Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: gZWVJuHOYlcbSaj0Kr1KJ+c74BStNBlndUcRuJkUTxw=
Subject key identifier: 13:EC:A2:1C:66:C9:61:06:1C:07:39:20:10:BC:39:6B:AB:B8:E9:6F
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019682B54B8540BB038AE37C9C0BB0AE3499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 09FD
Signing time: Tue 29 Apr 2025 18:00:41 +0000
Manifest this update: Tue 29 Apr 2025 18:00:41 +0000
Manifest next update: Wed 30 Apr 2025 18:00:41 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: V5RHjolKrQ3NWWmRlCaPNOKJUMnOYnSjWgEXMF5u7CE=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:4b:85:40:bb:03:8a:e3:7c:9c:0b:b0:ae:34:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Apr 29 18:00:41 2025 GMT
Not After : Apr 30 18:00:41 2025 GMT
Subject: CN=13eca21c66c961061c07392010bc396babb8e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:d9:30:74:27:2d:b5:cf:aa:ab:9a:e0:db:
04:2e:ce:eb:e4:be:44:dd:c9:ea:6c:68:ae:e1:9e:
75:85:77:18:5b:7f:74:99:b5:85:95:77:bd:23:f4:
a5:d7:23:1f:f5:a5:53:79:c5:6e:d7:74:b0:d3:3d:
96:28:b7:b4:b9:3e:15:bc:89:96:ac:ae:c9:b3:af:
25:8b:9c:33:72:b8:c1:b4:24:41:e4:11:9f:9f:ed:
4e:01:04:67:a3:6b:23:f6:85:b9:d4:8f:8d:fb:7c:
c9:00:cc:20:6d:93:10:96:5f:8d:32:f9:2a:b5:cb:
55:d8:cc:d0:c0:ce:51:5d:cc:51:06:3b:6e:75:28:
a9:e3:ee:41:80:36:14:ea:f7:52:2f:c5:08:c8:4f:
a0:16:3c:cb:44:fa:53:f9:ff:7a:35:25:0f:24:20:
65:74:4d:9a:ca:08:f1:67:6a:bc:32:d4:cb:59:eb:
48:ed:31:0e:ab:ba:12:ce:02:69:c6:59:a2:0e:cd:
3c:8f:db:25:fc:f9:89:db:17:86:be:b0:c1:7b:ff:
5a:af:67:6f:ce:c0:05:42:0a:ad:d9:7b:5e:71:8b:
37:ea:e7:69:ef:d6:0c:43:87:0d:23:e7:ef:31:3a:
e3:9a:86:a8:76:16:78:a9:3f:bd:ab:45:35:f6:31:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:A2:1C:66:C9:61:06:1C:07:39:20:10:BC:39:6B:AB:B8:E9:6F
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1d:b9:72:ec:60:78:f7:49:3d:b2:ef:70:c4:ab:0a:66:13:
ec:42:2a:24:5a:cb:95:af:88:6a:02:a2:b0:f1:9c:ce:1d:ab:
cf:d6:f4:40:5b:12:b9:ac:59:30:81:18:f6:01:7f:ec:ff:16:
91:1b:8e:32:d9:f5:de:bf:92:e4:70:aa:2a:96:d1:a9:23:f7:
8b:08:f3:ed:6d:1d:61:9a:c1:87:96:84:cf:24:a4:28:0b:fb:
79:14:ad:be:0f:0a:a1:73:ff:3d:87:de:e6:62:0b:c9:e7:27:
bd:f7:11:1f:4c:87:cb:0d:6a:90:fc:30:30:c6:b0:89:42:f6:
c3:82:51:42:85:16:f9:1e:0a:b8:cc:8e:27:bb:ac:be:92:e6:
9c:ba:05:a7:33:7b:7f:5c:ca:63:0f:d4:24:a5:a5:2c:6e:35:
2f:57:1d:9f:88:9f:d3:60:aa:a4:c5:2a:b2:33:75:fc:e6:20:
13:30:cb:4c:6a:6d:cc:27:c0:12:b2:c3:fc:b0:6b:1c:ed:6e:
cb:d9:f3:41:69:70:28:b0:33:53:a8:f5:08:3d:6f:da:03:82:
24:6e:62:c0:44:f9:3a:03:e9:1d:fd:03:a0:e3:07:ec:d7:9b:
e5:6e:c4:18:89:57:a9:e1:6e:8a:ab:6e:10:76:a7:71:49:b2:
d5:42:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:05 2025 by rpki-client