Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: 2wM+N5XA2fExWkfNqF4WM83clxgdoWOo65xZuxSPuWQ=
Subject key identifier: CE:CD:01:D3:CA:4F:88:FC:E8:D9:CC:0E:48:69:7A:C0:E6:65:6F:76
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 01960DC531D7F64D865FA12296547A8BCFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0BBB
Signing time: Mon 07 Apr 2025 01:02:28 +0000
Manifest this update: Mon 07 Apr 2025 01:02:28 +0000
Manifest next update: Tue 08 Apr 2025 01:02:28 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: r7LxtPvNSYrhxX5MoQJ9X7NKvYXvTMb7+ml4ToZLQMo=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c5:31:d7:f6:4d:86:5f:a1:22:96:54:7a:8b:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Apr 7 01:02:28 2025 GMT
Not After : Apr 8 01:02:28 2025 GMT
Subject: CN=cecd01d3ca4f88fce8d9cc0e48697ac0e6656f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:df:e9:b4:8e:db:15:43:a1:48:25:74:56:
e1:b3:89:f2:39:ff:f3:2a:dd:42:3f:12:ca:3f:f8:
d6:3f:83:b8:b5:2e:f4:87:00:f4:f8:d5:4b:e3:25:
db:00:73:8b:6c:39:c5:18:67:ba:a5:94:62:b2:a5:
41:89:f7:c1:a8:12:9d:e2:a1:42:9f:c0:d6:82:69:
83:2f:a6:86:0c:c5:1e:38:11:64:93:43:13:ac:e0:
33:ac:af:d1:09:dc:5e:da:d3:b1:30:d4:79:f1:f8:
86:6b:1d:f7:ac:e9:76:b0:97:72:c0:3e:1f:62:ba:
87:8e:33:57:d9:83:4e:fd:ce:d0:96:d3:c3:af:fc:
5a:bd:24:59:76:a5:fa:01:86:a1:1c:5b:c3:99:c0:
74:28:51:6c:f1:b4:ba:98:41:f1:2e:51:94:4a:b3:
d3:0e:5e:f6:30:4d:7c:53:e0:f5:19:23:ef:3e:33:
85:d3:ea:81:d3:ca:79:b0:9b:f4:77:96:7b:1b:6a:
8f:22:8d:b8:6d:a1:7c:71:b2:ad:46:13:eb:5f:2d:
41:6d:21:c9:a2:52:32:4d:c5:d0:ba:5f:67:89:ed:
b2:19:7b:97:66:74:fd:86:96:f7:10:5f:1b:7e:1f:
96:c1:c7:6b:4a:70:49:c4:3c:56:f5:c5:76:33:30:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:01:D3:CA:4F:88:FC:E8:D9:CC:0E:48:69:7A:C0:E6:65:6F:76
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:49:fe:6d:d6:79:88:cf:97:0c:ba:93:f3:d9:cf:35:3d:c5:
4f:c9:3b:09:e5:57:f6:16:94:35:79:67:cc:2a:8c:dd:c0:bf:
e3:1e:34:46:ee:97:c3:49:5d:cd:30:ed:82:fe:f3:7d:5d:f0:
5a:f6:b4:f4:91:24:41:5b:f1:51:45:74:91:e8:21:0f:36:0d:
71:5d:74:25:f9:2a:76:f1:02:f7:07:f7:88:48:66:2a:5f:ad:
d6:a2:7e:c7:f1:97:22:d5:80:65:f8:03:87:80:93:d4:3a:ed:
a8:d5:01:17:c9:25:05:72:06:09:bc:1d:82:05:ce:07:c3:b3:
74:ff:86:58:93:2f:40:ff:4f:c4:43:12:f8:2e:a7:26:13:a6:
88:a7:36:6f:5e:b2:63:34:a8:8b:e4:46:f6:47:0f:cf:76:09:
aa:17:0e:90:82:e2:69:58:5b:af:74:54:48:54:44:de:c8:1c:
de:94:bc:0b:51:80:55:3a:7e:2e:bf:ae:75:aa:be:dd:a5:79:
6b:87:97:3e:1b:28:f3:74:ee:dc:47:3a:b7:40:c6:15:00:32:
da:dd:08:1f:1e:f3:c5:2d:a4:ee:cb:7d:64:50:93:e1:f5:b3:
78:82:f7:cb:15:98:a2:cb:54:85:c6:e7:9c:92:71:0f:19:58:
72:fa:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:15 2025 by rpki-client