Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: fEM5jI8BIXwQDH4zWLraUPnMCUjP0Jtc/lfFj1LcAUk=
Subject key identifier: AF:21:0B:56:64:41:A4:37:3F:FD:27:53:1B:19:51:F0:9E:2F:7C:98
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019678317FEE1536B73AFD17DE193D343AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 17:00:31 +0000
Manifest this update: Sun 27 Apr 2025 17:00:31 +0000
Manifest next update: Mon 28 Apr 2025 17:00:31 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: qfxi361L19XYrkmtS/1bS2Y34g+qcbdF4RI7DhtBmFQ=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:7f:ee:15:36:b7:3a:fd:17:de:19:3d:34:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Apr 27 17:00:31 2025 GMT
Not After : Apr 28 17:00:31 2025 GMT
Subject: CN=af210b566441a4373ffd27531b1951f09e2f7c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:bb:76:87:05:60:a8:a8:5a:b4:88:ad:3f:
fe:70:e8:5e:f3:ac:d4:46:89:c2:6b:fe:88:61:6b:
bd:83:2d:e5:ee:8a:89:c1:62:e3:e5:a3:43:03:54:
70:c9:ed:ff:e3:88:9c:8c:0a:fa:ae:33:c3:5f:72:
a3:70:39:8d:f3:6c:7e:48:f9:00:e9:12:ee:ec:cb:
dd:26:d4:9d:18:d9:de:a6:c0:86:c5:92:85:91:a1:
78:9f:63:dd:22:ee:44:08:11:d9:e2:39:a1:89:09:
3b:d5:6f:4e:50:7d:2d:99:87:6b:9b:f6:d8:1d:fc:
18:1f:98:7e:4a:e8:19:cb:02:0c:ae:53:54:dd:12:
7f:f7:d8:db:d3:e7:ce:e6:3f:5d:a8:b7:22:40:6e:
4f:aa:e5:af:0e:c2:d3:c0:33:e2:d1:d4:7f:77:98:
9b:a4:e4:55:5a:86:c2:fc:67:91:f5:29:af:8f:dc:
e0:af:0a:0b:bc:c0:c2:96:45:bb:4b:50:0b:06:6f:
94:08:04:a9:e8:ae:0e:1b:59:db:e4:9b:0d:77:86:
72:3b:da:2e:fe:0f:05:f8:50:8c:3c:07:9e:23:8d:
8c:fb:48:ec:84:5c:f3:37:83:08:37:bc:2b:2b:9e:
08:64:b2:4c:f6:4a:90:32:83:3f:9c:5c:32:f3:97:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:0B:56:64:41:A4:37:3F:FD:27:53:1B:19:51:F0:9E:2F:7C:98
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:9f:79:dc:1a:49:e8:20:02:ed:2f:a3:a7:d3:76:4d:61:
7a:c4:56:ec:91:32:6b:5d:d0:58:f2:77:0f:c9:1e:bb:b2:a8:
f5:b3:35:e9:a2:af:ec:d4:a6:9c:64:2c:07:63:1a:7b:20:36:
3f:6b:e3:cb:8f:e7:ee:27:a2:92:17:12:4a:78:70:a1:44:62:
d8:92:ff:a5:8b:54:05:75:6b:74:42:b0:24:eb:5f:53:23:5c:
31:df:59:af:53:29:45:92:f6:c3:21:b8:78:47:6a:dd:d4:2c:
61:bc:9f:e8:dc:94:8f:07:34:83:88:76:04:c4:d1:f7:4c:43:
49:e3:5b:35:12:0c:d9:15:fd:6c:71:a0:2b:51:89:49:af:9e:
89:f9:39:7c:31:9f:6a:6b:f7:38:d3:2a:cd:4c:b7:54:8d:ce:
17:f1:71:2d:07:17:37:1a:07:d2:e4:b9:08:3b:a5:50:4b:42:
71:8e:63:e6:0a:d8:83:f2:49:e7:ea:fa:25:4d:51:0d:2c:15:
4f:76:79:d3:b1:4d:11:70:39:b3:ce:03:eb:6c:27:b1:f5:85:
a6:ac:61:aa:b2:04:87:c3:d4:21:c2:28:4a:38:51:2e:6f:87:
fb:26:22:8b:3b:8f:a3:7b:e4:0e:62:da:b3:38:35:10:27:cb:
73:4c:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:15 2025 by rpki-client