
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: H2sURUWjkMfbiQ5YHG4tOkP2JWZWWRrlWNzg7uac9Vw=
Subject key identifier: E0:0D:92:28:26:B6:4C:72:AE:81:D6:C2:85:7B:CD:7C:F9:D7:D3:22
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 01967BD7DA058E9CAADB9A3D857EDD86EEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 0312
Signing time: Mon 28 Apr 2025 10:01:05 +0000
Manifest this update: Mon 28 Apr 2025 10:01:05 +0000
Manifest next update: Tue 29 Apr 2025 10:01:05 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: t7Zi2SazRJp2WSnf5LzsCCACYwK1DsPJdcm7ts7eQUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:da:05:8e:9c:aa:db:9a:3d:85:7e:dd:86:ee:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Apr 28 10:01:05 2025 GMT
Not After : Apr 29 10:01:05 2025 GMT
Subject: CN=e00d922826b64c72ae81d6c2857bcd7cf9d7d322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:47:91:07:90:62:d4:6f:3b:50:07:16:e9:
68:a1:b3:20:ca:70:f7:f3:ed:68:e7:4b:e8:9a:e8:
cd:ed:8a:b2:9b:a3:ec:6b:9e:ea:8e:37:7c:d4:55:
0c:99:a8:c1:99:0b:98:54:1e:ac:5f:9b:aa:f9:3c:
27:5c:66:7a:f7:30:27:80:91:ba:39:a7:dc:da:d7:
51:32:79:7b:79:b2:9d:c8:69:2e:c4:99:33:34:a9:
ae:c0:30:a1:7e:19:ac:1c:c0:c0:23:02:32:fe:f9:
8d:03:d0:40:88:64:36:4c:ea:d9:3b:f8:cf:de:8a:
8b:88:40:b2:c6:d6:3b:51:2a:9a:86:82:4c:97:cb:
d9:c2:7a:ee:ac:72:5c:73:73:bf:34:5b:f0:0c:56:
57:34:57:f1:a9:a7:26:91:e2:3e:65:9e:f5:6f:d8:
61:70:01:7f:80:2f:ad:78:25:34:ab:0c:a0:d1:9b:
a4:6f:b4:74:be:89:2d:f3:d2:7c:be:d8:56:15:77:
4d:da:04:4b:e8:5f:17:af:c2:37:af:56:71:89:1a:
9b:a4:c4:54:ad:df:af:7f:30:8a:46:96:a6:14:8d:
6d:9e:48:e5:79:b5:30:a8:3b:5d:bd:e1:e6:a3:d9:
43:97:b0:47:49:f2:bb:b6:83:02:2d:71:8a:70:9d:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:92:28:26:B6:4C:72:AE:81:D6:C2:85:7B:CD:7C:F9:D7:D3:22
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:04:6c:8c:89:f5:9d:ea:97:b7:1e:45:f7:13:34:62:e1:86:
6a:53:87:b3:a2:28:98:bc:61:58:ba:1b:6d:eb:df:78:28:24:
85:7d:4e:4b:f2:86:3f:90:a4:b9:9c:b9:35:ec:e6:1a:a7:e1:
5d:d2:03:cb:c5:6d:23:4d:47:99:48:1b:fa:ee:55:91:4d:13:
85:bc:78:a5:78:36:35:55:02:df:4b:7c:08:31:76:2d:ac:b8:
c5:c6:0b:16:e7:6f:0e:1c:4b:9f:5f:c4:07:07:36:5f:be:e5:
49:1a:d1:97:2c:a8:e4:54:39:c7:c3:da:c3:cb:8b:8c:b8:84:
34:1e:5f:56:1b:5e:e4:e7:4d:1e:b5:d9:a2:56:61:1a:6f:b0:
6e:06:e9:34:11:de:ee:6f:ae:80:53:93:3c:10:c5:2e:f4:ed:
a1:66:63:e4:bc:b5:63:89:6c:6f:33:77:1c:1f:7d:46:ee:93:
a3:cf:ff:ef:82:56:36:dc:47:d0:05:c2:67:72:7f:8b:36:5d:
e8:c0:1d:7f:4a:1b:9d:68:2d:ba:eb:34:84:c1:d7:dc:5a:f3:
0d:fc:56:d6:2d:02:66:7a:0e:47:4f:81:59:f2:8d:b7:9d:43:
a5:a2:84:0a:1b:e8:9e:33:58:bc:5e:ce:54:e7:47:18:bf:8c:
d6:17:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:03 2025 by rpki-client