Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: 9ojN4g0yB8iIbaysy0NlOHqg1db9RaIVErS6tu+VkYE=
Subject key identifier: 90:BD:A7:B3:D0:0D:32:E3:B5:9D:A7:08:CD:30:07:50:20:60:BF:0B
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 01964DEC00BC08252903F9186E60B72C3F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 12:00:34 +0000
Manifest this update: Sat 19 Apr 2025 12:00:34 +0000
Manifest next update: Sun 20 Apr 2025 12:00:34 +0000
Files and hashes: 1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: mWSWP/lHU/uv7YzGgBgn0Xe/BmtsMBCH8xrb+/S6Bi4=)
2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:00:bc:08:25:29:03:f9:18:6e:60:b7:2c:3f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Apr 19 12:00:34 2025 GMT
Not After : Apr 20 12:00:34 2025 GMT
Subject: CN=90bda7b3d00d32e3b59da708cd3007502060bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:cf:77:cd:1a:b1:1d:1d:ee:83:33:f2:54:
27:14:fe:9d:fd:4e:53:c0:00:d1:7b:9b:4d:61:bd:
f9:2c:55:65:88:32:c9:54:07:54:89:a3:20:96:8b:
8e:b1:e9:a1:21:c4:2a:08:2a:71:af:43:5a:af:ff:
50:79:6f:e0:6e:fa:1f:ee:8e:30:30:f0:8c:30:39:
cb:49:e2:8b:f8:5f:5f:20:48:96:2d:fe:cb:30:43:
47:d1:a7:d4:e7:0a:db:2b:3b:d5:77:ec:4e:72:53:
82:59:1c:4a:76:9b:f3:73:dc:3e:02:14:24:66:da:
6a:f4:e7:9f:e3:f1:36:98:78:b7:ed:df:59:74:be:
de:0b:d8:7a:78:81:ac:af:8e:d7:32:7f:eb:18:48:
d5:68:a3:9f:15:c2:c8:da:a4:f2:60:b6:01:e0:a6:
2b:04:11:2a:eb:b1:7d:65:da:4f:e1:50:d6:0e:45:
19:c3:9e:5f:5f:5b:be:19:6e:9c:c5:d6:58:89:fc:
9e:43:a0:32:68:88:4d:9b:22:65:23:99:c9:04:ac:
f6:28:eb:21:4e:6f:a5:4c:05:36:a3:df:e4:8b:ac:
c9:e3:33:5b:0d:da:16:0c:98:29:c5:c0:28:3c:58:
6c:bf:52:77:e8:57:cc:6d:9e:5a:83:78:38:75:76:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:A7:B3:D0:0D:32:E3:B5:9D:A7:08:CD:30:07:50:20:60:BF:0B
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:77:1f:d1:9c:78:cb:96:08:4c:29:bc:6b:b9:94:09:cc:00:
0c:e7:58:ab:bc:9b:84:ef:0d:1a:41:30:fc:15:f3:1c:33:38:
9d:f4:da:d4:2f:33:d9:92:27:fe:a4:89:de:77:f1:36:9d:cd:
a0:ae:65:8e:e4:61:2d:86:90:5d:cd:38:1f:fe:a2:76:96:9e:
c9:80:eb:5c:bb:a9:52:95:21:76:ef:89:cb:eb:84:7e:cc:b1:
e2:56:50:3b:05:2b:92:2f:ec:18:74:84:fb:9f:26:c5:ab:e6:
44:7c:20:02:68:40:a8:d4:57:c6:ed:a5:6d:90:12:42:46:b7:
4f:fb:f7:6e:b0:78:93:38:71:78:87:d5:4f:00:85:fa:90:4d:
33:42:bf:94:19:0a:41:70:d5:33:54:b0:c8:94:e0:f0:78:97:
5b:24:f4:38:f8:ea:59:34:12:1d:18:a1:78:3d:0a:9f:f1:d3:
95:94:b5:11:ee:ba:45:a8:5e:28:cf:11:2e:ce:62:4f:34:58:
ae:5c:05:48:b5:72:c7:18:3f:d8:7d:cc:74:64:a3:d5:17:da:
ab:4a:86:a3:01:c4:6f:fa:3c:00:41:83:16:a6:d5:ef:69:c5:
f0:80:6d:98:fc:23:98:f3:1a:45:34:66:62:de:bc:97:5b:93:
10:19:04:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:19 2025 by rpki-client