Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: bZ7LhCfdXX75j63Y4rxJh5rf3ZXHyunr6kfdqg7QnY4=
Subject key identifier: 23:CC:2D:FE:00:AF:D9:B4:1F:F5:40:0A:1B:07:3C:57:36:2B:B8:9D
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 01968BEF703D41B7C9EDD40C528816698476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 1516
Signing time: Thu 01 May 2025 13:00:46 +0000
Manifest this update: Thu 01 May 2025 13:00:46 +0000
Manifest next update: Fri 02 May 2025 13:00:46 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: itp9gkmCBYzwzGnsK0A3lkxs8vfpmrNmyWHakGwKxJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:70:3d:41:b7:c9:ed:d4:0c:52:88:16:69:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: May 1 13:00:46 2025 GMT
Not After : May 2 13:00:46 2025 GMT
Subject: CN=23cc2dfe00afd9b41ff5400a1b073c57362bb89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:6c:2d:fa:77:e6:fe:1c:e0:2c:d9:44:92:
48:d2:eb:43:8a:a2:51:e0:a3:fc:8a:a4:6c:23:ff:
b9:4e:cf:49:36:19:f5:6d:97:20:4b:ee:73:56:8b:
27:cd:24:30:81:38:14:c6:c0:05:50:af:72:f2:9c:
e3:d0:af:86:94:56:21:7d:92:71:9f:33:c3:cc:ad:
19:af:42:b0:a5:4c:23:8a:89:c9:6b:a3:d6:42:4c:
f5:ed:f3:f8:83:f2:af:ba:f5:45:69:e1:bf:00:4b:
cd:11:e7:49:64:62:a1:03:fd:62:c1:99:69:dd:35:
d1:78:40:a9:46:75:f7:ec:3c:29:fe:36:80:fc:f2:
db:5a:6e:cd:ad:52:8d:19:bf:96:6e:97:02:a1:24:
49:e6:01:8e:d9:1f:d2:73:35:0b:53:bf:f8:82:ce:
c2:5d:29:f1:7e:e4:90:2a:58:18:7c:4e:36:4a:82:
3e:32:01:f5:1d:36:71:2d:bb:cc:79:35:64:78:52:
30:38:2b:7e:c2:a0:cb:02:ae:9a:dd:54:b3:e9:52:
bb:9b:32:ea:0d:c7:f5:20:31:a0:f5:60:aa:8b:88:
63:87:77:d5:35:69:c6:93:7f:81:05:9f:12:d1:b2:
f3:62:aa:22:28:19:df:f6:78:2f:68:12:30:f5:db:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:2D:FE:00:AF:D9:B4:1F:F5:40:0A:1B:07:3C:57:36:2B:B8:9D
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:73:c2:be:b7:38:2f:61:7a:f6:e9:6e:ea:46:66:c4:23:e0:
f3:96:17:5c:2f:8d:01:b0:3b:dc:53:da:c7:e1:9c:dd:09:84:
e5:0a:63:e3:46:e2:74:8c:ee:5d:44:95:ff:6f:13:2c:d8:7b:
c2:7f:1a:aa:3d:b0:3f:4a:6e:eb:92:46:7a:1a:c8:d9:7f:a0:
48:16:69:6e:4a:26:f7:0c:6b:0b:c0:b2:57:d7:21:f7:1f:15:
20:f4:50:20:1a:04:5b:6d:c7:16:fb:4a:5a:fb:a3:d2:56:bb:
2a:9e:83:ac:4a:84:d0:36:5b:81:48:45:76:86:c1:40:86:c4:
8a:aa:1d:d4:c0:96:6c:eb:d6:4d:88:fa:39:7d:28:4c:5a:ad:
a0:bf:95:54:5c:b4:24:8c:77:3d:46:da:63:0e:6e:66:c5:5b:
a9:7d:37:e1:97:27:0b:1f:0a:71:c1:ab:e6:22:8c:f4:4a:c8:
91:e0:ef:00:5d:a0:d4:e1:d5:2d:c1:d7:10:fe:15:b5:3b:55:
7c:48:db:2a:23:ee:de:93:e9:02:27:81:86:54:87:ed:a2:0c:
0f:8e:9a:1b:48:ab:03:c8:69:17:28:47:20:8a:3d:e9:3a:90:
51:2d:c5:0c:f6:f2:85:5a:ef:e4:6a:c3:0f:11:06:a8:3b:05:
ce:83:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:42:09 2025 by rpki-client