Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: kKkMx4fK/DBtNvIA5yEZCTH4g7wkAjewnbinhIwVzl0=
Subject key identifier: 72:9A:45:57:33:D6:3E:4D:AC:59:9E:2E:DD:33:F3:B5:2A:49:32:43
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019682B56C32C2C6CD7590884086F3B383B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 123D
Signing time: Tue 29 Apr 2025 18:00:49 +0000
Manifest this update: Tue 29 Apr 2025 18:00:49 +0000
Manifest next update: Wed 30 Apr 2025 18:00:49 +0000
Files and hashes: 1: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: eyNhRNnX84/5jIbpUz1JXksQ5MU3gWUFj2MCzWwut/A=)
2: faR7v_a9Va3-r60WSU_WaTJtc24.roa (hash: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=)
3: wZytHkz1eTrO_daNgd0l88TpMno.roa (hash: aO2EKOjOiT6GiecSdUo1ipV7w9UfmDYsqeI6Hxz5eZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:6c:32:c2:c6:cd:75:90:88:40:86:f3:b3:83:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Apr 29 18:00:49 2025 GMT
Not After : Apr 30 18:00:49 2025 GMT
Subject: CN=729a455733d63e4dac599e2edd33f3b52a493243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:e5:32:64:f7:00:c1:66:65:b3:bd:bb:ee:
6e:c6:64:80:25:e1:5b:dc:91:ae:68:73:76:a8:87:
6c:10:92:2f:d5:02:38:4e:f8:b5:37:a6:12:6e:78:
8d:c8:df:24:6d:0d:c9:e5:9f:5f:8b:16:47:66:58:
59:bb:5f:c1:71:ba:0f:ea:cd:8c:e2:e3:0e:4e:70:
b0:8f:9f:ac:25:5b:bc:7c:65:db:74:e7:9b:8e:1e:
e1:9a:52:2c:22:80:12:a8:38:af:64:d6:21:5d:24:
d8:c2:c6:42:45:4e:22:77:c3:ba:ca:97:17:83:0f:
a2:68:50:6b:9e:e2:48:2e:53:55:d9:b5:2a:dd:2c:
18:58:53:e6:20:66:0a:b1:e4:07:df:1d:c8:2f:f8:
a3:eb:b6:6e:96:f4:4f:56:09:59:af:0f:f9:ea:e1:
8d:05:9c:12:de:73:8d:97:01:a7:7b:fb:f1:c9:7b:
bc:51:0a:87:9f:54:c2:4c:a1:4a:30:2d:ed:13:ed:
11:d1:88:53:76:37:f1:2c:50:c1:a0:d1:e0:aa:42:
9a:19:d5:db:d5:8f:4e:a7:13:ce:42:00:ea:07:6d:
90:13:9a:50:73:02:5b:44:cd:67:7c:d4:23:41:2a:
7f:c7:6c:01:3b:a6:3e:0f:c6:18:c4:d7:3b:21:75:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:45:57:33:D6:3E:4D:AC:59:9E:2E:DD:33:F3:B5:2A:49:32:43
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:df:fe:69:1f:3f:49:87:b6:d4:b3:68:86:e4:9e:76:da:82:
69:6a:6b:c4:bb:fc:df:28:72:4e:b8:45:20:b1:5e:58:e9:f3:
75:0b:c5:fd:23:9b:70:8a:50:42:72:a0:b4:86:95:4a:65:f3:
d3:c6:43:6f:e5:9c:85:9d:29:5d:de:88:7c:88:ef:02:c9:22:
b0:52:29:f4:6d:7a:97:ba:f0:c2:c6:dd:38:36:0a:47:10:6b:
7c:f7:cc:eb:d8:a6:c8:cf:60:a6:4e:10:92:30:cb:e3:9c:5c:
49:9a:75:dd:ed:3a:6b:a7:10:c3:71:af:b8:bc:f6:a8:36:8c:
c0:47:4f:95:c5:de:2d:a0:cf:98:81:db:a6:78:2b:3d:fc:dd:
48:56:53:c1:6e:16:91:b1:c3:9d:d6:22:67:e3:76:d3:4f:96:
49:4b:ca:9d:64:0e:17:b4:f2:63:de:45:9e:e1:61:32:db:c1:
b8:49:56:85:84:ae:5a:75:75:31:ad:ba:fe:09:74:4a:3e:bc:
69:f2:40:53:b3:f7:2a:7b:f3:cf:8b:56:ea:10:50:91:c5:68:
7b:bb:83:9e:5f:17:91:36:b7:a4:81:2e:e3:52:0b:dc:fd:6c:
79:e3:91:58:ed:dd:3e:8a:ab:de:f9:eb:47:5e:33:dd:c3:ee:
5b:d6:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:55 2025 by rpki-client