Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: f6yUCbYnPY7Xtpwn0NKFvzOuNM3AgkhIvwlAZjVuzf8=
Subject key identifier: 0C:8B:E3:05:9E:C7:FA:77:1C:72:2B:8F:F9:06:69:82:50:2B:9F:E8
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 019652A52AEBBA986932FAB38AA45982D38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 04E0
Signing time: Sun 20 Apr 2025 10:01:18 +0000
Manifest this update: Sun 20 Apr 2025 10:01:18 +0000
Manifest next update: Mon 21 Apr 2025 10:01:18 +0000
Files and hashes: 1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=)
2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: O3md1A+FGttZ9s9EPb66GRBMH9hnCPdZGZ0nQ3PIPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:2a:eb:ba:98:69:32:fa:b3:8a:a4:59:82:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Apr 20 10:01:18 2025 GMT
Not After : Apr 21 10:01:18 2025 GMT
Subject: CN=0c8be3059ec7fa771c722b8ff9066982502b9fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:b7:a7:8f:80:10:8b:01:1d:c7:e2:6f:9d:
45:6b:42:ca:2f:d9:80:a4:7d:d5:6d:3a:a1:9f:ec:
c4:ee:ad:9d:58:c8:fd:17:da:28:51:e4:20:77:11:
80:d2:d7:31:b9:07:80:da:13:53:1f:4e:de:7a:6b:
39:3c:a1:79:f2:f0:37:1b:ad:9f:96:b0:2b:ed:cb:
28:dd:13:be:34:86:8d:b9:21:69:20:85:1e:ae:16:
38:e4:cd:02:37:51:77:14:5e:b2:4d:a5:9a:9d:45:
78:38:fb:de:9f:dc:f0:59:13:65:14:b0:2a:75:e8:
cc:54:65:cf:0c:f5:e8:ec:a4:6e:71:f9:7e:9a:bc:
34:9b:09:98:82:50:f9:91:dd:ed:d9:a2:c4:0c:82:
a1:80:9c:ff:97:24:0e:b1:1d:31:31:00:49:96:35:
9b:14:cd:5f:ce:1b:33:9f:6f:4c:2e:3c:da:b7:e0:
c8:07:f5:8b:a1:47:31:90:f4:4c:fe:84:1a:9f:c0:
9c:d4:37:76:91:97:ea:db:6b:19:29:25:62:7f:8f:
e3:f4:d8:95:59:64:9f:ba:7f:20:ca:25:0b:21:6e:
17:53:3e:f2:aa:ac:02:89:1a:31:7f:b0:dd:8d:c6:
04:e0:e9:4b:f9:69:9a:36:de:f6:27:aa:12:41:07:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:E3:05:9E:C7:FA:77:1C:72:2B:8F:F9:06:69:82:50:2B:9F:E8
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:9a:48:22:bb:f9:56:d0:cf:a0:ac:12:04:26:64:f8:8b:
4f:11:a2:fd:5e:c6:4b:8b:1d:4c:32:8d:e4:f4:67:8f:b0:3c:
c8:d3:ce:9f:96:b0:83:b7:db:95:45:4d:31:fc:f3:ff:2d:11:
78:7c:65:f9:aa:00:fb:e3:8a:06:84:05:a1:6e:da:b0:78:d7:
52:29:fb:81:dc:d7:fb:1d:bb:e2:af:39:5a:1d:c2:8c:19:f2:
04:e0:c6:46:25:a6:21:c6:f0:10:76:4e:86:13:00:9a:cc:16:
0b:24:42:e2:1a:d1:81:bb:e5:5d:d4:c0:5a:2c:64:a2:fd:cb:
52:5d:e9:3f:44:bd:b7:b9:26:35:5e:7d:51:b0:d1:50:35:2c:
7c:22:90:63:e3:bc:0e:01:66:78:2e:e4:82:b7:2a:c3:0e:ff:
66:24:61:a6:84:b9:6c:78:3c:d7:bb:77:c8:e4:6e:0b:2f:a0:
0e:68:e1:88:7a:92:c5:03:bb:86:27:7e:6f:0c:dc:1e:b0:ee:
46:8c:d6:c3:72:b7:f7:5c:cb:b8:c3:6e:0f:dc:5c:99:98:6b:
11:47:02:da:35:e4:d6:28:79:ce:bf:42:ff:d1:62:97:4f:88:
76:20:f0:f3:b1:54:df:23:e0:72:98:3b:12:86:2d:d9:23:6f:
f6:75:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:43 2025 by rpki-client