Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: lTT+VjbXiLy/jEdi5vK6lxsqLMwW7VaP9v/JyUvf6lE=
Subject key identifier: 4D:4C:2E:F2:47:12:76:C0:F2:79:93:24:C6:7B:6E:DD:9A:AD:BD:23
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 0196556E9B038327DD74EFD6A4E6F26DFA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 23:00:34 +0000
Manifest this update: Sun 20 Apr 2025 23:00:34 +0000
Manifest next update: Mon 21 Apr 2025 23:00:34 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: dn1+r2otxqZVwXOj1w66F9DsRHdHwXgSI/E76xX7XGE=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:9b:03:83:27:dd:74:ef:d6:a4:e6:f2:6d:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Apr 20 23:00:34 2025 GMT
Not After : Apr 21 23:00:34 2025 GMT
Subject: CN=4d4c2ef2471276c0f2799324c67b6edd9aadbd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:a6:10:92:ee:f8:56:6d:7b:13:f6:b1:a2:
6b:6c:03:c8:6f:5d:6e:e5:6b:c2:dc:ab:08:37:cd:
f0:a9:ee:e7:6f:0d:07:28:0c:61:b4:88:39:b6:d7:
91:95:04:f8:92:c0:fa:ff:3a:72:7c:a9:97:c0:63:
f2:1f:95:ad:47:8f:c7:00:2d:a1:b1:11:17:aa:67:
4f:cb:7d:03:26:b3:e4:3b:41:2a:66:9b:85:c4:50:
b1:74:62:ee:7a:63:59:71:0d:85:c6:52:9b:b6:14:
31:10:08:78:51:d6:20:78:ae:b8:86:cf:63:00:18:
dd:4c:30:d3:73:40:e7:56:31:30:48:cb:9f:9b:55:
73:d7:b7:60:60:b3:18:1a:be:10:4f:9b:0a:3e:fb:
b2:c1:59:7a:54:ee:79:94:40:91:81:04:cd:ef:f2:
97:da:61:1b:1f:ba:d0:73:e7:ca:46:fa:13:04:d5:
3f:d8:c2:37:7a:f6:c7:da:60:9b:25:97:97:12:fe:
5a:fb:91:53:fb:52:e5:4b:bc:22:a4:67:22:4c:76:
eb:cc:49:19:e4:de:63:59:3b:da:82:ad:1e:93:2e:
35:44:8c:f8:94:58:66:4a:eb:42:8a:b9:ff:12:0a:
fa:59:d8:e4:9d:c1:87:09:81:ee:c4:ef:f7:fa:65:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:2E:F2:47:12:76:C0:F2:79:93:24:C6:7B:6E:DD:9A:AD:BD:23
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e7:44:1c:49:cd:40:3c:b9:fe:c1:a1:4f:29:40:ad:df:f8:
ef:f0:cb:fc:fa:82:e2:03:b2:29:ee:b1:f9:7e:9a:d1:3f:5e:
91:b5:a8:11:a0:4e:2c:37:16:35:a8:db:4f:fc:5b:54:5a:d0:
e3:03:78:86:e6:26:74:6c:3b:c2:67:0e:73:fd:bf:d1:b9:f6:
8a:c4:76:8a:8f:33:39:55:6b:e0:01:ed:af:54:a0:c4:40:22:
28:d4:cc:f6:05:69:88:1f:51:48:ff:b7:54:7f:b0:24:0a:a8:
10:71:e0:6d:d5:84:b3:20:75:b4:38:82:23:a3:c8:88:cf:69:
6a:47:f0:91:92:bd:fe:8a:12:c0:c7:67:4c:25:0a:a7:fe:cf:
0d:23:a7:2d:35:1f:d8:e1:82:2f:cd:e9:63:63:3f:46:64:65:
d0:b4:e8:6d:63:bb:98:1c:b3:4c:7c:ee:94:10:75:6a:e1:23:
d9:d1:85:45:74:58:12:c8:12:cf:44:22:7f:06:b6:25:70:95:
e2:c0:8a:8f:09:d4:0b:89:51:e2:86:5a:35:61:4b:b5:bb:8b:
5e:35:a6:f2:ea:8a:3e:b0:86:28:f2:94:23:ee:4d:2b:21:30:
13:f0:60:da:1b:d3:fb:d2:ac:a8:e5:70:e0:4f:03:37:ac:a2:
05:78:a1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:06 2025 by rpki-client