Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: dEwy6+45RlhJ73J7h3/6kpRwQj5gUZ28q/MZiny2yjo=
Subject key identifier: EE:73:A0:93:00:00:06:6D:ED:7B:3A:B5:5E:30:89:35:A6:EB:3B:CA
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 01965B71183ECA579544DFBFBCD609AF71CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 07A7
Signing time: Tue 22 Apr 2025 03:01:00 +0000
Manifest this update: Tue 22 Apr 2025 03:01:00 +0000
Manifest next update: Wed 23 Apr 2025 03:01:00 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: AmUe0/PtChd00d6AgDQKHk9Q42gGooGux+weY2O/iTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:18:3e:ca:57:95:44:df:bf:bc:d6:09:af:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Apr 22 03:01:00 2025 GMT
Not After : Apr 23 03:01:00 2025 GMT
Subject: CN=ee73a0930000066ded7b3ab55e308935a6eb3bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:b2:39:e7:d0:66:2c:96:6a:0b:3f:a8:91:
92:3e:3b:7a:fb:15:45:c9:11:66:09:d0:22:77:da:
6d:e9:b9:08:34:90:5c:5b:74:e8:c7:78:af:40:5e:
d0:d0:4f:c5:d4:2b:01:ea:69:8f:bb:1a:41:1e:6f:
67:05:ae:7a:d3:0b:df:51:7e:1b:1d:20:28:78:07:
06:a3:01:80:6e:7f:ca:f4:51:5a:49:33:cf:f0:96:
e2:8e:46:ea:21:51:e8:b2:36:29:3f:bc:de:93:b6:
91:c0:39:b3:e4:2c:e5:76:6a:6a:5f:4e:27:02:a7:
df:6e:7e:b3:c8:73:cd:3d:6a:9a:4c:e1:fd:c8:51:
09:48:0f:8a:7f:76:b7:6f:2c:8b:01:ad:b7:5f:c6:
20:bd:51:08:37:57:fa:28:8e:a1:32:45:f5:60:61:
53:48:fe:3c:f9:cd:91:e1:92:6d:71:e7:3a:91:79:
78:4a:e2:4a:1c:9b:60:a9:63:b3:ea:17:1b:d2:26:
97:fa:29:09:70:48:ff:fe:a9:12:18:af:99:12:6a:
9e:ac:bf:2e:86:81:19:9d:61:74:1c:2a:75:f2:55:
d9:9d:ca:06:53:50:15:eb:8f:53:c8:19:22:a0:4b:
96:4c:97:71:2d:1f:bf:ec:71:36:84:64:58:83:47:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:A0:93:00:00:06:6D:ED:7B:3A:B5:5E:30:89:35:A6:EB:3B:CA
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:13:66:3b:f8:95:e6:ff:6f:b3:73:bc:87:bf:41:35:31:81:
71:70:c4:a0:c9:7d:ba:82:68:11:73:9d:aa:a9:2f:b1:ff:9c:
96:c4:0e:43:61:13:e1:67:d7:32:c0:e7:d4:fa:86:0e:e8:27:
d8:cb:0d:6c:cf:20:4c:83:46:91:e9:88:96:bc:0d:f7:1f:9e:
b8:a5:24:fa:f5:51:b0:f3:a4:32:a5:ac:39:26:8b:ae:95:6e:
f0:a1:3b:b2:cf:91:cf:51:17:42:10:f9:28:5d:07:9e:00:f1:
c0:e6:77:27:b8:27:c7:66:a0:89:94:2e:0c:21:78:31:2f:56:
49:67:64:e4:85:33:0b:be:09:6f:a6:a0:48:9c:b8:39:de:2d:
84:ca:7b:3a:8a:e2:e9:a9:41:e1:48:82:49:12:0f:1e:d0:35:
64:9d:6f:be:6d:7f:e6:ac:0b:0d:f3:ea:3b:05:46:3f:24:3a:
2c:23:ec:04:d2:27:fa:80:7f:29:f9:34:e5:1e:0c:36:86:87:
6f:cf:98:47:fe:6b:2d:8d:77:47:07:80:54:97:1d:fc:92:69:
ee:a5:00:81:1b:12:28:2b:eb:9a:0f:8a:6f:a1:16:7a:64:32:
a0:e5:cd:1c:77:69:48:85:1f:dd:7c:68:c1:17:32:81:f7:2e:
32:86:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:06 2025 by rpki-client