Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: TLJ82iCXMN78AchlrOKDJMjZu+xqsEO+WXrozN++0ko=
Subject key identifier: 33:69:B6:BC:A7:BF:8C:13:12:45:AC:22:17:20:DE:02:4C:B9:4F:0E
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 01965B3974ABFD3F7F6C883F8381A1DB0281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 02:00:13 +0000
Manifest this update: Tue 22 Apr 2025 02:00:13 +0000
Manifest next update: Wed 23 Apr 2025 02:00:13 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: zKEyP0mGR5q9lgfdrzF+G7p6VL0t/vfHbBE+2STZg8k=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:74:ab:fd:3f:7f:6c:88:3f:83:81:a1:db:02:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Apr 22 02:00:13 2025 GMT
Not After : Apr 23 02:00:13 2025 GMT
Subject: CN=3369b6bca7bf8c131245ac221720de024cb94f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:94:fe:7c:d3:d5:79:41:c9:29:91:61:94:
11:6a:47:cf:e5:9c:47:04:87:89:ac:d2:15:0a:e1:
6d:10:df:1f:6b:10:c6:c7:c6:e6:f9:01:0c:f4:66:
fe:8a:b7:ea:4b:7e:3b:67:16:f8:26:e1:e9:11:fa:
d1:4c:0d:83:fb:72:7f:22:7c:2d:40:61:3d:71:fe:
14:e1:51:82:59:79:f0:b0:e4:fb:cb:ba:aa:ba:25:
2f:81:d7:f4:ed:3e:df:52:b7:e1:2e:cb:17:e3:66:
98:79:87:84:7c:61:e1:2f:69:09:62:44:28:b4:94:
55:b5:6e:db:b0:d3:81:0e:4a:87:27:b5:ea:45:e6:
7a:58:c7:65:48:8e:2c:58:36:d5:c5:eb:f3:ab:12:
5d:e5:14:36:ba:9b:f8:ee:ad:10:17:3b:70:ce:8e:
40:16:4b:8d:f7:d7:64:db:92:f5:b5:f7:10:1e:87:
b8:4b:c1:d1:1f:4d:d4:98:44:e2:8e:c3:33:b0:81:
1f:a5:52:33:4a:2a:cc:c7:ee:64:65:bf:be:c4:b2:
be:d1:a1:31:0d:d7:6c:72:ff:20:7e:19:e2:0f:06:
da:7f:7e:57:8b:0b:d4:ed:50:71:fe:a5:88:e4:d1:
3c:c8:59:21:b7:f7:db:a7:ab:c1:ec:9b:05:3e:41:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:B6:BC:A7:BF:8C:13:12:45:AC:22:17:20:DE:02:4C:B9:4F:0E
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:68:80:62:f3:4c:e0:2d:fc:f2:f4:d1:47:e9:19:a2:05:
14:3d:19:fd:65:cb:b9:f2:ef:18:63:05:3d:af:44:33:76:77:
46:9b:5f:17:f2:e8:a4:d6:24:36:97:8d:20:00:06:48:28:c4:
97:bc:9a:bb:04:c3:bd:80:bc:c6:fd:28:4d:ef:47:34:ae:6c:
0a:8c:6e:fb:2c:70:92:f8:5b:71:73:a6:ee:f0:b4:ef:ec:08:
6a:1e:34:44:5e:bf:11:ed:e7:68:94:07:65:9a:1a:5a:64:ce:
54:fd:76:0c:89:59:1d:34:02:88:ff:21:72:21:bd:75:6f:c4:
db:9d:36:8f:5e:58:19:1b:98:a9:8a:26:a8:57:21:cf:7f:ab:
cd:f1:5f:19:0e:6c:f8:09:15:b4:d9:45:18:42:79:c4:d9:7f:
c9:47:9a:73:bf:bb:ee:13:6c:c0:76:4e:6b:40:b4:b0:02:39:
5f:c9:60:5e:46:05:5c:4e:21:d9:27:9a:59:fc:67:4a:70:67:
f5:6c:d2:d7:1d:0e:79:aa:65:5a:8a:49:fb:0a:8d:7c:99:52:
ad:da:f1:fb:ee:fd:b9:7c:75:6c:b2:26:3b:7d:a4:d3:00:18:
e4:13:fb:fb:b4:5d:b4:5a:cd:b9:9a:7f:c9:8e:59:7c:2e:bf:
a1:73:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:49 2025 by rpki-client