Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: FSnHWtFsrfVHYWLzPI05KRANO9NYdYfPev51dUap0zI=
Subject key identifier: 09:FE:AA:8D:14:8C:A3:72:A9:BF:01:06:5E:FE:16:5D:38:91:0C:8B
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019685B60F5D425D2BC4CB654A002706E111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 08:00:23 +0000
Manifest this update: Wed 30 Apr 2025 08:00:23 +0000
Manifest next update: Thu 01 May 2025 08:00:23 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: /EFgfm80YqQNqu1PKtzQMeY4xkJ125u1uf+2YYufRB4=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:0f:5d:42:5d:2b:c4:cb:65:4a:00:27:06:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Apr 30 08:00:23 2025 GMT
Not After : May 1 08:00:23 2025 GMT
Subject: CN=09feaa8d148ca372a9bf01065efe165d38910c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:9b:cf:c1:af:3a:95:22:e7:11:fe:80:62:
f8:05:d7:a0:a5:0f:d3:87:a2:89:37:ec:8b:1a:7a:
3f:dd:af:10:1f:83:23:1b:45:05:96:76:8f:6b:75:
f9:e9:7b:22:15:ef:1c:a8:58:cb:c3:e4:8b:3c:a9:
c2:90:79:82:43:58:d7:c5:3f:ed:1c:77:2c:c6:cd:
e0:10:47:08:41:23:68:fb:82:17:5e:40:d5:c3:19:
0b:21:84:f9:a2:52:86:a3:2d:c1:c5:5f:63:d1:b9:
44:d2:54:37:3c:ef:6a:d4:92:47:34:b8:76:8f:f5:
27:23:9b:17:53:a5:67:e3:f8:4c:28:e7:ad:f8:57:
06:9f:df:cd:63:ec:33:2b:44:dd:7b:bf:bc:90:eb:
0c:24:7f:b7:5c:a4:14:46:1f:7c:6e:1a:a6:8e:fe:
9f:fe:8e:c6:34:26:c8:71:e3:cb:26:47:b3:a1:42:
f2:8b:ea:4b:8d:52:19:04:af:a3:05:b6:26:12:95:
30:7c:87:b9:c9:2d:58:d6:f7:33:2e:dd:ff:9a:fb:
52:22:5e:03:4c:bd:d4:86:f6:1b:46:2d:63:91:64:
b1:38:77:e8:15:41:d9:1c:69:d7:c0:35:67:7e:3e:
1b:40:5f:30:e0:30:46:7c:96:8e:90:34:81:6a:c3:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:AA:8D:14:8C:A3:72:A9:BF:01:06:5E:FE:16:5D:38:91:0C:8B
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:82:7c:2f:52:41:52:b3:07:ae:13:0a:15:cb:c1:18:53:
57:8b:a6:d7:bd:9f:f3:40:d9:e5:b7:c9:4a:19:34:f1:45:9b:
73:d6:25:d2:57:cd:c7:b6:de:16:02:8b:48:f0:9e:a1:34:85:
0d:6b:f6:2c:7c:c2:8f:4c:de:06:22:17:97:00:2d:82:bb:17:
39:ba:f5:0a:42:b7:08:5f:bb:4b:e3:fa:ff:41:00:91:b3:bb:
e1:6d:4d:f9:14:ed:64:33:d9:39:70:78:b8:a5:f8:07:aa:77:
90:27:fb:90:33:8d:c5:5b:86:f2:b3:97:eb:dc:62:6c:d5:01:
21:69:1f:15:3b:3a:04:e1:08:84:a5:22:41:56:a1:4a:c5:c1:
ed:57:ee:5f:77:03:7a:0c:5f:aa:07:97:60:1e:9e:27:99:20:
99:7b:4b:c3:43:2b:e9:0e:e5:53:b4:8e:13:40:53:64:f3:fc:
c1:1d:44:99:2f:46:c4:41:31:b2:54:cb:be:23:7d:52:c4:6a:
7e:08:c5:72:06:d2:d0:19:1a:e3:da:cf:55:cc:4c:4a:de:11:
23:02:4d:94:f5:a1:2c:46:3e:20:29:84:fa:03:0e:58:68:40:
7c:ef:02:c1:50:2b:d3:f4:39:65:d8:88:86:30:3b:1d:35:50:
09:db:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:18 2025 by rpki-client