Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: bCF503qByh6ktZ8vEbFldeN73jpU+FMnW3iQ76abodU=
Subject key identifier: 93:FA:62:10:AD:1A:9D:12:85:94:4F:F5:5D:83:01:2A:8A:D7:61:1B
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 019678D627FCF40C0552A27094BE2D64EA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 20:00:22 +0000
Manifest this update: Sun 27 Apr 2025 20:00:22 +0000
Manifest next update: Mon 28 Apr 2025 20:00:22 +0000
Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: erWzBaT2htXoIkP2LX+wVclyFaUgSMPk8yiD3DxmrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:27:fc:f4:0c:05:52:a2:70:94:be:2d:64:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Apr 27 20:00:22 2025 GMT
Not After : Apr 28 20:00:22 2025 GMT
Subject: CN=93fa6210ad1a9d1285944ff55d83012a8ad7611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:bd:64:48:e8:31:46:d7:41:86:2c:52:22:
4d:39:43:31:ff:97:c5:8e:39:57:7b:b5:53:6d:7c:
93:3b:c8:94:b8:09:5a:14:e3:bd:76:26:09:41:3b:
ed:09:76:82:7d:a3:b2:4e:b2:41:d3:89:c6:bf:87:
25:53:d4:d1:97:e4:09:24:95:75:35:96:8e:89:9a:
31:4c:bc:8d:34:71:90:2a:0d:d6:a8:56:a1:c1:e3:
21:ef:90:45:27:be:d1:c9:71:2f:04:bf:a5:dd:f8:
39:11:28:ed:4e:ac:c4:5b:fb:b2:9b:71:ec:8e:bd:
12:7c:bb:c1:f4:21:c4:5f:67:f1:a7:56:7e:7d:76:
cd:d0:ab:e1:95:04:9b:83:75:aa:30:cf:41:45:be:
cd:f6:99:34:12:ba:9e:fe:db:f5:5f:8b:6b:cb:0d:
89:6d:d0:2e:3e:59:72:07:51:02:3a:33:c5:9c:2c:
6e:aa:2d:bc:28:43:af:f3:60:fa:b3:0e:a5:98:60:
88:ec:3a:30:a8:97:2b:e0:3b:d5:ec:7e:d1:f8:95:
17:77:7e:cb:e1:11:ce:c2:f3:dc:f9:5d:60:3a:e2:
e0:8e:b6:1c:de:b1:eb:c9:7f:a7:1a:2a:df:46:e2:
a7:71:c3:ff:5f:4f:f1:d0:17:45:d5:40:21:0c:54:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:62:10:AD:1A:9D:12:85:94:4F:F5:5D:83:01:2A:8A:D7:61:1B
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6c:2b:5f:f1:85:87:4d:09:ac:33:5c:78:03:37:85:0b:1c:
b6:1a:fd:4b:33:26:08:a1:b3:d5:43:f4:09:dc:38:50:a7:91:
62:52:5d:89:3b:35:e1:9c:c5:dc:66:ad:f1:e5:9a:9d:49:d5:
fa:a8:95:f6:3b:6b:00:6e:15:bd:25:07:4b:33:13:99:9c:c3:
b3:ee:12:57:6f:ee:70:e2:a5:cc:c5:dc:ca:d8:f3:61:f1:2e:
52:9d:ef:16:11:90:d1:19:55:f7:b1:15:64:b1:7b:16:a2:ef:
c9:c6:3d:17:ce:30:5c:af:62:5e:5d:d0:a4:15:79:87:61:45:
22:3b:3b:2a:5b:5d:a5:85:8f:6b:c1:6e:2c:16:0c:47:02:06:
c2:7f:09:5f:15:35:e8:d8:6b:1f:49:e3:c6:9e:8c:68:0d:21:
65:61:6a:c2:c8:bc:79:72:4b:c6:5b:60:e9:b6:e5:f2:aa:1b:
1b:0c:44:e0:75:02:8f:ac:72:3a:76:d5:71:9f:be:91:a3:f8:
4d:89:08:2e:5d:5d:73:c8:1b:4f:5f:c8:ed:73:49:fd:87:d2:
c6:0c:1a:3c:0f:22:19:61:8c:45:f4:66:2e:6c:a3:41:a0:36:
1c:b0:28:48:b6:04:3f:de:41:42:b7:d2:61:31:b2:0f:43:43:
81:76:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:13 2025 by rpki-client