Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: EVc9s1+wELuow6i1TJYSxjjKSQJ0tGtkLO9+dxU/418=
Subject key identifier: 3B:3A:66:DA:27:1B:D0:2B:DE:F8:1D:97:C9:CC:59:88:8F:42:86:F9
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 0196AAD5420AF6294E0A7D2D0EC20D77E09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0D4B
Signing time: Wed 07 May 2025 13:00:24 +0000
Manifest this update: Wed 07 May 2025 13:00:24 +0000
Manifest next update: Thu 08 May 2025 13:00:24 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: KIXfjQUayKrb/S1bNl7L02j4Kus5fR3AYK6C6YxfBgM=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:42:0a:f6:29:4e:0a:7d:2d:0e:c2:0d:77:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: May 7 13:00:24 2025 GMT
Not After : May 8 13:00:24 2025 GMT
Subject: CN=3b3a66da271bd02bdef81d97c9cc59888f4286f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:1b:aa:64:c3:71:b2:4f:d7:7e:d2:33:7e:
45:f3:ea:59:07:f6:17:3f:08:a2:92:93:b2:cd:41:
1d:bc:1b:71:fc:e1:6c:63:76:02:fe:f6:c2:43:63:
fd:36:be:fe:2c:80:29:5e:56:d8:c2:bb:c6:dc:c0:
c6:00:d3:5a:1f:f0:d1:62:5d:7a:00:56:3f:9b:73:
ee:1e:8f:38:f0:57:69:50:f9:d1:47:10:68:1b:d4:
c7:45:b2:a5:8a:4a:87:df:41:42:d7:6a:3a:1f:49:
40:b0:5a:16:fc:c6:e2:4a:4b:a6:13:76:d6:3b:68:
25:7c:df:33:25:18:fd:bd:20:d4:5a:e4:05:ac:50:
1a:3c:6d:4b:89:97:0e:ab:4f:e5:9f:a7:f4:66:3e:
50:1c:7a:24:1f:00:ce:5e:8c:6d:bd:10:5e:de:07:
4a:13:c1:4b:26:f1:7e:1d:3b:5b:e3:d2:b1:87:4f:
cb:02:85:82:b3:85:59:c3:05:d6:b7:6c:0e:94:b9:
1f:33:3c:26:18:e6:ed:82:81:db:30:00:14:ae:af:
30:8c:d2:d7:1e:16:92:21:97:06:cb:0b:a5:54:8f:
a4:ff:b2:70:a6:d0:4c:38:1c:5e:94:77:15:51:03:
dd:ea:ff:c4:94:9b:56:9f:ca:0e:26:91:58:44:59:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:66:DA:27:1B:D0:2B:DE:F8:1D:97:C9:CC:59:88:8F:42:86:F9
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:68:b5:91:23:40:1f:62:45:bd:a9:58:e8:d7:6d:eb:cf:52:
d3:14:cf:be:76:54:f4:69:59:41:e9:70:e6:da:8b:f8:ea:22:
a7:63:53:6a:3e:c3:83:bd:3b:fc:da:03:de:34:c2:4d:8b:98:
b9:74:3c:e6:aa:31:cf:2b:06:cc:c0:32:17:35:f5:9a:46:e6:
38:76:91:f0:2f:cd:86:7a:db:e8:85:6d:76:89:fc:aa:64:be:
c4:be:51:d7:28:e5:60:9d:6d:f0:a9:4f:88:07:08:7a:0e:84:
5d:78:22:5c:41:73:43:7c:f9:b2:e7:fd:90:c3:14:e8:0a:36:
c6:10:17:dd:a8:e4:d2:d2:2a:80:43:a8:68:91:86:82:19:39:
a7:5f:19:dd:9f:cb:64:d9:d9:25:2c:e7:7f:df:06:42:f2:e1:
2f:b2:ef:9b:24:da:4a:f1:80:b4:1f:1a:2a:ef:2f:5e:83:e8:
d8:2c:26:fa:be:44:d4:c0:94:5a:11:2c:3f:43:84:02:18:0d:
1f:ab:92:2f:bb:c4:00:63:cb:73:aa:4e:5b:93:72:ca:6f:45:
6f:6c:23:4d:b7:70:98:d1:52:51:1b:72:9e:30:d0:7c:bc:6c:
be:dc:b9:5b:8e:c2:ac:68:c7:11:a4:6d:a0:df:03:74:b3:c1:
33:62:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:07:54 2025 by rpki-client