fa:d2:
94:30:1d:49:48:c4:a6:d2:9a:a3:68:c4:94:36:2a:
88:90:7e:0b:6d:60:15:23:16:e2:89:5a:fe:97:1e:
36:95:14:c2:4f:f3:5d:4a:a5:e7:1f:ed:95:43:5d:
db:ff:59:fe:a6:87:a4:6b:ae:54:ef:8a:6b:83:2e:
58:82:b5:6b:b7:36:b5:c4:6b:36:c8:bf:a0:19:5f:
66:85:e2:5e:74:b6:6e:60:03:d1:21:c9:a0:91:d3:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:1D:FE:7C:06:E1:EA:87:B7:5E:DE:C2:B8:1D:45:7A:6F:95:64
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:25:3f:5a:ba:9e:99:0a:1f:d8:73:93:50:01:77:50:84:2c:
8f:16:ca:0d:75:84:8e:a2:6e:cd:c3:ed:6e:77:94:12:86:f2:
6a:32:03:ca:cf:b4:89:2b:52:b7:da:f5:3e:4b:4f:ca:c0:3b:
b3:b2:f1:a3:28:50:51:6c:22:f6:93:3e:bf:e4:1d:2c:3b:a2:
63:1f:f5:af:dc:a9:b6:5e:9a:40:00:36:29:0a:8e:fa:7f:f2:
75:9a:24:72:29:0b:25:cb:9e:c3:5d:97:c3:5c:5d:be:2c:c9:
87:11:6b:60:a8:54:0c:ce:df:21:04:65:1a:cd:4e:c9:71:ea:
b9:a7:6c:bf:35:b4:3e:dd:4c:59:8d:10:bf:9f:ae:cf:a8:9a:
85:08:6e:24:f1:49:e1:dd:b2:72:40:db:a4:6d:f5:d7:7d:80:
4a:87:56:5c:aa:2d:8f:7b:83:e4:4d:ac:53:de:70:d8:fb:4f:
36:ad:37:76:60:cf:89:d5:3c:9f:b7:c6:4d:68:9b:7b:f8:5e:
53:26:7a:6f:32:d6:77:94:c6:cf:6f:96:99:ef:e9:bc:ec:73:
e4:c6:35:95:cd:f8:b7:30:6e:ac:be:60:01:3a:16:e2:b5:2d:
54:8e:d2:6d:2e:1c:d2:f6:72:d3:0e:f2:b1:dd:2e:d8:21:4e:
01:cd:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:45 2025 by rpki-client