Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: 9oHwf5kujBNCv4P5De9SNlPyoCD6Ybh4oZ9/cUnU7jQ=
Subject key identifier: F9:38:B7:0F:9A:E0:5B:FF:7C:CD:3A:74:F9:B5:8B:6D:10:91:79:82
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 0196789F92C35E5A76BBD703187EBF04A1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 19:00:45 +0000
Manifest this update: Sun 27 Apr 2025 19:00:45 +0000
Manifest next update: Mon 28 Apr 2025 19:00:45 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: SuStKgLw9JuB5BIjL3OJdjiiyTW3g6lpVCZ/tE1HGQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:92:c3:5e:5a:76:bb:d7:03:18:7e:bf:04:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Apr 27 19:00:45 2025 GMT
Not After : Apr 28 19:00:45 2025 GMT
Subject: CN=f938b70f9ae05bff7ccd3a74f9b58b6d10917982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:98:6b:ff:61:90:10:3c:c7:04:73:33:4e:
c1:93:b1:14:aa:47:da:ba:c0:b1:8d:4e:98:73:f9:
ae:20:2a:9d:03:ca:6e:44:0a:22:40:76:f5:ef:4f:
d3:84:b9:35:3d:2a:7d:68:c9:cb:d3:8a:b2:80:dd:
6a:24:75:61:f4:e5:23:2d:f1:1a:63:b8:53:c6:40:
90:a9:d6:9a:95:59:44:10:b9:21:be:89:de:7a:fe:
30:09:73:c4:dd:1b:08:bd:8d:7b:b8:41:f4:47:fd:
2f:e2:3b:0a:f8:f9:f9:5f:c2:02:96:90:48:b9:76:
e6:e0:b6:43:19:ce:14:9a:1b:89:68:e4:c9:7e:2e:
3b:af:e3:9a:68:3d:c9:f6:db:1e:3a:05:2b:3c:f3:
5b:e6:e8:ef:ec:29:ae:b9:c5:5e:3f:77:2f:44:5f:
44:5b:5c:c1:94:24:79:92:29:7d:4a:17:2f:81:0b:
24:be:b7:47:7c:1e:96:de:79:66:e0:3e:f1:82:8c:
d9:32:cb:68:78:dd:1e:dc:c8:dc:e9:1a:35:94:30:
12:e2:9b:47:b0:25:2f:8e:22:c4:79:a3:91:72:cb:
8c:b8:86:d7:3b:f0:e0:a0:f9:9a:23:33:d5:02:a3:
ad:41:8f:84:77:be:5c:f6:44:0c:f2:ec:ea:b7:a4:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:38:B7:0F:9A:E0:5B:FF:7C:CD:3A:74:F9:B5:8B:6D:10:91:79:82
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b9:fe:00:73:d5:96:52:20:6b:0c:70:f7:30:2a:71:cd:cd:
b1:c3:48:a9:7a:8c:d7:c8:28:6f:74:48:66:29:04:1f:c1:65:
be:17:e5:db:22:9e:0d:ff:ac:b1:98:86:61:f2:70:b5:17:9e:
f7:69:2f:d7:e6:81:17:66:a6:ca:90:74:01:b7:cc:e8:91:99:
9b:48:47:1a:73:eb:7b:1f:23:f3:1d:24:a9:f5:c9:3d:30:50:
57:14:01:88:28:30:2e:51:22:4d:d0:b4:67:bd:1d:a6:23:be:
36:b0:7d:3f:ac:11:47:c9:1d:ab:a9:5c:c8:e4:16:64:7f:ee:
9e:03:0b:73:ac:48:0c:e1:4a:35:4b:77:d7:0d:d0:1f:73:53:
08:3c:68:63:17:a1:c7:51:53:cb:6e:60:51:48:07:ae:75:75:
7c:4b:ae:8f:d5:25:35:dd:fd:e0:9e:36:f1:5b:ea:fb:70:3f:
ad:67:e6:5d:b6:02:a0:1c:a4:c2:d7:c3:b7:6f:7c:a8:00:ec:
b3:c1:8c:83:0d:0f:4e:63:4a:e2:25:26:07:fd:81:20:da:2f:
49:3a:9d:8d:5d:c1:c1:bf:2c:e5:76:2d:a4:9c:4c:ac:0d:23:
bc:59:ee:08:9b:a3:a0:4d:97:f9:9a:f7:78:51:4b:10:4d:23:
c7:22:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:34:23 2025 by rpki-client