Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: v4H24Mp/jAjXzjZuP3IIOlB1pTqKwSq98PueSmesSf0=
Subject key identifier: 63:54:9C:30:04:8B:51:23:22:52:9E:B0:26:C3:E8:F6:91:62:0F:80
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 019678D60A2CF54DEB098763AAE10DFFE77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0972
Signing time: Sun 27 Apr 2025 20:00:15 +0000
Manifest this update: Sun 27 Apr 2025 20:00:15 +0000
Manifest next update: Mon 28 Apr 2025 20:00:15 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: UxxrNwFHEUSeKL4pM1jj6iugqVUtnMB5wdeOD9eHsHc=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:0a:2c:f5:4d:eb:09:87:63:aa:e1:0d:ff:e7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Apr 27 20:00:15 2025 GMT
Not After : Apr 28 20:00:15 2025 GMT
Subject: CN=63549c30048b512322529eb026c3e8f691620f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:eb:6f:f3:83:da:2b:da:3d:02:82:fb:f1:
8a:f5:0d:d1:41:9c:34:4c:15:43:1a:cb:66:1d:c7:
b5:f8:84:90:58:0b:62:a5:bf:e4:cb:c9:6b:2e:f6:
1c:d9:d0:2e:33:ba:b0:4f:33:61:bc:4f:f8:de:c0:
16:c2:25:a7:ec:5a:e4:17:9d:97:69:73:98:cb:69:
f3:94:81:4d:22:35:02:4e:68:37:6a:39:8e:cf:f6:
ed:d5:21:e3:d9:a8:d3:f7:07:16:17:00:5f:a4:86:
8d:ff:97:6c:90:85:3e:3a:ea:59:6a:e8:d0:66:6f:
65:59:12:91:8e:35:c4:41:7b:ca:41:3b:08:a9:a2:
72:d5:82:fe:4b:cb:5f:8d:10:c9:c3:7d:e2:72:b4:
9f:e3:19:ec:f1:56:34:3a:bd:89:6e:2d:9f:4d:cc:
05:5c:70:31:56:04:09:f8:17:50:21:30:9c:cd:8d:
b7:72:7d:d9:a7:2b:d1:5c:4b:0c:57:91:aa:9a:1c:
70:2e:7d:77:3e:c9:92:1f:de:a2:ca:94:d7:1c:c8:
3f:0b:ab:3f:35:ef:10:c4:af:8c:7b:a4:af:7c:81:
6f:6c:67:3d:e1:24:a4:14:85:9a:20:76:06:02:89:
89:b7:af:89:06:3a:85:5b:50:60:02:eb:e1:49:d3:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:9C:30:04:8B:51:23:22:52:9E:B0:26:C3:E8:F6:91:62:0F:80
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3e:5d:59:74:65:b2:a4:4d:66:8c:0d:d9:03:72:bd:e5:fd:
71:e1:a7:79:ba:a4:a2:14:9e:06:cd:1a:72:e6:db:be:98:77:
87:3f:f2:19:43:ea:f8:4a:c0:d4:bc:bc:04:30:0f:d8:c5:5a:
a2:0c:bc:98:20:9c:91:44:b0:c3:3f:b7:b7:5b:6d:bf:95:bc:
ab:39:01:20:58:90:e3:83:61:44:3d:ba:8b:87:c2:58:f5:3d:
d1:dc:8e:9f:a3:36:45:54:b4:98:f1:31:5e:83:34:ec:b8:ac:
5c:bc:d2:c0:36:c5:49:69:db:55:b9:ca:36:05:8d:6f:36:e9:
13:ff:ee:b3:b2:2b:9e:7c:37:39:38:81:02:57:7f:5c:fe:0b:
2e:69:d8:57:2c:1a:ca:79:79:ce:9a:be:ae:ba:6e:b7:dd:8a:
26:1c:c9:8c:cf:56:24:87:8f:97:56:43:49:c4:f2:96:53:91:
f3:dc:48:2a:b0:d0:fc:dd:9b:9a:a7:6c:4f:9f:55:13:cd:73:
c9:fb:ce:9f:44:f5:21:95:54:26:ee:c3:46:66:d4:f3:77:30:
16:5c:10:30:e3:f2:54:a1:01:28:d6:f7:58:73:90:ed:10:f2:
fe:ba:66:b5:ba:02:3f:ea:7d:6e:46:0e:77:b9:16:29:10:b8:
5b:da:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:36:05 2025 by rpki-client