Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier: YRsEWhLz4YhWJQc2H9Pxw2g3ARKuopXIVZ/fLS/gFf0=
Subject key identifier: 68:4E:13:BA:2D:7A:12:2A:56:0F:26:FC:E1:F1:D1:F8:DD:2F:F9:BC
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 01967EA1612B4C9A14E54310D83B40EDFA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number: 044D
Signing time: Mon 28 Apr 2025 23:00:27 +0000
Manifest this update: Mon 28 Apr 2025 23:00:27 +0000
Manifest next update: Tue 29 Apr 2025 23:00:27 +0000
Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: /FtbggAfgZCtDkjvTosM2xVIA+AW2aCC2svOUa4wKmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:61:2b:4c:9a:14:e5:43:10:d8:3b:40:ed:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: Apr 28 23:00:27 2025 GMT
Not After : Apr 29 23:00:27 2025 GMT
Subject: CN=684e13ba2d7a122a560f26fce1f1d1f8dd2ff9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:b3:30:83:74:2c:80:e7:af:e6:56:1e:48:
6d:bc:e8:63:de:af:3c:34:88:72:87:6c:5b:32:48:
00:df:39:36:47:e7:b4:0a:f8:e6:3a:67:b8:87:eb:
ff:58:6e:aa:b4:ee:70:48:be:27:b4:b5:99:01:cf:
0e:bb:44:63:7f:fb:2d:26:f6:3e:44:79:eb:e3:c8:
3d:35:0f:d5:c1:59:08:71:88:9e:ee:0e:41:31:23:
f0:c5:6e:c5:10:07:41:08:5a:55:e8:c4:3d:34:1e:
da:10:08:09:92:a3:f8:ee:77:6c:f0:9a:ae:2e:44:
a6:a7:df:63:12:39:f3:dd:3f:4e:0d:65:fc:f2:27:
73:fa:18:e1:21:92:6b:75:06:9b:75:ed:b0:57:5d:
bf:22:c7:10:1a:6e:70:f5:c4:dc:94:be:6b:d9:32:
1c:26:9b:4b:39:f6:73:f9:23:b6:a5:6e:69:36:dd:
4f:01:8a:73:ac:5e:26:48:46:20:e3:c8:12:44:c5:
c3:f2:cb:88:0b:5b:db:b7:32:41:1d:c7:f4:53:82:
20:af:2d:57:74:9e:5d:4f:5b:04:9d:17:4b:6e:64:
35:93:28:8e:07:23:0d:5e:7b:e6:25:a5:03:20:c4:
f0:83:ad:32:f5:90:fa:ce:4a:7a:28:80:b7:0f:3e:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:13:BA:2D:7A:12:2A:56:0F:26:FC:E1:F1:D1:F8:DD:2F:F9:BC
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bd:93:ab:ae:33:4a:cd:74:63:78:f5:9a:90:3e:bb:b1:0d:
30:a3:70:22:59:a2:f2:e8:4d:9b:f1:d4:87:9e:ae:de:52:cd:
e0:ba:21:31:fd:c8:09:7c:ea:56:ab:1f:7d:b3:e0:93:af:f5:
4f:a4:7a:0e:d0:4b:d6:c6:53:b3:d4:67:51:76:d1:1b:7c:41:
d6:6e:3f:9f:29:77:50:d0:57:bf:1f:c4:2f:32:4f:8e:fc:8a:
c4:11:6a:ca:f5:a8:27:f3:bb:a0:97:6e:be:81:d5:1b:38:c4:
b9:a2:16:c0:ac:e4:ad:1d:3b:c4:6d:b7:0f:c5:93:08:b7:5c:
95:66:c5:9e:f7:00:86:8f:64:76:95:84:bb:d5:d2:c4:ab:d0:
fe:83:73:77:72:58:84:ee:6d:1a:7e:12:83:31:64:ed:b5:6b:
5c:80:b4:88:12:10:d9:5e:87:79:1c:f4:f9:c1:34:b4:21:03:
fa:35:8c:34:8d:f6:ff:5a:21:5d:76:1a:eb:77:df:9b:b3:ca:
ea:ba:95:85:ca:69:40:1c:8a:64:5a:96:fa:1e:39:cb:3f:0c:
9a:2e:de:ec:9c:9e:5f:34:ea:ec:9b:85:38:1b:b2:00:c4:24:
e8:91:7c:b4:84:36:c3:fe:52:33:22:86:e4:66:33:8f:37:58:
84:e3:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:18 2025 by rpki-client