Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: OZRpv3P2WprSFUWA9PCQLS4BKO1/m+h5KqzkfdHO6m0=
Subject key identifier: 58:81:03:65:91:7F:F1:1A:E8:6C:5E:67:44:C9:D8:C0:93:9C:92:6C
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 01967AC48BAAF77B5A026DBB7B45B46BC700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 05:00:23 +0000
Manifest this update: Mon 28 Apr 2025 05:00:23 +0000
Manifest next update: Tue 29 Apr 2025 05:00:23 +0000
Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: OjdMyFqNBS30+1S982ulS8PSCeN3Yb5pvFBLgdimJqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:8b:aa:f7:7b:5a:02:6d:bb:7b:45:b4:6b:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Apr 28 05:00:23 2025 GMT
Not After : Apr 29 05:00:23 2025 GMT
Subject: CN=58810365917ff11ae86c5e6744c9d8c0939c926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:c4:cd:00:78:5c:48:dd:bc:a3:cc:8a:b8:
53:01:fe:bc:bb:05:7b:9a:9c:d2:49:2a:85:fb:9e:
97:ac:7a:12:4a:f9:88:fd:8d:c8:00:15:f8:dc:86:
46:46:95:67:1d:f3:4b:59:5f:f0:3b:59:cf:2a:88:
63:29:31:7b:b7:43:fc:4c:d4:e0:ad:d0:eb:ee:bb:
83:45:01:04:34:13:d9:9a:3c:0b:53:9a:26:4a:b4:
f5:b3:ab:3c:9b:d3:0c:ac:68:7b:28:df:50:76:02:
f1:9e:f4:ef:a6:ab:d0:b3:6e:48:c9:34:e3:13:b8:
24:ae:78:20:9d:8e:ad:f6:6b:2c:18:22:53:af:3a:
48:fd:12:6e:7c:09:18:ad:4a:48:e7:5a:46:f7:e8:
87:9d:8c:5e:3f:50:43:40:ba:a7:f3:da:b6:d0:37:
d8:f9:a1:29:0d:ac:8e:64:87:09:13:8c:f7:ba:3a:
04:da:74:8c:d9:fe:c5:4e:78:47:49:9f:11:8f:09:
04:fc:c0:46:1c:83:60:82:4c:4e:24:f4:31:cb:8d:
03:07:e2:09:27:db:c5:80:fb:46:2f:0e:17:56:88:
49:ca:0b:3c:63:62:ec:73:3c:2a:8f:d1:57:91:58:
09:64:71:b5:dd:31:c2:96:73:92:27:a3:da:c8:70:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:03:65:91:7F:F1:1A:E8:6C:5E:67:44:C9:D8:C0:93:9C:92:6C
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ba:14:35:e3:d9:67:0a:e8:f1:91:6c:ab:c6:54:8b:be:e7:
12:40:1d:92:42:dc:d1:bd:2e:0c:4c:f8:85:cb:61:bd:70:2c:
4a:50:6b:0e:4c:0c:b1:ef:d7:87:a5:e5:73:2f:cb:12:2a:d6:
3f:34:a8:8d:9a:c2:09:a2:b2:0a:8a:38:f3:e5:3f:36:f3:d8:
55:55:2e:54:7f:3d:d0:2b:a3:ad:ce:67:f3:6f:aa:f0:3b:be:
cd:60:60:1f:a7:4b:f0:9e:a2:5f:b7:2f:59:60:77:e9:fb:be:
7f:03:57:08:58:07:46:7a:33:52:94:43:db:5d:b9:eb:c0:4e:
ce:38:bd:ab:ac:89:e9:58:33:cf:f8:74:15:fa:ef:d5:75:c8:
3e:ef:5a:9a:4b:9f:80:9c:11:eb:ff:72:a4:92:d1:ac:0a:40:
86:65:e8:65:39:77:9b:b8:fa:39:bd:e9:cb:e5:56:05:c8:b3:
2e:ad:a5:62:47:ae:8e:f2:1f:00:ac:f3:e5:8a:dc:b0:25:ec:
eb:31:47:ec:a7:12:e9:dd:12:b4:0c:b1:1c:a5:53:98:ad:14:
5d:37:c1:6e:a7:48:e1:db:00:87:3a:b5:5d:05:30:85:d8:db:
e3:3b:bd:51:5c:26:f4:23:37:c2:fb:10:c5:81:b4:fe:23:c4:
dd:e1:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:57 2025 by rpki-client