Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: dtzWxuJ2vTCPDyQ9KX6fmq6dqcNByhlTBfsdJ5uMtFQ=
Subject key identifier: ED:18:9F:25:76:EA:1C:A3:20:13:06:C3:C9:DD:2F:CB:51:52:AC:FC
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 01967FB44B8D892E60CFDF1FD664993B16F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 04:00:44 +0000
Manifest this update: Tue 29 Apr 2025 04:00:44 +0000
Manifest next update: Wed 30 Apr 2025 04:00:44 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: VH75Pwz3DL0QJU461op7rFAHym7Z86/WRW7CY84NMMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:4b:8d:89:2e:60:cf:df:1f:d6:64:99:3b:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Apr 29 04:00:44 2025 GMT
Not After : Apr 30 04:00:44 2025 GMT
Subject: CN=ed189f2576ea1ca3201306c3c9dd2fcb5152acfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:c7:58:12:8a:19:ac:bd:51:82:36:a3:9d:
c3:4b:23:52:2c:95:cc:74:d6:76:10:b4:b1:7c:ab:
43:b7:56:75:8a:84:73:c0:e8:f0:cb:87:59:fe:08:
94:21:df:28:7b:8e:aa:f7:96:5c:6f:7d:30:13:fe:
ac:4d:b5:c3:0d:23:8e:d4:09:f7:09:52:bd:d2:fb:
c6:ae:19:70:bd:23:d1:4c:9b:ef:5c:e3:43:1d:c8:
84:c1:da:a8:90:31:92:f8:57:1c:94:0c:7d:b9:fd:
99:70:fc:56:56:5c:36:93:99:3b:92:60:0b:e9:58:
44:86:a9:4c:2b:55:43:dc:ce:98:0b:6a:81:a3:61:
a8:29:bf:07:0c:18:bd:ef:83:3c:12:60:98:bd:77:
16:28:ea:b3:bf:c0:47:7a:19:17:2d:bd:c4:93:8d:
a4:3f:b7:c5:50:17:0c:74:67:0c:3f:5c:f3:90:a1:
cd:7f:f1:51:81:e2:6d:a5:fc:33:e6:46:c9:2a:01:
17:45:03:95:64:bc:aa:f8:5d:3d:d1:42:38:31:01:
20:39:a9:d4:6d:92:e3:e3:fe:8e:8f:ce:6b:6d:81:
db:e3:57:be:1f:b8:ac:b8:29:8f:33:81:2a:cd:2a:
0e:57:ff:99:30:01:0c:48:08:2f:de:92:84:7e:21:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:9F:25:76:EA:1C:A3:20:13:06:C3:C9:DD:2F:CB:51:52:AC:FC
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ea:f1:30:73:a0:f6:54:99:71:f8:79:48:7b:57:03:b0:74:
34:c3:79:2a:b2:ab:ee:ce:ac:f8:58:48:35:b9:00:ec:4b:c5:
87:f1:0e:43:5a:32:d8:fb:28:cf:54:7d:9d:39:37:ed:1b:37:
d6:60:e4:71:9b:96:d9:85:ea:8b:48:9e:63:5d:ca:ec:7f:0a:
7d:ed:99:bc:dd:8e:54:47:6a:cd:86:1f:13:d4:50:e5:78:62:
3e:51:ee:da:c8:1a:1b:a5:7d:14:ea:0d:34:41:b8:b4:19:1c:
72:bd:39:bd:f9:2e:12:24:eb:0f:b2:99:60:1b:23:9a:5a:da:
e7:55:cf:9b:a0:f1:63:33:dc:43:db:ab:0c:85:28:bc:c9:12:
d2:f0:d1:27:3f:dc:46:73:2f:63:79:30:6b:af:08:f5:95:ef:
74:d6:65:7f:66:ee:ac:a5:77:cb:c4:68:12:d8:74:78:e8:d4:
d5:3c:a6:13:7a:17:a8:00:b8:f9:60:7c:62:21:ab:aa:86:bb:
8c:e3:2c:39:46:e8:e9:4b:3d:4c:ed:d4:b9:eb:97:ed:8e:cf:
3a:5d:95:13:d8:f6:c8:b9:bc:c9:19:ee:71:44:f4:a9:8c:51:
d9:03:67:c1:31:ba:fd:84:d9:a5:d6:f3:d9:6e:ee:22:0b:15:
bc:72:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:54:09 2025 by rpki-client