Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: WaSX+ciWTZTzamIsZuJfb/OTkg9E0BG3vkTCw+KflF0=
Subject key identifier: 2F:1D:AA:44:C9:22:13:26:F2:7E:31:6C:40:50:DB:F8:25:47:E2:84
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 01967D8ED64FB9F89CE7520167872520F094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0D9A
Signing time: Mon 28 Apr 2025 18:00:35 +0000
Manifest this update: Mon 28 Apr 2025 18:00:35 +0000
Manifest next update: Tue 29 Apr 2025 18:00:35 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: IHcWsqh7B2xb5rBZkftmDqR/HiZq521F+88iCsmKqt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:d6:4f:b9:f8:9c:e7:52:01:67:87:25:20:f0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Apr 28 18:00:35 2025 GMT
Not After : Apr 29 18:00:35 2025 GMT
Subject: CN=2f1daa44c9221326f27e316c4050dbf82547e284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:5c:47:c3:9b:ee:2f:e7:6d:89:00:61:e6:
4e:78:71:32:40:b8:53:0d:16:77:0e:37:3c:64:85:
86:c5:8c:f9:dd:84:e2:c1:0b:13:c6:90:3a:ac:b4:
4c:71:9d:5a:76:2c:e7:24:ad:14:2a:47:5d:a5:e9:
f9:3d:7e:b1:e3:dc:f0:1e:bd:a6:a0:3e:0f:d9:be:
00:70:e2:b2:30:b8:88:85:3d:06:f7:03:00:48:9e:
ea:60:3e:32:37:02:a9:69:55:e8:ff:e5:83:22:a8:
18:e1:74:23:92:74:bd:de:83:33:1b:75:c1:a4:29:
3a:ce:94:0b:b7:6c:b2:84:c1:a9:df:dc:cb:d4:86:
73:10:7f:8c:1c:6b:ff:d5:72:7f:70:18:34:cf:b0:
03:51:30:04:13:92:3b:3a:1b:3e:cf:1e:10:c8:0a:
d8:51:07:de:32:ba:98:c8:f4:69:9b:3d:cc:b8:3c:
66:5c:6e:94:b8:63:3e:f2:f9:26:9d:41:97:91:9a:
26:9e:b4:8b:b0:63:c4:ba:a0:37:f5:70:7f:11:f4:
b2:9b:36:75:f7:4c:f0:c1:ae:69:0d:64:27:1f:e3:
c2:aa:b8:05:89:32:c7:10:21:9b:98:f6:ca:6b:7a:
d3:25:83:24:13:e6:37:e2:ed:51:0d:4a:f0:fd:30:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:AA:44:C9:22:13:26:F2:7E:31:6C:40:50:DB:F8:25:47:E2:84
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:75:a6:1c:ae:29:b7:e7:40:b9:62:b3:78:b5:98:14:d5:
85:34:4a:64:f3:d5:c4:0d:db:58:c8:9a:dd:ab:d3:85:7d:cf:
c7:37:cf:80:64:bb:92:b6:72:1d:23:af:fd:63:97:a5:21:bc:
b6:37:22:c1:9b:80:8f:0c:98:b6:96:e3:e2:18:06:11:ce:ac:
32:0e:04:32:53:8e:52:1a:30:8e:4c:14:7c:50:ab:87:e3:bc:
26:40:8d:c5:f5:33:b5:bc:72:40:20:37:af:08:17:ed:30:b6:
87:4d:a3:89:85:aa:95:3e:bd:79:d9:ad:78:f4:ce:17:64:06:
b8:35:a3:6b:26:e3:26:09:f9:21:8d:2d:0a:92:8d:c0:80:a6:
e1:0d:86:5c:95:56:cb:25:30:dc:63:da:fb:44:2e:af:fd:1c:
c4:72:8f:cc:82:39:1b:11:de:0f:2a:1a:94:2d:83:48:8d:b3:
56:a7:07:75:f5:88:b5:9a:c5:5a:c6:28:f6:fd:11:95:e1:71:
8f:35:29:94:b5:f4:40:42:36:5b:35:42:f3:c5:a1:d4:a0:06:
b5:96:f1:a9:fb:b1:52:7b:8c:82:31:c4:24:94:02:8b:35:9e:
e7:ef:1a:c6:24:5c:d1:c5:c2:39:5e:a7:bc:b0:f5:7d:14:87:
0b:06:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:37:00 2025 by rpki-client