Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: m9gDtlxvhFqxRj6lr9nJAivrdUO2x0S7sK0XSs2rWEs=
Subject key identifier: 9F:94:96:79:D7:88:E8:AE:F0:8A:77:9E:52:8F:6A:AF:A5:B4:8E:65
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019681348B77CA28010A7EBD45E6BADE873B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0466
Signing time: Tue 29 Apr 2025 11:00:26 +0000
Manifest this update: Tue 29 Apr 2025 11:00:26 +0000
Manifest next update: Wed 30 Apr 2025 11:00:26 +0000
Files and hashes: 1: WR90m5DgvTuhngQTVt_A_5zUod0.roa (hash: FY/boCiP1n6kQ8OnKj08oNsixb1HE3QlDcsMak5j0Lc=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: 6446QTxCmJHmfKh1vX0tt+AKDmUagl5VDj5eegp86bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:8b:77:ca:28:01:0a:7e:bd:45:e6:ba:de:87:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Apr 29 11:00:26 2025 GMT
Not After : Apr 30 11:00:26 2025 GMT
Subject: CN=9f949679d788e8aef08a779e528f6aafa5b48e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:c8:05:6d:33:44:b4:dd:17:b3:3b:80:2f:
57:06:0c:6c:62:ef:7f:fc:76:26:82:94:c6:c5:9c:
17:06:33:1d:e1:ce:e9:eb:9a:bf:b2:87:a9:6a:75:
4d:5a:da:f8:35:e5:31:e6:b2:45:ce:76:ff:2d:b3:
39:0c:44:eb:a9:e9:bc:0b:3f:06:8f:f4:e0:8f:dc:
a6:ce:39:23:ab:a4:a3:38:14:fe:c4:f7:35:ce:ee:
5e:46:3d:60:2c:8b:ac:5d:40:f7:6a:72:ea:0e:a5:
29:5c:d2:c4:39:6d:56:52:b9:a4:31:4f:ab:de:69:
8e:97:f0:7c:3f:1f:d2:9d:f2:01:52:69:3d:de:d1:
8f:7a:a3:13:08:a4:b7:f5:27:9d:b3:ea:3e:3f:15:
08:5e:b7:30:0b:ce:00:1b:00:99:60:73:16:dd:07:
88:d9:9b:1e:45:f0:d4:32:8e:e1:43:2b:37:a8:51:
b7:05:9c:76:c7:87:f5:68:87:1e:2e:fc:27:a0:a3:
7a:9d:10:b1:68:bb:87:e7:57:92:db:0f:12:88:5a:
91:45:96:41:2e:7a:f0:37:0f:34:b7:85:be:ec:a0:
cf:89:c6:61:63:6c:3d:f8:3b:d6:e3:23:9c:7a:e8:
80:af:85:81:34:59:2b:1f:06:06:6d:55:56:78:01:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:96:79:D7:88:E8:AE:F0:8A:77:9E:52:8F:6A:AF:A5:B4:8E:65
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7d:ed:41:63:a4:62:22:82:ab:65:92:7d:a9:bd:fc:f6:c5:
76:8a:a9:49:37:31:18:96:c8:c4:8e:83:00:f8:c7:78:f4:2a:
f2:a1:21:53:3c:90:65:0c:c9:62:50:7c:80:e2:40:6f:e7:47:
07:c8:4e:95:8e:29:bb:13:83:e2:b8:b7:4c:87:52:43:7b:fe:
90:19:52:2f:f3:24:47:73:8b:57:bb:3c:a2:f1:46:8e:76:fc:
43:2e:ce:db:4e:ad:27:55:13:d6:37:af:02:eb:bf:81:44:43:
94:b2:a9:6b:df:77:68:65:d9:3d:61:df:e5:ca:f1:6b:99:ac:
ff:ba:52:c5:e6:5f:c7:90:2f:5e:02:5d:43:bd:83:12:14:a2:
16:07:17:39:b7:2a:41:49:a7:ef:e4:42:d7:48:14:2f:d2:26:
79:53:86:28:ab:7a:05:38:10:f8:54:f7:06:63:b0:7a:d8:68:
ad:04:0c:b0:93:e2:4a:41:d8:e6:ef:e4:75:95:83:97:ca:8c:
f8:76:3e:a5:e0:4a:e5:4a:a7:a0:25:14:bb:ae:cc:e0:99:f9:
82:d5:07:26:fe:a1:3e:21:f8:e5:67:90:a2:63:2b:94:02:7d:
2f:8a:62:51:44:8a:5d:48:a9:7c:d3:6d:bc:ce:ea:fa:52:a3:
86:d1:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:57:59 2025 by rpki-client