Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: 0G31A2nKw2NSS7RWKkOy+wKxVaDD9gA2Veuw6uDQtYY=
Subject key identifier: 68:98:93:34:19:AF:9C:66:51:5E:AE:D7:E8:0D:E7:8E:B5:84:BE:08
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 01965BA7A1032EF62EF9FDB437CD3DEDCB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 060E
Signing time: Tue 22 Apr 2025 04:00:34 +0000
Manifest this update: Tue 22 Apr 2025 04:00:34 +0000
Manifest next update: Wed 23 Apr 2025 04:00:34 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: TkpNXO2q19PVxKQhtg28i7SJGjZhuHbRCzmd8eBAWNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:a1:03:2e:f6:2e:f9:fd:b4:37:cd:3d:ed:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Apr 22 04:00:34 2025 GMT
Not After : Apr 23 04:00:34 2025 GMT
Subject: CN=6898933419af9c66515eaed7e80de78eb584be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:dd:70:27:58:7f:fa:88:88:40:16:d2:ee:
4f:6f:79:8e:60:29:f4:e1:c6:e7:e8:37:c9:bb:18:
2b:2e:63:f3:ba:a4:be:48:5b:16:b2:9a:ca:44:70:
a3:37:74:89:98:6d:08:f5:3d:40:7f:a7:11:04:32:
b5:8c:dd:6c:05:01:2b:0b:cd:24:68:fd:32:68:fe:
b7:c1:f9:15:47:0d:79:59:a5:2d:e7:b4:47:18:0b:
af:91:75:41:4b:53:6d:93:29:30:d8:e0:56:07:81:
4f:9d:42:f1:28:8a:f8:9a:96:6c:77:2f:d4:9a:76:
75:02:54:43:81:8c:86:0e:cd:1e:7c:be:a6:9d:22:
84:58:22:34:9c:7d:10:de:b2:ad:07:2e:cb:7e:a4:
d1:72:f0:c6:8a:3f:45:a9:5b:06:8e:a2:ad:b4:88:
12:bb:4b:71:66:aa:f8:8e:ee:e7:1f:85:07:7b:3d:
41:ef:6c:0a:27:65:c3:4e:37:bb:c1:48:db:d3:d2:
cd:3c:8f:38:9a:21:97:72:ce:2e:2a:18:7c:ff:f0:
c1:b3:76:18:b6:f0:fb:1f:c3:d6:a5:7e:d5:a5:36:
a3:70:b5:e1:5c:c6:2c:90:95:83:a6:9a:ba:0a:9d:
42:a5:d1:03:6d:49:1a:2d:0a:01:ea:3f:78:9f:fe:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:93:34:19:AF:9C:66:51:5E:AE:D7:E8:0D:E7:8E:B5:84:BE:08
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:04:70:f3:5e:ef:ec:29:e3:f2:d8:fb:a0:bf:e1:0c:2d:d1:
20:dc:61:89:5f:93:fb:af:c7:93:5a:49:98:4f:32:6c:b2:1b:
dd:30:8e:33:1a:4c:49:32:80:b1:59:28:f4:71:31:25:fd:b4:
81:23:74:fe:78:2c:d2:7f:bb:78:18:72:33:7b:fc:ba:5c:3c:
14:2d:35:7a:a7:24:14:7f:80:a4:ba:73:05:f3:b5:28:b6:b6:
f3:cd:2d:cf:c5:a5:6b:5e:6c:8a:de:d7:16:4f:3a:d3:a8:66:
20:31:9d:5f:65:94:e3:e3:f7:af:64:c3:bb:6a:56:dd:39:c7:
9e:48:e2:24:20:e5:b3:f9:c6:65:e2:84:4c:da:b8:5a:7b:ad:
7a:d6:cc:35:f6:cc:dc:90:ef:5e:2a:d1:cf:e8:29:bb:96:f7:
5e:a7:b2:57:68:46:de:b4:c9:d9:ad:2e:79:a2:a0:df:6f:30:
04:99:89:cf:2e:e4:9d:32:29:3d:1a:85:b0:83:9c:bc:fe:e5:
4b:f6:f2:ef:e0:25:44:53:b3:03:01:d1:91:e4:8f:73:49:22:
73:f4:6a:5a:76:1f:35:9c:2e:df:9b:d7:94:c4:9a:2e:e6:7b:
d2:3f:89:df:05:f6:dd:f3:d0:5f:29:8f:23:bf:69:3d:6e:c0:
68:02:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:10 2025 by rpki-client