Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: 6Jksp3OtuZ2CF3mhVC28Lz1OSqeTsJnLAQxuCH6wT2w=
Subject key identifier: 5F:A4:E8:F5:E9:9A:7A:52:B4:82:1B:77:7D:9D:7B:34:89:92:99:E0
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 01967868FCF2887F88FF26679A20064E937D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 18:01:08 +0000
Manifest this update: Sun 27 Apr 2025 18:01:08 +0000
Manifest next update: Mon 28 Apr 2025 18:01:08 +0000
Files and hashes: 1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: DmjnrFhXpzsER6R9N+sc4qrfokcG/IZia93lEKGO2+0=)
2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:fc:f2:88:7f:88:ff:26:67:9a:20:06:4e:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Apr 27 18:01:08 2025 GMT
Not After : Apr 28 18:01:08 2025 GMT
Subject: CN=5fa4e8f5e99a7a52b4821b777d9d7b34899299e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:7b:c3:ca:d0:ff:e7:b0:e6:bb:b8:a5:38:
f7:a7:c1:e0:bb:46:97:28:a7:86:1f:35:ff:10:6f:
dd:f7:f6:8a:76:e5:05:17:db:a8:eb:46:fd:2e:4b:
97:a0:65:6d:4e:62:2c:8f:f7:92:d3:ad:9c:19:a0:
80:93:d3:d4:2c:c7:cb:0c:89:77:29:48:30:14:52:
95:25:e0:84:02:e1:45:cc:93:db:33:cb:a9:f7:14:
d7:8e:c6:00:a1:7d:11:98:c3:a2:17:d7:ed:e4:27:
3b:c4:7d:cf:f6:35:8a:57:53:e4:fe:83:b7:eb:38:
4d:61:61:07:cf:1e:df:e4:19:40:e2:5c:50:21:6f:
2c:5a:3e:a9:33:c8:6a:32:af:27:3d:6a:38:52:61:
c3:25:1f:06:c9:5b:50:28:fe:f3:fc:c4:0b:93:e3:
98:b4:33:87:13:66:0e:4a:b0:8d:8b:a9:f1:a5:0f:
5d:cc:92:fc:56:73:89:bd:e3:21:7f:e5:54:0c:26:
4a:6d:d2:53:23:55:17:15:b4:d3:5e:28:f8:8b:26:
d7:97:93:dc:35:90:79:70:90:64:07:d3:8c:4e:ef:
65:dd:cb:a4:ae:68:a5:95:5c:96:c8:63:b9:d1:7b:
ee:3e:28:12:6b:23:b9:ac:ac:55:f2:84:f0:ba:43:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:E8:F5:E9:9A:7A:52:B4:82:1B:77:7D:9D:7B:34:89:92:99:E0
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:81:d8:71:fa:0c:54:90:5f:e4:81:02:f2:29:c3:bc:da:
f3:31:2a:6b:09:45:9f:c6:6c:f0:3d:91:13:48:2d:f3:64:df:
af:ba:2c:12:64:5b:d3:a1:c4:85:43:c0:97:e0:18:a0:9c:14:
29:2e:17:28:0c:ef:5d:22:9c:0f:b3:6c:e1:d5:c2:c2:85:60:
0c:3d:d6:2d:f7:93:06:29:0b:04:a1:af:94:8f:5a:85:81:ef:
9e:2f:10:9d:f3:22:5b:f5:c4:d0:db:c5:2f:77:f7:47:ab:cc:
18:75:99:8b:dc:e4:48:72:7a:6f:0d:ad:4f:8a:e6:bb:43:2e:
d2:03:bd:fa:9f:c0:a0:52:cc:9b:6c:83:07:d3:53:17:6b:2b:
a4:c4:20:12:87:67:ae:44:7d:8e:41:e8:d2:e3:2f:56:a3:d0:
77:2a:60:a3:21:78:4f:06:b2:42:bc:c2:84:ae:b5:13:5b:11:
63:6d:ad:cf:2e:ed:b2:c2:ce:1a:77:95:d3:b7:3f:b2:8c:24:
c9:7b:61:69:b7:f6:44:98:34:0f:b2:5e:60:54:72:a2:07:ca:
24:e4:06:d4:59:5f:f5:b7:f8:cb:73:27:a1:28:db:fe:0d:41:
1c:27:e2:1c:97:b8:8a:04:4e:16:86:72:0f:9f:f7:37:af:13:
a6:92:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:57:02 2025 by rpki-client