Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: s4D5plBHU/Vm59FWxZsjvmn3ElSQrBMHURk5i1VBgN0=
Subject key identifier: 2D:C7:6D:6C:6E:8C:BA:45:8E:30:27:74:78:57:E6:0B:DC:3C:C4:E0
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 01965E03C032884DE2EDFF4B73B73BC42DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0ACE
Signing time: Tue 22 Apr 2025 15:00:26 +0000
Manifest this update: Tue 22 Apr 2025 15:00:26 +0000
Manifest next update: Wed 23 Apr 2025 15:00:26 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: sag3E/yFd8gOiVWOT0OoNz1EoZVxo1eOReSpMpzhlJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:c0:32:88:4d:e2:ed:ff:4b:73:b7:3b:c4:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Apr 22 15:00:26 2025 GMT
Not After : Apr 23 15:00:26 2025 GMT
Subject: CN=2dc76d6c6e8cba458e3027747857e60bdc3cc4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:b2:e3:6e:51:52:e8:9e:e0:c7:32:f7:e0:
9f:87:fe:17:85:2f:97:0a:20:af:e6:f3:2f:bb:a3:
69:26:39:1a:cd:a4:8d:e7:9e:0b:9f:88:c4:5e:79:
f2:2f:10:8c:cd:f6:33:8d:69:40:75:1b:0e:ac:e9:
16:75:47:69:36:c3:93:82:d0:fe:77:b6:10:86:68:
65:e8:f9:9e:b1:39:7c:14:e5:9e:a1:18:60:dd:de:
ae:c7:87:3c:54:40:6a:d6:d0:bf:75:5c:ed:ab:9f:
35:ad:35:e4:89:12:92:e6:25:0a:f6:7b:3e:86:5e:
ec:f3:c5:fa:e3:ac:a1:5e:72:2a:27:58:0f:99:00:
8c:19:f5:2b:56:bb:c7:5d:7e:34:f5:61:65:7b:44:
7d:b2:36:1e:9c:43:a0:af:91:83:e7:21:3c:9d:8d:
d0:c8:77:df:13:ef:1b:23:71:91:b0:d6:ab:f0:d4:
90:75:15:d1:a6:5d:b5:53:74:d8:e7:72:c9:96:ae:
e9:c5:01:99:63:84:a8:c1:d5:5d:87:c3:77:d6:d5:
d9:52:c3:79:1e:d0:cc:8b:65:0b:ce:b1:64:f9:e7:
a5:f0:69:e7:b2:be:66:6b:7a:06:ee:3a:74:c1:6a:
ce:90:58:60:78:92:5a:e8:ee:28:55:e6:bb:e2:ac:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:6D:6C:6E:8C:BA:45:8E:30:27:74:78:57:E6:0B:DC:3C:C4:E0
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4c:04:35:06:f7:bb:d9:c6:5e:5b:49:1a:3e:d2:8a:61:38:
cb:7f:77:cb:18:8b:5a:72:bc:63:bc:ed:b6:eb:f8:9d:92:93:
a9:e8:07:42:e0:71:4e:73:3a:bc:8d:aa:71:26:18:c9:a3:5d:
a2:65:c1:7b:f6:ce:35:b0:22:e4:71:85:0a:cd:47:4c:75:70:
c4:3c:97:eb:5e:c1:70:f3:27:3c:4f:8a:2b:0a:a7:32:88:48:
ce:62:c6:cd:f2:44:9d:6d:f7:1e:d2:66:68:63:30:61:8f:52:
bc:d7:76:79:c6:69:c3:13:1d:ce:1d:60:b6:03:37:a0:31:0a:
84:e8:3f:d3:6e:1b:a2:f7:67:14:3f:e9:96:4e:de:f7:32:6c:
e4:c3:55:9b:b6:1e:7a:a0:f6:48:4e:75:c7:e5:05:a5:97:28:
a0:20:d7:b0:5c:26:87:29:8c:81:cf:16:bd:1e:e0:36:66:8c:
d4:84:b5:c9:94:5b:73:f7:18:be:31:b4:a6:56:d8:f8:42:4d:
2d:05:d4:8c:2f:b6:bd:e4:88:66:93:e5:8b:e6:0a:58:95:2b:
e7:e7:a1:cc:bb:4f:30:9b:ed:5c:c3:1f:1e:a5:0c:ac:94:b9:
97:c2:4c:91:93:21:49:6e:13:af:fe:ad:fc:14:a1:ac:78:ba:
d2:80:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:22:12 2025 by rpki-client