Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier: Q/mBcl23eAR3QQzzwSJNgYdPwtAw3vjYKBptdWS/wUs=
Subject key identifier: 87:1E:EA:83:5F:98:D0:ED:CF:C6:85:A1:C0:82:A3:47:80:6F:FD:3D
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial: 01967CEA471FF84C3FF38451A1A8543174AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number: 09A3
Signing time: Mon 28 Apr 2025 15:00:50 +0000
Manifest this update: Mon 28 Apr 2025 15:00:50 +0000
Manifest next update: Tue 29 Apr 2025 15:00:50 +0000
Files and hashes: 1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: gQ7JtC7dyCw3xSQmNrVSXYW2W8QwE/cUyCcd8JlRH3c=)
2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:47:1f:f8:4c:3f:f3:84:51:a1:a8:54:31:74:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Validity
Not Before: Apr 28 15:00:50 2025 GMT
Not After : Apr 29 15:00:50 2025 GMT
Subject: CN=871eea835f98d0edcfc685a1c082a347806ffd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:80:fd:e9:6f:bd:5c:e9:a0:8f:6d:33:be:
d2:b0:0f:11:46:94:6b:4e:d0:36:4e:8a:1e:3e:6b:
5a:39:1d:9d:14:0b:f2:1e:72:b4:b4:65:43:88:24:
3f:9c:f4:70:c3:30:00:0f:46:db:de:45:64:16:9c:
ef:ce:dd:3e:d8:84:93:ee:19:56:3b:9f:2c:f5:93:
a8:76:1e:3a:d3:42:de:be:96:98:e6:b0:60:ac:c6:
ff:7f:dd:76:9a:f7:f3:39:e2:96:50:5e:e5:e9:d7:
d3:aa:5c:80:4a:83:fd:a4:c0:50:c2:14:be:c4:ab:
af:bf:04:8c:20:8f:fb:00:b6:65:38:ac:97:00:4f:
56:a8:13:3c:60:22:e3:b0:aa:03:5a:0c:ce:03:4e:
3b:61:63:77:8c:fb:24:19:34:eb:20:9d:09:95:98:
f3:0f:d5:d0:5e:60:61:26:fb:07:5d:69:90:d3:00:
52:b2:08:be:bf:ef:f1:63:07:3f:9b:92:76:a1:0c:
33:75:53:1b:9d:75:89:d7:1b:35:12:08:b4:1e:bf:
ad:51:44:59:95:fb:97:fa:13:53:57:92:59:8a:6d:
0b:43:f2:d8:34:29:8b:f5:a0:7b:10:32:b5:0a:7a:
8d:37:55:17:b3:e7:15:f1:c6:b2:05:77:1c:0f:9a:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:EA:83:5F:98:D0:ED:CF:C6:85:A1:C0:82:A3:47:80:6F:FD:3D
X509v3 Authority Key Identifier:
keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:40:b8:74:df:52:cf:3f:fe:22:26:7b:db:f7:37:62:92:
76:e6:0c:5b:c3:57:b8:32:c4:3a:0e:ba:ba:89:4d:93:6a:b6:
eb:0e:3f:7f:33:52:83:b0:00:a3:14:38:ee:45:49:a9:fd:98:
84:aa:99:db:4d:39:81:13:df:df:f2:3d:c0:d1:2f:43:6f:63:
7e:ec:e4:de:bb:8a:74:8c:e2:26:c9:37:0a:9a:00:9e:2c:db:
a2:77:95:44:5a:75:54:ea:e8:03:bb:b1:53:96:ba:50:59:be:
77:a8:c8:ae:1f:dd:aa:5b:a7:ca:c2:b0:e3:2e:54:2f:4a:c6:
b3:53:d4:37:fc:9e:19:55:dd:7a:6c:37:5c:de:5c:78:32:01:
40:6e:42:46:a7:58:76:37:88:db:ad:ee:33:e0:3f:6e:b3:00:
2e:9f:ab:ed:80:b3:ae:94:a6:8e:82:e5:c0:37:dd:c4:1c:6c:
42:4c:03:5e:10:82:ca:c9:42:1b:48:ea:ad:eb:47:ac:37:32:
2f:31:bb:2d:ba:a5:be:92:f0:d7:d1:0c:dc:cc:b7:27:a7:c7:
bc:41:2a:ae:d7:9d:7c:fa:5f:56:bf:ec:18:19:a6:8a:37:8d:
18:94:c1:57:4f:3d:37:27:d4:13:2e:dd:4f:47:95:2d:86:3c:
c4:ac:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:04 2025 by rpki-client