Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: sesfjRh1eoM3KfukrFxcL0wPpeknhXuDndt8ufJVwik=
Subject key identifier: BA:E2:DA:26:3E:09:20:87:E8:67:04:08:1D:06:E3:D6:92:3E:F1:0B
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 01967F7D765213F4B1E5F4CA41C93030B83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 03:00:50 +0000
Manifest this update: Tue 29 Apr 2025 03:00:50 +0000
Manifest next update: Wed 30 Apr 2025 03:00:50 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: A2BDKXFwJiG8pvt1t4S2ZNLen9XKhnz+htunFHWgbRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:76:52:13:f4:b1:e5:f4:ca:41:c9:30:30:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Apr 29 03:00:50 2025 GMT
Not After : Apr 30 03:00:50 2025 GMT
Subject: CN=bae2da263e092087e86704081d06e3d6923ef10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:be:6a:72:90:b8:9d:2d:a3:d6:4a:85:4f:
00:22:a1:52:a7:2a:22:14:ed:9f:d6:b0:8b:cd:80:
bc:33:9a:fe:bf:4d:0d:9c:35:59:e2:97:33:e3:0f:
45:58:3d:ea:0a:1e:86:d8:c3:37:59:f8:8e:ce:43:
9c:7d:24:8c:c5:db:43:05:6d:e4:24:17:6d:e7:22:
08:5b:96:97:99:c1:31:53:93:3d:97:35:44:b0:ff:
4b:a2:1e:03:97:6d:b5:47:b7:ba:5e:1c:52:19:37:
4f:06:42:47:74:a4:e1:45:a1:9a:fd:60:b8:39:25:
b4:b7:bc:7f:60:c1:b7:7d:d6:08:b1:67:23:95:6b:
b0:fc:4f:cb:0d:f8:ec:01:d1:d6:4a:7a:c9:86:e1:
38:3c:e2:e0:90:8c:3c:ba:18:4b:56:e1:55:6e:1f:
14:52:b6:de:e2:e6:68:4d:63:76:dc:84:ea:ce:60:
d9:25:e4:42:4c:71:13:1d:1b:59:dd:2e:e9:84:3a:
ef:87:d3:da:6f:37:9a:66:d5:e7:1f:8b:ae:e8:a7:
95:17:77:98:76:07:fe:fa:61:e3:5d:01:d7:16:31:
f3:a0:7b:e5:b3:ff:c3:00:27:2f:05:c4:7f:7f:45:
ba:14:38:79:a2:a4:36:ab:6f:44:93:b4:91:22:ec:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E2:DA:26:3E:09:20:87:E8:67:04:08:1D:06:E3:D6:92:3E:F1:0B
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:e3:ab:1a:bb:e8:48:87:55:c0:10:f3:37:c0:0a:97:3e:
9f:0f:8e:5b:15:e2:14:82:57:9b:e0:33:0f:77:d9:95:48:37:
d0:84:f4:85:d2:ab:4c:22:f1:cf:ac:31:07:c0:12:04:07:fa:
36:84:37:37:cd:19:28:a5:61:44:f7:4b:03:40:15:f7:6b:ea:
7c:64:b5:b9:d9:cd:11:a4:34:3b:13:db:8b:e5:a4:d5:75:f1:
f9:c3:f2:f9:6f:b6:75:b2:14:ab:8f:cc:a2:3d:54:c8:a5:1a:
1e:3f:2a:4b:b7:b1:f4:fc:09:e8:fe:c2:17:f3:6e:ad:1d:db:
31:f0:51:70:e1:9b:85:79:07:a3:f2:f4:7f:13:6a:df:fc:bc:
76:89:10:f1:f3:69:f6:63:54:f6:a8:f9:83:3c:36:a9:a6:3f:
99:90:65:af:9e:f2:36:bb:7d:f1:f0:f5:dd:d3:17:e2:3f:bc:
ed:91:19:37:08:7c:e8:1c:31:14:47:8d:36:cf:2d:ca:df:78:
91:d0:d0:f7:63:64:f8:78:c0:3c:e2:24:bc:26:3d:92:77:67:
d8:86:4c:95:43:ba:e6:a6:4b:a6:dc:b1:d6:dc:25:0c:76:b0:
88:d8:2b:05:83:78:aa:90:d0:99:97:92:c7:09:93:51:d2:d0:
13:4b:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:36 2025 by rpki-client