Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: xKA1LbRmyQqM/1ybO+rLZuA4W949L+8vYWi4EFNtaBo=
Subject key identifier: 1D:0A:65:2D:63:84:1A:A9:A1:15:15:97:3A:E4:D6:2D:02:88:E1:DE
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 0196802257E5A4058F1AD6802293A23DF22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0924
Signing time: Tue 29 Apr 2025 06:00:56 +0000
Manifest this update: Tue 29 Apr 2025 06:00:56 +0000
Manifest next update: Wed 30 Apr 2025 06:00:56 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: hca+tzeRMe92CMalxt48R1MUtfXwTitbLg8wjCwb3nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:57:e5:a4:05:8f:1a:d6:80:22:93:a2:3d:f2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Apr 29 06:00:56 2025 GMT
Not After : Apr 30 06:00:56 2025 GMT
Subject: CN=1d0a652d63841aa9a11515973ae4d62d0288e1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:d1:b5:75:7e:ff:03:7b:57:11:ee:a4:59:
ff:9a:82:09:5f:ed:94:4d:cc:15:a0:3f:e6:ce:f5:
79:74:3f:db:28:79:42:fa:bc:ef:37:39:88:5f:17:
2a:63:0e:8a:49:fc:3c:5c:dd:56:e6:af:8e:de:82:
01:57:85:c9:96:7b:7a:3b:b3:b9:f1:82:be:f2:ca:
d4:df:ca:47:29:b5:df:22:f9:c4:4c:14:51:f1:1f:
3d:06:19:99:b4:89:b8:91:26:58:35:9e:a4:db:2c:
0c:45:fe:ee:8b:69:16:da:ff:ad:46:25:31:bc:81:
7d:d8:bf:fd:18:33:2c:36:61:3e:48:a6:02:f2:3c:
9b:5e:29:97:35:2a:84:37:85:cb:0f:b8:f2:5d:97:
01:fe:a0:e1:ad:7a:9a:60:5c:b7:0b:2f:99:b5:67:
a9:b7:4b:19:99:65:3c:3a:b7:26:a1:80:70:3a:64:
bb:f8:33:7b:57:1e:f6:db:e9:56:37:8f:a5:cf:b0:
ae:d9:77:f9:77:5b:21:ac:ce:7c:29:7e:9a:75:65:
65:cb:5b:8a:14:8e:ed:d1:9b:7d:c3:2c:fe:d7:08:
67:70:42:9d:31:94:38:49:58:d5:d6:17:40:1a:93:
b6:f9:0d:97:06:bc:32:c3:03:e5:91:a2:34:a4:80:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0A:65:2D:63:84:1A:A9:A1:15:15:97:3A:E4:D6:2D:02:88:E1:DE
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c4:5b:c8:b4:c8:c7:c2:7e:e9:dc:cb:e5:95:3e:e4:e8:70:
48:dc:a5:f4:de:35:2b:be:4e:b9:8e:4b:fc:cb:73:3e:4f:dc:
b0:da:70:3d:6e:42:0c:fa:bc:96:a9:77:2f:06:fa:9b:d9:c4:
35:79:fe:b1:50:40:b2:07:ac:84:0b:0c:aa:a4:05:89:0c:4b:
c7:57:b6:93:01:a0:29:62:c9:1f:7e:25:16:9d:44:2b:44:9b:
22:16:d3:fc:66:1f:31:2f:e5:6b:f3:f4:74:6b:36:46:7f:19:
58:f3:28:a4:61:bf:4c:f0:2c:0e:f4:31:83:27:37:e5:b5:c3:
b9:69:0f:29:ab:1d:66:1d:eb:01:3f:db:51:0c:bd:b6:96:e2:
a9:90:88:de:2f:52:d1:2a:88:53:79:38:52:4a:7c:56:1f:43:
76:0f:02:8e:7c:24:f1:52:fa:63:db:81:b0:13:b3:d3:d4:e5:
83:93:49:a6:de:15:e5:83:29:93:fe:56:ca:b6:63:07:65:88:
4d:c9:cc:f8:b6:6a:4b:66:04:80:f5:7d:fe:12:44:62:22:2c:
68:45:47:36:55:d5:ea:b9:55:c3:14:5a:ac:88:a4:76:52:f0:
43:32:d0:3d:df:d1:fd:97:23:d7:7f:8a:9d:d9:42:a9:8a:98:
b9:38:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:38 2025 by rpki-client