Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: st09QEqM7EYGDCrJFXv758pEk4A9/kyioOnc/HRiO9E=
Subject key identifier: 5B:30:F2:58:0F:64:6A:47:F9:BA:52:4D:87:50:93:E9:75:AF:87:9F
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0196760CA85D166F127DA275F5D22599ECA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 13AA
Signing time: Sun 27 Apr 2025 07:01:02 +0000
Manifest this update: Sun 27 Apr 2025 07:01:02 +0000
Manifest next update: Mon 28 Apr 2025 07:01:02 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: M9hVJsutGW0nZ0Gb5Ytw6W3TJG8VoqOUmNBil3KVzsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:a8:5d:16:6f:12:7d:a2:75:f5:d2:25:99:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Apr 27 07:01:02 2025 GMT
Not After : Apr 28 07:01:02 2025 GMT
Subject: CN=5b30f2580f646a47f9ba524d875093e975af879f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:4a:f2:1c:5b:9f:32:29:8f:17:39:51:c7:
bd:b8:66:ad:3f:a3:1c:a6:82:2b:a8:d0:d5:5c:b2:
62:0c:39:f7:cd:de:68:55:a3:35:58:6a:dc:31:e2:
79:e7:cf:74:e4:bf:d3:89:7f:df:fa:60:d5:c3:06:
f6:db:d4:e1:cd:5a:3f:98:58:2d:e2:b8:52:9b:aa:
a2:92:b2:32:27:dc:f6:af:41:8f:f0:c8:e3:d3:93:
5a:72:f1:3f:77:4f:5f:18:43:ba:93:e4:f3:7a:d5:
69:e5:a5:50:63:5d:38:b1:7a:c5:fe:4c:fe:5e:a1:
31:4a:94:02:fb:80:24:11:a2:0e:87:f7:31:4d:ed:
ce:e0:d3:21:32:b6:de:5a:b3:94:95:51:a7:b2:d7:
48:3a:b4:bf:d9:58:e0:16:e4:55:b1:90:fe:d2:73:
c9:28:16:13:c1:73:82:e8:e9:19:7e:5d:9f:c4:ed:
79:bc:43:41:8c:d5:2c:3b:fd:63:0f:dc:33:5f:99:
7d:a3:65:26:fe:12:eb:7e:30:04:7d:f5:0e:48:b3:
9e:e8:b3:33:9a:f1:67:ce:34:ff:60:a7:87:76:c6:
d3:a4:ca:39:ac:31:99:c6:ef:69:af:d2:6e:9c:33:
53:32:bf:11:f4:30:af:e0:08:0d:94:bb:e7:54:6b:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:F2:58:0F:64:6A:47:F9:BA:52:4D:87:50:93:E9:75:AF:87:9F
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:0d:bb:32:b2:ef:0d:25:79:f8:48:42:28:fc:12:33:b0:
c7:54:bf:b4:ab:2d:ba:3c:e9:0d:d8:a6:32:2d:dd:2d:d5:8d:
c8:c0:a7:55:8d:82:75:e9:58:c4:98:6b:65:f9:7d:60:5e:e4:
94:13:cf:06:f5:be:85:c8:a2:4c:67:76:2b:9d:91:3d:50:92:
ff:e3:15:c0:64:59:4b:a2:0b:af:0d:cc:15:e8:76:1d:35:78:
2a:5d:20:50:d8:d2:dc:cd:6f:47:a0:e3:84:c7:dd:16:96:e8:
a2:00:d0:07:c5:dd:4e:8d:8d:e9:1c:a8:2f:9d:43:be:1a:47:
9a:30:f3:31:dc:da:dd:3a:2b:29:29:06:4a:51:71:c5:db:77:
42:05:54:9a:96:74:fe:d2:56:80:df:0e:81:19:51:0e:5e:fe:
80:ce:4e:44:59:e7:41:07:ea:26:02:7c:2a:31:9a:db:e4:50:
58:5a:65:d6:8f:ed:b6:37:56:1f:9c:23:c1:fb:2a:82:bb:c4:
8a:28:63:05:6f:bf:84:2c:bb:a1:86:eb:dd:71:09:b8:a4:4b:
73:73:d2:e6:67:45:18:65:7c:c0:35:23:46:59:38:cd:84:81:
4e:22:60:0b:b8:51:b2:94:b4:d5:95:86:06:4e:df:0f:00:e0:
3f:65:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:24:01 2025 by rpki-client