Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: rtsu824RacJsqLfAL8o1WwDANxj19vJvKVRX1yp/U2M=
Subject key identifier: F3:0D:64:3F:68:FD:E3:A9:C2:23:72:0E:6E:26:23:6A:1C:B1:A7:01
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 01958C97264B7AAF1D7FE22CD9707A757894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 23:01:10 +0000
Manifest this update: Wed 12 Mar 2025 23:01:10 +0000
Manifest next update: Thu 13 Mar 2025 23:01:10 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: 6Y+lDzEbHPTCJilrX3TlV9OWXmC1BMIz2T0mHZoaGKA=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:26:4b:7a:af:1d:7f:e2:2c:d9:70:7a:75:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Mar 12 23:01:10 2025 GMT
Not After : Mar 13 23:01:10 2025 GMT
Subject: CN=f30d643f68fde3a9c223720e6e26236a1cb1a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:c1:d8:e6:ee:7e:4b:cd:fe:cd:98:c5:fe:
04:45:15:b0:c7:f7:97:bf:43:14:a9:27:e1:4a:23:
dd:ed:28:50:f1:d4:f3:2b:7f:03:30:b3:d2:86:72:
5d:37:38:79:f0:60:8c:11:da:de:43:ce:eb:cc:69:
b2:87:22:0a:22:9e:71:59:1f:9f:ae:fb:f8:82:6a:
b7:e0:82:91:81:9d:e0:b2:f2:f4:65:39:48:ba:91:
22:50:9d:8d:0e:15:02:7b:c8:a8:52:93:8d:1a:4e:
5a:30:6a:76:2b:2f:93:8e:4c:bf:c3:fb:e0:3b:53:
97:b7:70:5f:0f:b9:1b:79:d2:68:12:d4:64:35:c6:
46:43:bd:59:63:4b:04:ad:bf:4c:51:51:52:bb:90:
96:8b:d1:ce:e5:a8:34:81:e8:0f:ec:44:43:52:78:
5c:f8:a5:61:96:03:94:d6:9f:b1:f6:f8:60:d3:68:
8a:45:ed:48:07:43:f8:79:0e:22:ee:cf:47:67:a2:
5c:b1:32:3e:69:b4:63:3b:54:dd:11:60:b7:75:80:
cc:0a:bd:07:51:5f:66:8f:05:7c:ec:05:d2:d9:63:
c8:df:df:91:04:6b:f5:11:c2:c4:b3:d1:91:e3:57:
d5:05:09:f6:d1:17:3f:75:e4:af:1c:29:f7:28:b4:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:64:3F:68:FD:E3:A9:C2:23:72:0E:6E:26:23:6A:1C:B1:A7:01
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:c5:6f:ca:06:a0:a7:b8:62:c1:5b:42:f9:3b:fd:08:65:
93:91:46:e6:63:b4:77:59:b8:fe:5e:ad:35:bc:0a:73:31:ff:
ed:f2:63:e0:8c:2c:b7:9b:8e:5b:d8:28:89:d3:81:1f:3b:6c:
ab:87:3e:40:a4:36:9c:b1:60:89:ae:bb:da:0f:99:18:05:f3:
c0:d7:9a:3d:5a:14:80:38:ca:2c:61:d6:4c:f8:88:2e:23:e6:
b6:66:b3:d5:f5:2c:04:12:ed:39:ae:e3:78:5c:f8:90:04:d5:
f3:af:8d:23:8a:6c:bf:82:7f:fc:97:cd:2c:7a:31:c2:07:ae:
50:eb:40:33:b2:bd:ee:16:11:6c:08:5a:ef:95:f7:58:ed:af:
13:4b:7c:f1:b0:fd:06:4b:5f:49:68:84:6a:2a:52:f4:6b:3b:
11:ac:70:57:37:9a:03:f6:e0:0b:32:1c:df:6e:ea:ce:f7:ca:
7a:db:84:e5:fe:1d:7f:cd:25:40:25:a1:cf:20:64:94:f1:ec:
df:c7:95:cd:94:23:03:cd:2e:28:1b:8f:e3:fa:fd:48:8b:85:
aa:bc:e9:1f:72:65:94:8d:9d:73:ea:32:d6:f4:e5:fe:50:d1:
14:68:15:b3:a2:8e:b6:d4:56:2b:30:d7:62:c0:91:c8:f8:bb:
61:09:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:01 2025 by rpki-client