Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: mTR4Y/ZjchLrPpzwEgTulF7PeUZUv+XqZ6JANVoNCa8=
Subject key identifier: 6B:9D:7B:6D:A1:C5:95:4C:2A:29:08:AE:15:DE:80:25:49:96:47:92
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 0196797B3205DEAF4353CABF5745398724BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 0247
Signing time: Sun 27 Apr 2025 23:00:38 +0000
Manifest this update: Sun 27 Apr 2025 23:00:38 +0000
Manifest next update: Mon 28 Apr 2025 23:00:38 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: WMf6k/gnL39/0sGmTDSKJyY0IDdnVbttII5YPAl+lzM=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:32:05:de:af:43:53:ca:bf:57:45:39:87:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Apr 27 23:00:38 2025 GMT
Not After : Apr 28 23:00:38 2025 GMT
Subject: CN=6b9d7b6da1c5954c2a2908ae15de802549964792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:9b:10:ba:40:3f:f8:01:2b:4c:71:2a:f7:
47:b8:1d:25:66:e8:6f:13:23:cc:82:52:c9:cd:8b:
fc:89:d1:7b:e1:0d:8a:01:f1:bb:60:77:1b:64:e3:
2d:bf:91:37:69:84:39:d7:05:77:1a:63:c4:d8:3d:
0c:02:14:e1:5e:aa:74:bd:8a:c6:86:93:c4:71:bf:
89:f3:87:5b:c2:5e:98:42:d1:1b:7f:3d:48:e1:a2:
93:bd:ac:91:c7:4a:2f:88:dd:06:03:22:ad:21:6e:
f6:36:60:5d:71:5b:70:27:d0:be:fe:6d:13:cd:4d:
9d:1f:e9:6a:87:d3:d5:5e:f9:53:84:c8:8e:9a:09:
06:e3:b4:5c:0b:88:4d:bb:02:51:e1:22:c0:0b:c8:
30:8a:de:4a:86:ef:a1:9f:83:76:af:84:bf:20:87:
b6:a0:49:7f:c8:d3:0e:3f:99:69:07:86:d3:4d:50:
c9:a0:1d:99:91:b8:78:a1:a5:c0:b8:63:24:57:90:
63:1b:98:13:60:31:3f:7b:a7:19:23:6c:13:5b:82:
60:3e:72:ab:53:1e:8b:d1:fa:9e:49:d9:a8:6b:82:
5d:cb:cd:de:ab:83:dd:68:81:64:3e:92:84:d3:53:
70:b3:2e:73:28:0c:b7:fb:aa:a4:12:ad:25:6c:bf:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:7B:6D:A1:C5:95:4C:2A:29:08:AE:15:DE:80:25:49:96:47:92
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fc:b7:18:ec:33:ea:2d:68:51:ca:13:fb:b9:7a:5f:4d:1e:
a5:5b:e6:da:4b:84:15:37:93:2d:a7:49:37:49:9b:91:99:a6:
29:9a:51:11:1c:a7:25:d4:e2:09:5a:37:7a:5f:3a:ce:f6:0e:
ef:1d:8a:0d:d3:68:93:59:3d:c2:16:9a:9b:8d:56:a8:e4:eb:
46:04:e4:54:42:eb:cf:e7:a1:33:32:eb:17:cf:40:84:ff:5a:
d2:22:ee:fe:20:d8:ef:ca:2e:7e:51:4f:71:e6:d4:12:65:eb:
76:d8:4c:19:bb:40:04:34:06:e3:73:45:96:47:40:b1:f5:09:
d7:87:ac:b1:64:b1:18:75:d5:f2:72:e4:53:cf:5e:68:11:c9:
7e:59:9c:79:a2:65:f8:55:2b:95:0d:54:01:50:43:7a:71:59:
83:ba:c4:30:53:11:24:52:19:61:f8:d2:8a:9d:7a:e3:db:c8:
f1:fe:d5:68:18:7b:15:a0:1e:7b:e9:9a:e0:5e:9b:b1:da:15:
6e:09:46:ad:be:82:a8:33:e5:1d:72:12:25:4f:8b:f5:ab:48:
9f:fa:f0:08:a7:c3:e6:d1:bb:a7:38:84:9d:d9:e2:af:34:fb:
00:4c:88:bd:94:6d:5d:36:dd:7f:8b:e8:d4:77:5e:b0:d3:ec:
55:fe:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:41:39 2025 by rpki-client