Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: WHZR+ulgQFDLo9CgIU2Fjd5RGZ3W6elm9wpVNidZwkY=
Subject key identifier: 69:78:52:48:A5:C1:DE:28:65:75:B7:80:D6:74:9C:72:A0:78:40:5C
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 01967454E9FFB1D23B713A50CFADEFFFA87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 23:00:44 +0000
Manifest this update: Sat 26 Apr 2025 23:00:44 +0000
Manifest next update: Sun 27 Apr 2025 23:00:44 +0000
Files and hashes: 1: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: 8z/wIsitBaQ2yxBBJWSLyvMTXuuBGifF9Bd2EgBDLDU=)
2: eKGme1_RE2Cve029wfoTPnjkx8E.roa (hash: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:e9:ff:b1:d2:3b:71:3a:50:cf:ad:ef:ff:a8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Apr 26 23:00:44 2025 GMT
Not After : Apr 27 23:00:44 2025 GMT
Subject: CN=69785248a5c1de286575b780d6749c72a078405c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:2c:1b:cb:21:22:49:f8:02:dc:fd:d8:df:
14:98:04:26:b0:9f:a0:59:56:88:4d:ce:cb:23:d9:
b2:9f:2d:8d:0d:ef:fe:fd:91:b0:a4:3f:41:d3:7d:
07:9f:ae:2c:b6:ff:81:9c:57:f6:b4:04:cf:96:1d:
32:97:fe:8b:9f:69:79:c3:12:01:2b:45:b7:0b:48:
65:6b:02:f3:08:61:81:f8:94:a7:a4:fb:41:85:14:
3b:b9:ae:9f:d1:60:db:3f:22:b8:24:f6:1e:4a:c7:
cf:1e:2f:e3:8d:7a:09:14:11:5c:b0:66:a4:bd:72:
30:dd:34:5e:52:25:93:07:f6:40:3c:cd:16:e4:e0:
a0:43:5d:74:ad:06:d1:09:ff:1e:2f:44:9b:d4:04:
f6:74:67:71:7c:06:0c:fd:5b:eb:2b:9a:88:c4:ff:
84:13:01:74:89:3f:6b:61:92:65:52:eb:49:3b:68:
d9:08:23:56:4c:31:84:ef:60:b6:f7:39:1d:f9:e2:
b7:9d:d7:5c:33:d9:aa:8d:20:c8:08:27:f3:43:1e:
99:3c:33:65:48:1d:ef:e3:80:87:0d:5d:72:c8:15:
45:4d:20:a4:58:87:b9:33:9a:e4:3d:f2:40:93:30:
74:f1:86:d2:96:9d:a3:f6:eb:a5:43:80:3b:4a:3f:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:52:48:A5:C1:DE:28:65:75:B7:80:D6:74:9C:72:A0:78:40:5C
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d6:33:04:2b:71:b3:a8:9e:ea:d2:9a:71:6a:11:f7:56:4d:
f3:a6:3c:b3:db:ea:d8:a1:fd:70:0f:52:22:da:41:81:97:f0:
2a:b8:6e:7f:c2:cf:c1:4d:b1:38:2f:61:f0:5c:4e:64:5d:e0:
b1:5e:96:8e:3f:95:fc:da:e2:3b:e6:03:f2:83:de:6d:3a:f4:
47:5e:5e:bb:2d:0d:81:a6:1a:68:d6:a2:9a:b1:71:1f:26:cf:
94:56:50:5c:30:78:b0:ee:61:c0:e0:09:28:5d:8d:c1:f6:55:
14:19:96:77:64:92:8c:c4:b1:78:1a:32:69:0e:cf:df:89:5e:
7a:27:ba:bd:88:09:27:a6:f3:17:7c:46:b5:57:d9:52:6e:65:
07:ac:75:68:36:83:e4:9b:11:1b:f5:93:20:63:cb:d2:91:6a:
fc:b7:50:5b:6b:87:3b:18:e8:7a:e0:bc:9c:0e:6a:01:0a:e2:
bb:71:5f:2a:a3:f5:73:12:24:96:4b:0e:ef:2e:58:fa:9f:fb:
83:46:01:6f:44:61:c6:6a:85:69:51:b6:6f:70:59:a8:d3:05:
f7:38:eb:d1:2d:a9:a3:c7:3f:cb:ea:f8:70:6a:e3:43:e3:29:
5d:d9:79:a6:ee:af:db:3b:16:53:5d:fa:5f:f5:16:84:92:b6:
dd:52:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:32 2025 by rpki-client