Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: ZjAW142S9TCpeC/bBGgf0l3HIblgbQNFEdJMtFn4BdM=
Subject key identifier: 67:F6:8D:0C:9D:4E:A1:B1:C0:09:56:AF:E2:D6:4C:37:BE:AF:96:26
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 019681D950CC8087A2C71239E56CD139B388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0DFD
Signing time: Tue 29 Apr 2025 14:00:24 +0000
Manifest this update: Tue 29 Apr 2025 14:00:24 +0000
Manifest next update: Wed 30 Apr 2025 14:00:24 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: hNXHxab1mE9xIUJfrXTEQ3L9zxNNRjfv6T6qe8o1GNM=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:50:cc:80:87:a2:c7:12:39:e5:6c:d1:39:b3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Apr 29 14:00:24 2025 GMT
Not After : Apr 30 14:00:24 2025 GMT
Subject: CN=67f68d0c9d4ea1b1c00956afe2d64c37beaf9626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:01:70:ea:15:2d:16:8f:7c:01:3e:55:34:
f4:ee:c5:c6:61:93:3d:b8:27:24:76:1f:01:5a:97:
d7:2c:cf:44:c1:2f:f4:2c:4c:a2:68:33:70:2e:42:
f1:da:39:25:19:6d:54:9f:93:ed:7c:31:59:74:93:
b2:ab:85:78:f6:db:7f:b0:e4:98:91:76:5e:15:38:
f6:a7:d8:ed:2a:b7:e0:74:d7:d5:4d:7c:de:9b:d8:
82:88:53:75:36:9d:3b:88:07:4e:16:b7:e4:0c:5c:
df:8a:9d:1f:46:44:0f:92:07:ef:58:f4:33:57:ab:
1f:e4:2d:2a:9e:cd:17:50:cb:7c:26:52:64:d6:01:
85:54:6c:19:f0:fc:f7:45:7a:8a:0c:94:12:a4:4e:
4e:ef:09:96:74:e6:03:e7:c1:41:d1:12:10:fe:24:
d3:98:f6:93:0f:09:ab:dc:c9:90:a4:8c:ea:51:52:
82:9d:ca:23:9e:6a:6b:88:6a:b3:eb:d5:3c:5d:6c:
db:3f:bd:9f:2f:bb:5b:b6:ba:fb:8e:68:ce:71:60:
21:a3:2e:c3:b2:11:a0:ce:9b:5b:9f:ab:e5:a5:d3:
f8:ba:db:3d:34:9d:bf:ce:b8:65:da:ac:f8:c6:a8:
01:2d:88:8e:dd:69:bc:68:5a:21:7d:ec:38:04:53:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F6:8D:0C:9D:4E:A1:B1:C0:09:56:AF:E2:D6:4C:37:BE:AF:96:26
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b9:b6:ed:ac:27:f2:6b:ef:5f:65:b6:a2:71:43:81:4f:0f:
d7:d2:97:9c:35:db:54:00:e4:31:16:14:51:1d:bf:8e:83:19:
30:c9:88:fb:fa:20:91:f3:64:51:c9:4e:8b:c9:99:b0:82:9f:
10:d5:e9:06:7f:99:14:97:f0:74:51:6b:64:26:5c:93:f5:5f:
18:c4:6d:a7:b6:30:f7:73:64:8e:ae:82:4b:87:41:bf:80:f0:
85:0c:9e:80:b5:01:52:71:62:44:d3:42:7f:59:63:88:c0:9f:
30:53:87:e7:42:b6:72:95:8f:80:74:b8:28:99:57:db:65:9a:
70:9d:63:50:d1:de:c4:a4:4a:d4:f2:20:46:85:35:bd:7c:9f:
e8:7b:65:08:8c:be:b8:8f:ae:88:53:e6:f2:39:21:2d:76:d3:
bc:12:9b:75:ba:0d:f9:30:61:e3:b2:e7:af:55:4e:51:b1:ef:
69:11:f4:cf:10:6f:8d:8a:bb:cc:13:28:34:3b:05:3b:23:a4:
50:1c:78:f0:a6:d8:56:43:d9:b6:45:a1:9f:00:6b:36:9a:35:
6b:c3:26:d6:53:00:e7:81:8c:7f:fb:8a:73:b1:94:55:70:4e:
9b:12:61:a6:b5:5e:bd:20:53:63:7d:49:bb:57:cf:38:86:30:
4b:78:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:36:36 2025 by rpki-client