Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
File: YHZWuPfoG1FJtIYPgSex1OO0h9w.mft (raw, json)
Hash identifier: ahPNqWCfJJfWvQdNFe68x2ueQxPlVEfKC7ZDj5D7SUs=
Subject key identifier: 22:5A:BA:33:14:6A:4E:02:2E:4C:C5:EE:09:7C:A3:39:C6:90:93:60
Authority key identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
Certificate issuer: /CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Certificate serial: 019653B6E701CEBA1336B8665FF5BCFBC9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
Manifest number: 0B0E
Signing time: Sun 20 Apr 2025 15:00:17 +0000
Manifest this update: Sun 20 Apr 2025 15:00:17 +0000
Manifest next update: Mon 21 Apr 2025 15:00:17 +0000
Files and hashes: 1: 7-uxb2sVoc0kcAT2m9SP5qVnZ8E.roa (hash: acdZUKxa+ye22RHZ+hlpmz4eeOUGVIjJiD1cAB8HEbo=)
2: YHZWuPfoG1FJtIYPgSex1OO0h9w.crl (hash: FvextSAK6yYfVzraWVw3RWiTm5sPNcrCS90xMkwFHl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:e7:01:ce:ba:13:36:b8:66:5f:f5:bc:fb:c9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Validity
Not Before: Apr 20 15:00:17 2025 GMT
Not After : Apr 21 15:00:17 2025 GMT
Subject: CN=225aba33146a4e022e4cc5ee097ca339c6909360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:98:dd:f8:7a:b8:36:89:6e:59:c3:94:71:
f8:36:20:54:ff:f2:98:cb:3c:63:9a:6b:ed:d9:70:
65:52:b4:89:9f:3f:dd:fd:42:78:f4:43:35:74:fd:
42:64:af:99:1e:11:8a:ca:f8:be:b4:5c:2c:4c:0e:
3d:af:ab:ed:54:1a:d2:67:54:25:d0:94:c5:8a:9c:
9d:64:45:09:45:00:74:8d:6b:d5:a0:cc:09:7e:d3:
06:6a:b8:d5:c7:3d:5d:36:f8:ee:92:37:1b:fc:23:
6f:37:74:50:1f:34:40:d0:40:d5:20:6e:75:5c:24:
c2:8e:93:96:14:17:cb:ed:0b:04:14:f8:35:28:a2:
6f:7f:5c:be:3d:3f:7e:65:ef:3c:b1:47:84:82:65:
bc:8c:4d:66:31:9b:fd:f6:2a:7e:1e:4a:f5:10:72:
7c:0f:d6:ee:c6:56:01:6a:f5:6c:88:e8:d4:9d:6a:
fc:d0:dd:96:f4:fc:1f:7d:2c:06:a9:b6:1e:30:06:
61:d4:1f:d8:d6:75:84:fe:89:8f:24:c3:98:09:73:
d9:be:fb:d9:43:a8:d1:44:84:2c:4c:ac:1f:5b:40:
3e:db:61:5e:ca:48:4e:84:1a:2a:0b:20:f2:53:95:
9e:7a:7f:83:50:d9:b1:ca:03:e6:a0:d2:f7:b4:9e:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:BA:33:14:6A:4E:02:2E:4C:C5:EE:09:7C:A3:39:C6:90:93:60
X509v3 Authority Key Identifier:
keyid:60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c5:e9:d0:d2:06:b5:f1:8b:41:d4:e5:c5:6a:9e:93:74:5f:
66:44:db:ed:70:50:27:a3:57:4c:29:9f:ae:ba:1e:d4:d4:b6:
6f:3b:52:0d:9b:02:49:20:bf:d7:86:40:25:84:a2:52:28:08:
a0:69:5d:95:52:80:1d:d4:24:be:ab:e4:93:5f:50:9f:50:d2:
af:2f:5e:1b:fa:58:13:05:ee:af:4f:33:ae:79:1e:71:92:6b:
9b:77:d0:84:91:c5:11:66:f9:6c:84:49:6b:ab:3d:78:b2:ab:
c6:6e:eb:5a:da:0e:b6:b0:bc:d4:e6:44:f6:f1:91:50:c7:ee:
4e:eb:c3:fa:7b:f4:6b:f1:ea:67:f5:15:11:33:c0:e8:6d:37:
59:2a:ee:a3:fe:2b:2c:8f:8b:d5:95:d0:1b:01:85:d8:41:c8:
2b:38:b6:bd:37:84:24:63:f9:8e:60:02:18:77:63:bf:78:35:
c9:37:74:be:d9:74:77:38:17:1c:94:f6:e9:d2:60:d0:bc:78:
ab:c8:96:de:38:38:ad:7e:03:19:92:7b:5c:f3:2e:81:bd:64:
d4:23:a1:33:da:f0:8e:9a:ba:76:77:9f:8f:fe:f9:d2:cf:e6:
06:25:dd:9c:9c:b2:95:bf:b5:e9:67:c8:85:4e:e8:f3:3c:81:
b2:71:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:50:41 2025 by rpki-client