Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: R78e98/nBcGGa6MfNb1lwZEK8R0qrHmlI546YcLTfb0=
Subject key identifier: A5:D9:88:43:0C:9C:6F:32:99:3D:36:07:08:BA:8C:23:8D:16:5E:39
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 01964E90F087EA3D0283D9CBD2F9288CC9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 0E24
Signing time: Sat 19 Apr 2025 15:00:43 +0000
Manifest this update: Sat 19 Apr 2025 15:00:43 +0000
Manifest next update: Sun 20 Apr 2025 15:00:43 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: hVUozxQkn3PHby/zbysN0Mkp4gxbd+pgTJ0vLQgsbIo=)
2: pGBMbGUVmfmMQKR1-BVF--sKK7U.roa (hash: ayj/a/EtllFNMGD1HzcA6KglHzS5bxHd+NVb8RRWcAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:f0:87:ea:3d:02:83:d9:cb:d2:f9:28:8c:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Apr 19 15:00:43 2025 GMT
Not After : Apr 20 15:00:43 2025 GMT
Subject: CN=a5d988430c9c6f32993d360708ba8c238d165e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:65:d9:fc:1d:9b:1f:4c:d6:c8:5c:d0:1f:
6c:a9:2d:1e:2e:e0:c5:f0:3f:3c:33:10:48:c0:c4:
9b:3e:c1:bb:8a:a6:7b:a5:5e:8c:ed:76:94:cc:9d:
2d:02:5c:a1:20:31:07:1b:90:2d:8f:03:cc:10:81:
f4:f5:e5:06:eb:a1:bb:56:40:b4:12:13:09:a9:73:
83:ae:28:7f:a0:35:92:1c:33:db:a1:cb:1e:58:f3:
be:61:d4:5c:95:17:e5:b8:af:3e:98:ef:df:af:9e:
f4:c1:cb:db:3f:86:a9:52:03:d9:7d:a4:3e:e0:77:
7d:62:27:ee:9a:88:4a:3e:c6:c1:4c:29:88:9d:88:
f3:40:26:b1:b6:41:61:c7:3f:73:81:22:91:bd:fe:
3c:08:a1:0e:de:d8:47:f1:07:95:0c:0b:01:8d:90:
a8:df:38:9c:9d:bd:14:c5:75:ff:22:5a:ac:82:f6:
b5:b9:6f:bf:7d:e7:e0:8f:8d:20:ed:33:f3:be:5e:
3b:b1:d2:22:e1:6c:79:0b:0c:2e:e2:b7:b7:bd:af:
9e:4e:ce:87:7b:4d:70:40:34:e0:8c:53:6e:8a:26:
33:6c:71:0e:97:d0:72:b8:ce:57:20:6d:15:cf:65:
fd:64:53:09:a3:c9:41:6c:75:7c:15:04:42:84:58:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:88:43:0C:9C:6F:32:99:3D:36:07:08:BA:8C:23:8D:16:5E:39
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fa:14:f1:97:b2:28:33:a3:14:36:67:44:e3:f8:31:62:3e:
37:eb:45:a5:4e:06:42:a1:45:93:62:dc:f0:39:02:24:6f:06:
84:4e:73:39:cc:8e:bc:05:dc:ab:c9:ef:83:18:06:fd:d4:70:
e8:37:51:e1:0c:28:1a:87:24:a5:66:6d:d2:8e:fd:21:49:01:
30:fa:f9:7e:7a:92:bb:27:0c:a2:e8:3d:63:e4:50:18:64:65:
81:53:39:30:b4:db:a9:d3:2e:17:af:11:ce:95:ec:a9:0d:7f:
b5:81:23:3f:36:bf:40:12:a5:2a:36:b1:60:55:76:54:67:71:
48:64:d6:ee:09:a3:5f:94:22:3e:90:a8:02:e3:e9:8c:b0:00:
f6:92:8e:41:ab:c9:cd:42:2e:f4:46:2f:16:fb:a5:4e:17:73:
2f:e4:a2:a8:69:75:42:dd:1b:4b:45:a2:de:32:cd:bc:f7:31:
63:0a:28:51:e5:57:94:17:8b:53:ae:9c:5d:90:74:b9:71:8e:
ed:a6:7f:c6:56:f6:ac:e0:4a:6f:17:0e:44:90:0a:92:9e:dd:
d2:59:a9:39:c0:6c:79:ad:2c:6e:64:67:2b:39:8d:36:5f:38:
8b:8f:d8:4f:b1:15:63:0d:e0:c4:f7:41:54:3d:57:ee:9a:46:
1c:a9:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:28:38 2025 by rpki-client