Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: qrrDJ48JSj/5VyukfZkAcISas3CPdouodbgScgLeLGQ=
Subject key identifier: 9E:19:21:87:6D:9F:48:AC:98:7A:8E:16:3D:20:7F:40:DD:FB:73:B1
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019689CA5C11E86071331FAC8EBD81DE6E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 03:01:02 +0000
Manifest this update: Thu 01 May 2025 03:01:02 +0000
Manifest next update: Fri 02 May 2025 03:01:02 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: Ye012JDytBRRhSSAM9fQ6/AO3+GqFKXDrZ66XjUGovk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:5c:11:e8:60:71:33:1f:ac:8e:bd:81:de:6e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: May 1 03:01:02 2025 GMT
Not After : May 2 03:01:02 2025 GMT
Subject: CN=9e1921876d9f48ac987a8e163d207f40ddfb73b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:41:83:22:ac:d4:e3:c8:bf:c8:c5:ea:6e:
6a:79:25:55:f0:3f:ff:e0:72:b0:e4:fc:8b:32:2e:
62:73:9e:c3:ed:94:bb:6d:16:87:e4:22:89:e6:3c:
17:fe:98:50:5a:f9:83:22:78:d2:5b:65:cb:4c:aa:
bf:7c:e3:b0:66:ee:3f:0d:7b:fc:27:ca:4f:b1:69:
26:a4:7d:e7:21:30:32:54:ec:5f:23:e0:a0:b8:e7:
f8:d9:a0:a4:e1:fb:9e:e8:6c:ce:5a:99:d1:c1:36:
98:1c:f1:a5:c0:ef:bd:bc:26:e5:47:f7:b5:2a:0c:
8d:45:41:f1:e6:60:fd:7a:c9:bd:8f:64:d2:79:a1:
e0:fb:f9:00:aa:29:ab:71:15:97:f4:9f:7d:75:10:
d7:68:cd:83:61:5a:be:7a:27:1b:2d:00:0d:a2:47:
9b:ca:9f:15:c7:f1:7c:a5:5e:7d:fe:b0:53:70:59:
d8:4f:44:35:a6:6f:86:0f:fa:64:cd:bc:96:98:52:
6b:68:46:1e:56:7d:d4:62:68:26:d0:6a:4a:1c:7e:
86:64:ff:4b:0b:7d:93:71:c8:4a:9b:30:d1:db:ff:
8d:ef:f1:9a:8e:24:dd:c1:92:ad:cf:53:2b:8a:3b:
00:51:dd:77:91:1b:e7:56:af:43:d2:05:b0:55:4f:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:19:21:87:6D:9F:48:AC:98:7A:8E:16:3D:20:7F:40:DD:FB:73:B1
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:45:cb:0c:7f:bd:ba:d5:e8:c4:87:a8:c2:a0:e7:cb:6e:08:
65:4e:2d:4f:8d:a0:28:e0:5d:eb:53:cd:67:4b:3c:e9:f2:eb:
b2:43:7e:8f:ea:c6:e0:06:e7:f9:d3:31:2b:92:5b:60:4a:e0:
98:24:30:9b:99:6c:f8:07:d0:a1:73:4f:b9:90:ca:b2:46:02:
62:c4:a6:66:51:f6:03:40:16:74:3a:9e:8c:1f:58:d8:a5:66:
af:f8:4b:69:62:bd:14:d2:6b:e9:da:51:12:12:d6:49:d4:39:
4c:ef:ea:f5:16:f8:2f:13:8c:8e:5b:42:9e:e2:62:02:d6:68:
5a:a9:86:5b:97:e2:9b:4f:de:32:be:12:14:75:3b:b9:1a:1f:
fb:bd:d2:b6:47:f7:64:4f:7d:01:d0:1e:4d:d9:d3:4a:35:2d:
1c:76:82:f8:87:23:f7:6e:3d:5d:32:d5:88:f8:d0:15:84:38:
78:15:aa:df:d5:49:2c:74:86:7c:a1:7c:49:16:a8:f1:e4:d9:
4c:f9:e6:b6:3e:98:bb:1f:3b:20:00:54:7f:23:73:6a:97:65:
fb:e3:9f:7d:d4:9b:72:99:30:cf:0e:ea:3a:33:11:10:80:c7:
96:17:28:13:5d:69:28:16:ae:d0:b2:67:6d:4c:78:48:43:40:
45:de:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:10:17 2025 by rpki-client