Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: ypYai8Ar5gciwL9Of0xbJzAMVEwpobnW9TpaPOKSvfU=
Subject key identifier: 7A:6A:2A:7B:48:92:FD:12:37:16:59:6A:34:8F:F4:C2:5D:B6:BB:B9
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019644445DB43732B20C0F62140B07A5D7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 13CA
Signing time: Thu 17 Apr 2025 15:00:53 +0000
Manifest this update: Thu 17 Apr 2025 15:00:53 +0000
Manifest next update: Fri 18 Apr 2025 15:00:53 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: Ek4yO8mW01iER2k76m0adsNGF3d1BNoor8vaS3NLV+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:5d:b4:37:32:b2:0c:0f:62:14:0b:07:a5:d7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Apr 17 15:00:53 2025 GMT
Not After : Apr 18 15:00:53 2025 GMT
Subject: CN=7a6a2a7b4892fd123716596a348ff4c25db6bbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:5b:c7:37:25:b7:4a:1c:53:26:a4:ef:81:
84:77:1f:fa:7d:59:a6:e5:31:ce:ec:51:e0:c5:d8:
17:26:9c:a4:13:ce:b5:5d:a8:40:c0:86:40:52:a5:
79:6d:7f:68:ac:cf:aa:22:3b:21:e3:cb:0e:a7:1a:
e6:0a:79:1a:e9:de:c8:ba:e1:d3:45:d8:74:8e:c0:
13:1f:44:57:a9:0d:84:e3:70:01:03:14:9a:b4:66:
12:d3:11:72:aa:a6:97:0e:15:c3:05:14:3a:41:78:
f1:81:3c:de:8d:04:c4:6e:0e:52:f4:b0:4b:c7:5b:
b9:ee:69:8a:0f:06:0a:66:df:87:55:e7:e0:c4:3b:
2c:ae:f0:60:82:d8:98:24:1b:75:ab:48:f8:b7:fb:
fb:26:27:1a:5b:99:38:78:24:fb:28:e3:ee:1a:68:
be:f4:bc:32:28:c6:9a:81:77:a2:f8:20:d5:ef:fd:
96:e0:8e:44:73:b3:52:d3:d9:85:0b:e8:60:18:23:
99:48:5e:25:28:9b:d8:84:bc:5d:a7:76:43:9a:43:
74:ea:40:2d:c2:34:9e:f7:1b:81:f5:72:58:20:b4:
de:e1:10:23:6d:3a:3b:42:63:ee:1a:52:a3:3d:dd:
9f:06:73:6b:31:3c:37:77:55:80:9b:c7:5e:85:54:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:2A:7B:48:92:FD:12:37:16:59:6A:34:8F:F4:C2:5D:B6:BB:B9
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:70:1f:a6:dd:a9:be:ae:98:2e:ad:f6:0c:97:f6:1e:aa:
96:e3:82:69:ed:fb:55:00:bc:37:9c:7f:dd:d5:2e:3b:ab:a5:
8e:ca:59:d5:9e:f3:9d:5b:ee:c3:fa:e6:21:74:d9:47:7b:02:
2f:d5:5b:08:9b:a1:3c:d5:9d:31:7a:f8:7c:31:cb:0b:41:db:
42:8a:d1:83:da:9a:a1:d3:0b:6c:cc:e8:2c:75:43:70:ec:e8:
00:61:d6:e4:e5:9b:14:24:1c:99:75:6a:90:a6:8e:da:d0:79:
82:87:b6:11:6e:ee:5d:52:b1:21:7a:a5:42:49:22:c7:d6:ff:
83:c6:b9:3c:86:25:c4:05:e2:f8:54:13:6a:1c:0c:fd:08:a0:
53:c6:57:83:47:e8:ab:12:4d:3e:51:d1:31:77:ff:82:3c:84:
cd:fa:32:62:cd:41:0e:a7:8b:fc:d3:a3:90:1e:33:aa:fe:e7:
31:bc:95:e8:fb:08:04:46:72:31:63:81:c9:63:e5:11:b8:08:
b0:64:e7:d7:0a:b4:9c:f6:ed:47:ce:d2:62:40:b2:94:9f:50:
14:02:13:77:6e:d6:9f:15:f6:89:dd:79:aa:99:45:11:fe:17:
25:19:b2:48:36:35:e5:08:69:e1:c0:39:ab:8d:7d:99:a5:71:
71:32:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:19 2025 by rpki-client