Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: 2q/10UVwy0IaTSqMdJ4fjFm/lOIoR8F6vPXgNuhD5CQ=
Subject key identifier: 42:49:F9:61:B4:71:9F:D2:24:87:3D:67:B5:56:37:B1:5A:49:FD:CE
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019677FB2360BE434EAE366B49B3560E30B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 02C3
Signing time: Sun 27 Apr 2025 16:01:09 +0000
Manifest this update: Sun 27 Apr 2025 16:01:09 +0000
Manifest next update: Mon 28 Apr 2025 16:01:09 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: s9gxPgPjbZcpGkRmJ1wdmr6fEfomID+nA2l/MlCL5Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:23:60:be:43:4e:ae:36:6b:49:b3:56:0e:30:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Apr 27 16:01:09 2025 GMT
Not After : Apr 28 16:01:09 2025 GMT
Subject: CN=4249f961b4719fd224873d67b55637b15a49fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:8f:68:d4:12:6b:a9:f7:ac:81:5b:23:8d:
e3:02:36:35:db:ad:7e:7c:dd:4b:de:11:db:02:fc:
6d:b1:4f:81:d1:9d:89:a5:1f:73:b4:0e:b7:43:f6:
ca:0f:c1:76:fd:3b:1c:9f:90:0c:5d:92:20:d5:b0:
9b:53:fd:15:73:5d:a4:b9:b2:e6:8f:8c:8b:f3:3f:
95:92:31:a8:3a:8b:6c:2e:64:83:a7:e1:25:14:80:
58:a4:72:1b:18:4d:ee:89:9a:de:17:58:4c:cd:23:
49:9a:56:1e:c5:6d:51:c1:2e:30:53:a9:f6:0f:52:
34:ed:54:84:e1:b0:f8:55:30:67:ce:75:f1:ea:11:
76:81:96:d7:71:da:7b:b9:61:0c:83:f9:a0:4e:6c:
e6:60:b2:58:56:1b:56:ee:46:5e:3e:f5:4e:9d:28:
fb:26:d2:55:bf:c0:be:e5:18:89:65:9e:fa:ea:26:
81:f1:d7:4a:1e:0c:00:da:46:86:a4:43:28:c2:8f:
e6:b9:80:77:03:37:30:99:bd:a8:14:30:44:6e:5e:
1f:5e:0f:c3:34:ee:a2:8f:e7:e0:12:06:94:a4:ec:
7c:46:3f:83:e6:df:ef:e4:9b:9d:38:1e:15:a8:97:
e3:61:ae:ff:83:d0:6c:19:e0:be:91:d8:ff:a3:25:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:F9:61:B4:71:9F:D2:24:87:3D:67:B5:56:37:B1:5A:49:FD:CE
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:7c:ae:96:e5:e9:56:e3:26:3a:07:a9:d0:9b:30:46:ce:
eb:19:23:4b:62:70:8d:01:fc:c3:41:f7:b9:28:8a:77:c3:7c:
54:fa:e0:1f:4f:36:e2:7e:c0:2d:07:11:63:c7:06:03:ce:05:
76:60:8d:7e:92:90:00:01:6a:16:b1:df:e6:a6:05:28:3d:71:
08:f5:ac:d0:55:fa:48:96:ac:a9:4d:1f:e1:23:28:bf:91:77:
e9:4b:dc:b5:19:4d:90:08:00:d4:81:de:ec:cc:80:f3:27:9a:
59:98:23:14:aa:13:ac:c7:53:d8:1c:16:03:4a:ec:b8:20:3d:
a5:1a:08:7c:cc:1b:a0:4c:5c:05:93:04:81:71:8a:de:36:a6:
a8:9a:ee:31:09:dd:71:8d:05:6e:1e:f9:92:01:8d:9e:26:af:
b3:06:6f:80:51:c6:5b:be:4d:f0:c6:be:ee:7a:27:da:24:6b:
02:2f:f2:18:12:7c:3a:79:b4:33:f6:41:5b:60:78:4a:e9:d4:
25:9a:81:7b:b3:e0:dc:5e:54:1f:fa:a6:01:88:f6:7e:79:b7:
42:07:71:10:61:01:27:a1:85:9d:df:9e:c6:00:3a:db:50:44:
fc:f7:94:d6:26:b8:8f:03:18:7d:60:fc:a1:16:e0:14:e0:ef:
cf:3a:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:32:03 2025 by rpki-client