Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: Byk9+Eo7aLpx5NKfOAlMRfhKiSe8iDu8LJAjPFFPLTE=
Subject key identifier: 53:98:4B:BE:6A:0B:F3:24:A8:16:C4:53:32:E2:54:1F:A5:A7:54:6B
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 01965BDEC1A670F706A304F103543E750B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 036F
Signing time: Tue 22 Apr 2025 05:00:47 +0000
Manifest this update: Tue 22 Apr 2025 05:00:47 +0000
Manifest next update: Wed 23 Apr 2025 05:00:47 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: 53WSfPrXsxOmwLjZbJtEqjXbROKnlwMoaPWDiihRt4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:c1:a6:70:f7:06:a3:04:f1:03:54:3e:75:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Apr 22 05:00:47 2025 GMT
Not After : Apr 23 05:00:47 2025 GMT
Subject: CN=53984bbe6a0bf324a816c45332e2541fa5a7546b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:8b:fa:95:f9:f0:94:13:dd:40:d8:b6:f8:
c5:32:ee:1f:b0:7c:73:7c:8d:93:8a:da:d5:50:62:
fb:37:14:3d:f4:98:5f:78:3a:14:3a:f4:77:fa:bf:
40:67:26:d4:a3:03:fa:70:35:19:67:f1:84:9d:28:
bc:c1:69:43:cc:c3:90:82:b1:a4:bb:a0:60:b6:f9:
f0:7e:e5:2a:ba:56:81:8a:bb:fd:77:18:7b:0a:66:
66:9a:5d:b8:05:e1:e5:6a:83:10:a5:dc:ae:c6:15:
33:10:2a:ce:19:8d:c3:5c:7f:c9:17:53:e1:0c:55:
fb:49:12:62:6e:aa:3c:7e:59:ef:1a:e4:65:7c:4d:
44:92:47:b1:86:08:2f:e1:a6:ff:0f:88:33:49:a7:
4d:40:21:42:f5:7a:8c:46:00:b1:1f:0a:06:ef:d4:
dc:01:a4:b6:8a:83:85:fd:30:e6:91:49:6b:2d:d4:
56:23:de:52:1a:0f:51:05:a7:3d:83:f4:6e:9f:a2:
67:d8:c5:e6:e5:3e:10:23:e1:39:fd:55:73:0d:c9:
83:c2:62:08:36:97:14:c5:9a:7a:cb:7f:5e:37:dd:
24:36:b8:9b:d8:c9:77:38:9b:68:92:f3:e4:b0:11:
f2:42:95:b3:a1:c9:62:4d:ce:08:b8:0f:da:bd:34:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:4B:BE:6A:0B:F3:24:A8:16:C4:53:32:E2:54:1F:A5:A7:54:6B
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6d:b2:ce:24:8a:50:7e:37:04:61:5d:c9:13:4b:ae:e4:bf:
8b:61:25:f4:b2:94:bc:53:21:6b:c1:a5:4b:2c:49:ea:97:2e:
31:80:c9:23:b3:4a:dc:97:d2:8e:9a:b5:41:87:d7:c9:86:31:
aa:27:3a:99:a4:44:05:fd:b6:1e:99:26:a3:d3:61:bf:4a:28:
2e:3d:d4:73:ea:c9:a2:cf:3b:80:0d:da:35:e6:27:6a:36:c2:
12:a0:72:f5:de:f5:5e:ba:db:f2:df:db:35:4f:2f:a0:1a:c9:
a5:7e:47:6a:39:f9:7a:c6:8e:f9:87:09:d8:cf:a5:bc:f7:26:
59:9e:db:ba:a2:c1:de:1e:68:cc:c1:81:37:c4:24:ee:6c:59:
29:dc:4a:04:0e:5f:33:8c:bc:2b:e0:55:0d:e2:80:e4:45:aa:
5a:8a:2a:11:84:c7:55:d1:95:84:91:fa:1a:90:c3:b9:4e:45:
a5:a6:5f:24:1c:69:61:24:5e:a1:93:3b:56:c8:2a:fc:30:ef:
90:21:a7:06:ae:ba:be:cb:5d:11:92:37:29:38:30:f5:46:7e:
9a:61:80:d4:18:43:95:00:f8:49:41:1d:74:4e:47:ae:01:2f:
63:e0:91:47:b5:bb:21:78:eb:c7:4a:ca:46:0e:09:c1:18:7d:
4c:e6:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:28 2025 by rpki-client