Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: oO0pnDvwdIx+/8/mdX035bCan3Msq0wZA7niGtNwU0I=
Subject key identifier: E0:6F:0C:1D:AF:53:D0:BB:C9:1C:B2:41:7E:E6:A7:76:45:91:A1:99
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 019673E6EB02CC4C0963DD07AEACD57CE834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 21:00:35 +0000
Manifest this update: Sat 26 Apr 2025 21:00:35 +0000
Manifest next update: Sun 27 Apr 2025 21:00:35 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: M+1GlyBgsO3xEX5njPU/j0k/RlqdTXrbFZ9/Rrf9nZY=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:eb:02:cc:4c:09:63:dd:07:ae:ac:d5:7c:e8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Apr 26 21:00:35 2025 GMT
Not After : Apr 27 21:00:35 2025 GMT
Subject: CN=e06f0c1daf53d0bbc91cb2417ee6a7764591a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:b9:e0:fb:ea:0c:20:d2:1a:22:dc:71:25:
96:36:9c:6d:89:fa:d9:67:7f:1d:6a:32:0b:65:16:
a4:0d:2f:a0:0d:da:e9:ed:e1:d0:e9:2b:76:9b:d7:
ff:29:41:7b:da:65:7a:ce:6b:6b:70:9c:d1:94:b9:
69:87:45:6d:02:9f:0f:5a:a2:82:c7:e2:f4:7a:cc:
d2:80:9d:86:e5:95:e0:76:85:3e:34:ee:e6:7e:0f:
c1:8e:e9:4b:6f:37:84:07:c5:5d:68:ef:f5:92:78:
72:03:ba:50:31:e5:86:7e:76:61:9c:d7:6d:83:69:
c4:a0:a2:2d:8f:3b:ae:e6:7f:17:4d:8d:43:94:99:
12:02:ae:13:81:a9:21:a4:26:ff:13:09:d0:3a:cf:
f1:94:5d:0f:cc:49:2c:27:c0:ff:aa:f5:05:33:04:
25:1d:5c:3f:89:d9:58:dc:78:72:02:5b:66:fb:3f:
cf:ac:93:e7:e5:c3:79:76:89:7e:2b:ea:6d:b9:b4:
04:ce:ce:eb:8a:fd:6d:24:a0:03:c5:cb:e7:5b:dd:
12:57:06:f0:c3:ca:2e:e8:c4:45:7a:e8:d1:a7:b9:
69:88:a3:50:8d:e9:bb:a3:5a:58:a9:43:08:99:d7:
ea:01:7e:cd:08:b5:8f:dc:b5:b9:31:8a:5a:48:5d:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:0C:1D:AF:53:D0:BB:C9:1C:B2:41:7E:E6:A7:76:45:91:A1:99
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:14:f4:56:d1:96:70:fa:c2:48:97:66:4c:6c:9c:7f:97:a5:
c0:b2:87:2b:7c:43:57:a0:48:bc:90:c8:de:e4:fa:7a:c5:1e:
52:77:1b:9e:0d:f5:7e:0d:7f:4c:c5:20:65:d6:ae:22:d1:91:
a8:12:94:76:06:31:cd:b3:9f:d7:c4:d7:f5:8e:99:e0:62:34:
7b:35:7a:a8:d3:32:2f:54:63:44:e0:ac:49:af:25:71:7f:6e:
2e:09:57:73:20:52:f0:37:4d:bd:81:e3:59:8a:dd:2f:64:29:
54:13:16:01:ee:f5:ed:76:28:a2:26:4c:0a:d2:0e:5b:39:b6:
6e:14:c4:77:60:fc:47:6f:50:e2:4d:b5:c5:34:52:80:d5:fc:
36:3b:cd:fc:ac:b8:64:9d:d6:c1:cc:31:28:9c:40:3f:49:5b:
40:34:a8:72:9c:5b:c4:33:f3:e3:d1:4f:39:b7:cf:b0:4c:72:
13:e6:2c:2a:ff:a1:55:d0:a6:27:ec:88:c4:8f:95:97:bb:7b:
9c:99:7d:a4:32:72:37:e3:7b:e2:b4:c7:8f:47:32:4f:ff:c5:
4d:e2:20:63:72:91:e5:52:a2:4d:76:fb:93:4d:8f:8b:41:21:
ea:42:0d:0b:31:6b:47:2f:8b:e7:54:0b:db:39:89:87:43:e0:
70:bb:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:20 2025 by rpki-client