Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: kcgcQzHjs5WCBT+S4apZGcVVofMFtQU9n6yJYyHS05g=
Subject key identifier: D9:D3:30:B0:B7:AA:EC:B4:43:78:A1:B1:B0:B6:46:08:88:C2:3A:3D
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 01967E34256F399BF76B40EF2D3339E6119C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 21:01:08 +0000
Manifest this update: Mon 28 Apr 2025 21:01:08 +0000
Manifest next update: Tue 29 Apr 2025 21:01:08 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: 87UBsQCWpztr3RVFY1rPPnYwUJJrobZN7YTXmrrFfAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:25:6f:39:9b:f7:6b:40:ef:2d:33:39:e6:11:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Apr 28 21:01:08 2025 GMT
Not After : Apr 29 21:01:08 2025 GMT
Subject: CN=d9d330b0b7aaecb44378a1b1b0b6460888c23a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:69:d9:8c:39:04:c7:fb:a9:96:2f:c4:61:
8a:dc:8c:4f:68:7e:73:fa:93:4b:f3:c4:31:ce:e0:
f4:46:13:6e:23:71:04:ff:49:06:8b:3c:6e:a2:5f:
58:e9:11:5b:a8:68:b0:59:ed:35:71:aa:ee:b8:b4:
5b:22:e0:9f:31:48:d1:9c:6a:f4:35:da:82:cd:64:
93:41:8a:f7:29:71:94:8d:67:d2:72:1a:6c:12:13:
5c:0d:4e:7b:e7:27:1c:5e:08:ff:a2:16:40:a1:e5:
a1:61:91:97:c8:86:0d:b7:ba:81:3d:ed:ad:03:3f:
77:f4:0e:1d:a9:24:94:6e:9b:f0:51:df:98:98:f4:
71:29:88:89:2f:d8:d3:3d:cc:3e:7d:87:87:a6:25:
ba:58:02:9c:1f:9a:f6:27:de:3b:f4:e1:d1:7d:3e:
b0:ca:34:f9:df:7d:33:11:e2:f4:07:0e:5d:cd:31:
b3:a8:f7:4c:a4:7e:89:73:72:05:be:07:de:2f:a9:
75:62:3f:20:e9:1f:bd:4e:4c:0a:f7:11:7f:43:80:
e1:f1:81:9d:e7:a7:d4:13:5e:5e:16:4a:fb:1a:9f:
96:20:d1:b5:e6:53:ca:92:1a:d2:38:3e:c0:32:0d:
33:c6:6f:b0:af:71:ce:7c:89:91:8d:8a:b2:96:3f:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:30:B0:B7:AA:EC:B4:43:78:A1:B1:B0:B6:46:08:88:C2:3A:3D
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1e:1a:35:10:71:74:58:b1:32:67:9d:b4:91:7f:39:c2:64:
8b:f2:ff:5f:67:c3:ea:35:83:5a:ac:49:1a:6c:62:84:19:03:
93:da:5f:f9:2f:f9:f1:38:f6:57:17:bf:bb:bf:ea:9c:e6:18:
55:17:59:b3:4b:aa:c2:44:03:11:84:7b:c8:72:82:44:68:0f:
19:70:46:9b:5c:35:5f:e1:70:80:bc:3c:d8:31:9b:cb:22:8f:
4c:3f:e0:ff:2d:00:76:3f:b1:64:cb:d9:57:10:ec:ad:29:99:
79:d7:05:42:17:f1:42:dd:31:28:77:61:22:6c:c6:a3:d6:99:
23:00:9a:56:2e:b4:72:18:e0:ae:39:2c:74:52:ec:01:eb:58:
3a:d2:c0:f0:0d:0f:59:51:10:48:05:c8:27:3a:b3:3e:7d:d2:
0e:44:9f:4e:78:fd:87:fc:49:1c:42:63:18:08:6b:f0:d9:55:
11:9b:2d:74:00:f2:ce:b3:1e:e4:d1:01:fd:71:44:78:52:6e:
7f:c6:67:c3:8d:4b:67:db:58:8a:cc:6a:09:85:a5:e0:78:0d:
ed:a7:14:0b:9b:71:61:38:f1:cf:ab:48:fb:8e:80:75:4c:74:
74:19:5a:93:53:56:58:e0:3f:7c:b0:a8:45:3c:40:f9:11:b6:
5d:01:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:58:15 2025 by rpki-client