Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: I010OA6YUM6jnxQFVB2tBhHiRhLWxpUPHczfNZwPcMQ=
Subject key identifier: 9A:90:45:F8:1D:07:31:19:2D:F9:DF:6E:09:5A:43:CF:3E:2C:30:49
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 01967ED87570CB980BE6E2D8182826784196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 00:00:37 +0000
Manifest this update: Tue 29 Apr 2025 00:00:37 +0000
Manifest next update: Wed 30 Apr 2025 00:00:37 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: OrRpVbm01MqzIxSwpT/vEwtMwcv1HG3jS3cbU9nIMsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:75:70:cb:98:0b:e6:e2:d8:18:28:26:78:41:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Apr 29 00:00:37 2025 GMT
Not After : Apr 30 00:00:37 2025 GMT
Subject: CN=9a9045f81d0731192df9df6e095a43cf3e2c3049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:38:29:64:57:38:6c:27:b5:89:87:2b:55:
a6:46:a5:40:1a:d2:a3:37:ce:cc:3c:5c:81:f1:f2:
61:6f:a7:30:e5:8a:4f:45:66:ba:1e:1e:14:eb:5b:
82:ba:6a:5a:09:04:68:d2:45:3f:d8:6b:fc:22:10:
93:e2:d2:ff:9d:91:79:af:39:ec:6b:a8:16:2d:15:
56:a6:81:f0:ef:eb:ed:dd:ca:be:e0:79:2d:c3:d1:
1f:97:cc:ac:04:64:15:37:bc:9b:2e:72:ab:19:a9:
d1:01:93:df:7a:2d:bc:70:e6:f8:de:4e:c5:ab:e2:
74:fd:a2:e6:e4:f2:c1:5a:e1:96:2c:57:b9:83:86:
53:dc:f6:1e:af:60:a3:86:4c:2e:c4:d0:7d:71:cb:
5b:be:0a:a1:c2:82:48:44:34:64:0e:5c:e1:50:77:
ba:9d:86:96:a3:c2:55:3c:ba:18:11:bb:6f:35:c2:
c5:40:f4:a1:a3:45:68:51:ba:bc:3f:a8:22:34:e2:
b6:6b:a1:fb:a7:46:03:da:93:6f:4d:21:7f:96:ce:
f1:02:06:84:61:16:51:70:77:f4:95:ed:d7:ad:c4:
27:bb:b5:43:92:2f:59:96:2c:2c:cb:ed:e7:c3:cf:
c8:50:79:dc:60:4c:e0:a2:5f:19:8f:91:fb:22:ef:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:45:F8:1D:07:31:19:2D:F9:DF:6E:09:5A:43:CF:3E:2C:30:49
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:eb:c8:2d:38:d6:39:e5:04:f9:fe:bb:32:0d:f7:e4:3b:07:
07:4a:1f:47:ac:73:56:1a:f1:35:55:cc:2b:5f:f4:80:35:45:
ea:d3:ef:92:69:38:c9:77:44:be:e0:a4:05:42:bf:91:5d:df:
22:9b:eb:75:0f:d1:b0:cf:16:61:39:3a:3a:06:50:9a:b3:e3:
21:84:18:2e:04:5f:95:ea:e3:e1:44:94:0b:d0:64:73:08:f3:
8a:30:c4:b5:ba:8c:6d:ac:eb:e4:8c:18:97:b8:45:e8:b8:da:
1a:43:77:44:be:bc:92:a5:ea:3c:f9:c9:12:4d:c5:8d:22:13:
b9:45:bb:4f:38:ec:a8:bd:f2:8e:06:18:9f:9e:e7:3c:f2:36:
fe:c9:ee:ce:77:ca:93:0f:3c:da:52:11:a1:34:57:5c:19:f1:
df:68:96:db:7e:75:44:c6:24:df:1d:31:04:23:a9:31:2d:ef:
dd:f9:d0:15:72:a1:f9:10:ef:90:2c:ff:1d:1e:84:5f:39:f0:
99:b6:1f:13:07:49:01:36:75:5b:7d:20:17:97:ee:f6:ad:de:
f0:ae:2d:ac:ec:ab:69:cb:c2:4a:9d:5c:62:37:12:67:69:72:
67:bd:24:cf:da:31:bd:ea:31:13:7e:dc:f7:7f:da:4c:40:4c:
94:3a:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:50 2025 by rpki-client