Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: OoQ540cUu46I+uGg0F6QwW8BOsdK92uSd/XGMAL6eE0=
Subject key identifier: DC:E8:D5:7C:99:60:9F:E9:6A:95:F0:0B:FB:1C:B7:BE:6B:60:D1:04
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019659F080E6398F04133DCA47277B44BAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 0FE2
Signing time: Mon 21 Apr 2025 20:00:55 +0000
Manifest this update: Mon 21 Apr 2025 20:00:55 +0000
Manifest next update: Tue 22 Apr 2025 20:00:55 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: nf/ZmVoMI9nJU5FaoN3OFE5IAzjtPTpz1d1n1jzRXUo=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:80:e6:39:8f:04:13:3d:ca:47:27:7b:44:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Apr 21 20:00:55 2025 GMT
Not After : Apr 22 20:00:55 2025 GMT
Subject: CN=dce8d57c99609fe96a95f00bfb1cb7be6b60d104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:de:96:45:41:7d:94:55:c0:a2:13:f0:59:
e8:55:a5:df:b0:8f:8e:ca:27:26:07:16:1c:d7:e8:
57:7b:24:10:76:1d:5c:61:8b:b6:6c:23:89:28:18:
ec:80:e4:9e:af:90:2b:73:e2:22:76:a2:15:65:e8:
3c:9c:6b:9d:df:8e:dc:94:64:bc:f5:d9:c3:29:7f:
a2:b6:31:8a:56:b9:8e:0d:26:43:fa:c0:85:61:3a:
63:50:60:e4:e5:a6:3f:24:bd:6a:18:6f:f5:8e:ee:
6f:ea:20:f2:9e:ac:46:5b:d4:8c:bc:17:5f:6a:ab:
d9:65:fe:87:96:83:40:9d:9d:6d:84:6f:0a:28:d5:
94:f5:56:32:20:dc:ce:a2:74:38:c1:7d:4d:09:e1:
8a:80:64:72:96:b1:57:81:b9:52:60:1f:26:5c:14:
53:18:f1:77:18:c1:a7:65:73:05:a7:29:46:22:c8:
ac:e3:3d:b7:9f:35:26:b2:73:b3:d0:79:93:3c:fb:
5f:26:4b:f8:bc:71:c9:5f:5b:56:e8:a9:74:6a:fb:
a4:b3:de:a9:53:5e:10:33:01:d2:19:85:e5:b3:16:
f7:7d:76:77:d5:1e:38:a2:ac:c6:57:8e:08:96:17:
ab:0a:bb:b6:2a:ae:a4:ec:d7:b8:7f:0c:df:85:45:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:D5:7C:99:60:9F:E9:6A:95:F0:0B:FB:1C:B7:BE:6B:60:D1:04
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d0:0a:3e:b2:e2:37:f0:87:85:9f:36:69:b3:c7:5c:99:71:
c4:5b:3e:df:1f:61:f7:37:c1:8b:59:68:3e:3d:f5:5a:e9:8a:
db:d2:41:c3:c0:02:64:7d:2a:7c:20:b3:a5:cd:1d:b0:07:cf:
1d:45:c9:d7:79:d1:be:2c:01:51:b8:d0:ee:7c:e1:8e:9e:d3:
35:86:9b:a7:65:e8:af:3e:35:71:33:c0:16:cd:0a:6f:5b:16:
cd:f1:60:8d:7f:56:fd:5f:34:d2:9b:32:25:34:84:ca:79:78:
8b:2d:2e:50:11:45:81:b2:7e:76:e4:d6:ba:cc:a4:5a:98:30:
b9:de:38:6b:bb:f6:6b:b7:21:3b:04:32:86:ee:b7:76:54:3c:
63:a2:d6:63:1b:7b:16:76:55:f0:f9:6a:61:46:57:d9:f0:c6:
f3:33:87:87:bb:1e:32:7e:80:ae:37:1f:e5:c9:83:15:da:ae:
3e:7c:9d:d2:4e:27:08:1b:a4:c1:5d:53:87:0e:3a:21:4d:fd:
97:d1:b5:6f:de:81:1a:28:dc:0f:97:05:c5:03:41:20:c7:f8:
e3:5a:e0:d4:b5:66:d9:5a:37:e3:7d:32:99:85:c6:18:e5:ce:
29:4c:8d:08:9d:4b:56:fe:2c:5a:be:b3:88:50:a9:7b:bf:de:
e9:d2:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:39 2025 by rpki-client