Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: YmInSAbDm4HpEorlEpAO/ie09lkm48TKijoOr26ezPg=
Subject key identifier: F6:66:0A:CB:9D:69:0E:56:B3:20:57:59:CB:D1:91:ED:81:AF:2A:28
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 01967153ED7277A45A2709F438443924C9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 042E
Signing time: Sat 26 Apr 2025 09:00:47 +0000
Manifest this update: Sat 26 Apr 2025 09:00:47 +0000
Manifest next update: Sun 27 Apr 2025 09:00:47 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: bp+Ojuvoo8bDyiZlXmMglkl8+p2s6I0+mIKfSQrPVYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:ed:72:77:a4:5a:27:09:f4:38:44:39:24:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Apr 26 09:00:47 2025 GMT
Not After : Apr 27 09:00:47 2025 GMT
Subject: CN=f6660acb9d690e56b3205759cbd191ed81af2a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:17:6e:b3:84:a2:d6:20:8a:fd:1c:85:73:
9f:34:e1:4f:de:d4:5e:95:a6:d6:0b:bf:64:23:f9:
ac:15:91:d3:db:d0:c5:1f:b5:23:7e:8b:81:ab:da:
a4:18:31:9a:a1:02:d5:b3:3e:db:df:de:33:39:98:
c5:e8:0e:1d:a8:6d:6e:15:7b:68:21:71:64:61:d7:
0f:ec:3a:5d:2a:77:99:01:0c:3c:e2:c5:44:0a:d6:
e1:b0:3d:ba:61:81:a6:e0:01:f3:15:a4:a0:8e:6d:
d4:04:a0:09:e5:82:53:4e:5a:b2:b6:87:d6:75:40:
a8:75:1b:f5:19:70:24:69:9a:71:84:3e:ea:46:87:
4e:d8:cc:32:61:91:86:51:57:3a:c1:65:9c:e2:b0:
11:d6:cb:b7:06:33:3e:1c:39:25:9a:92:32:6a:f1:
44:01:ee:1c:7a:66:e4:b1:12:61:d4:94:17:ad:d6:
3e:23:82:e3:a1:68:bd:78:94:9b:38:7d:24:92:c3:
54:42:8e:f1:7b:ac:32:cc:ad:e6:94:a3:96:94:8d:
20:c9:cc:af:20:3b:af:6e:89:04:a6:c7:c7:ae:9f:
fb:29:c0:f0:93:fd:2a:41:9f:b1:26:b4:b4:8d:33:
82:15:00:5e:61:3a:b1:24:b7:6d:6b:e6:69:e6:c7:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:0A:CB:9D:69:0E:56:B3:20:57:59:CB:D1:91:ED:81:AF:2A:28
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:60:6a:3c:6f:a6:d5:8c:ff:5c:f7:e8:19:dd:2e:2b:42:17:
9d:37:73:42:aa:29:32:26:1b:26:8b:e4:e1:20:91:53:9d:f4:
c6:2b:0c:42:ed:9d:cd:d5:ce:cc:9d:78:80:bb:94:6d:69:98:
0d:bf:f1:8a:4c:35:ad:98:b3:ef:86:6a:d7:75:53:c6:6f:7a:
1d:5a:68:8c:a8:30:28:ef:a3:e5:f8:95:2b:ba:4b:69:82:a8:
4a:00:97:64:4d:bb:a6:7f:2b:b4:a8:b7:5e:5c:40:b7:2a:89:
1f:bf:24:ec:df:e4:38:5a:8a:71:bb:b5:c6:6f:0d:62:93:52:
0d:ba:fe:48:d0:4f:ca:2a:e1:2a:58:a5:fe:13:0b:2e:55:e5:
93:21:70:47:34:e3:28:10:16:65:4f:88:bd:47:89:d2:b9:f2:
35:f9:b0:80:b3:2c:09:eb:25:35:16:a6:6e:c9:5c:a3:81:c1:
b3:bb:0a:7f:f8:3d:2f:fe:95:ff:13:67:66:32:7f:af:ba:d7:
98:87:ed:8b:1b:61:41:a6:6a:ea:56:0e:a2:3c:65:42:4e:a4:
f5:e2:c2:8e:05:07:75:9f:a1:0e:8a:0f:59:75:95:2e:2c:c3:
e9:c8:20:a8:88:ee:54:d8:76:66:4f:25:a6:58:cf:58:a4:72:
9f:59:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:04:30 2025 by rpki-client