Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: jSvl33Pni7K8K7FV/vnzbdEMunT83J+27PboCszCqI0=
Subject key identifier: C2:69:CB:38:4F:CA:B2:96:D2:73:06:BC:5D:C2:45:AF:2C:9D:5C:95
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 01965E3AB10B03A23FF6D450F2B0F8299393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 16:00:26 +0000
Manifest this update: Tue 22 Apr 2025 16:00:26 +0000
Manifest next update: Wed 23 Apr 2025 16:00:26 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: OtxNeB92DZpUy/JgGCZFjSSRm6A3BHsQNZf+IjUfLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:b1:0b:03:a2:3f:f6:d4:50:f2:b0:f8:29:93:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Apr 22 16:00:26 2025 GMT
Not After : Apr 23 16:00:26 2025 GMT
Subject: CN=c269cb384fcab296d27306bc5dc245af2c9d5c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:e3:cc:7c:c9:60:d5:9a:a5:01:23:63:cb:
ac:e7:5e:19:02:d4:22:d9:cd:09:37:6f:16:15:ae:
a9:cb:e0:8e:a5:63:be:a4:78:4d:ea:b2:84:cd:e7:
43:d9:2f:ac:c3:e4:67:68:d4:1a:d7:8a:67:dc:95:
7a:77:ba:53:a1:ed:29:65:15:78:e3:8e:33:33:63:
a4:b2:4e:63:8a:a9:72:9e:e5:b1:fd:26:c3:78:de:
03:06:76:8c:98:ba:d4:26:fd:81:49:2f:2d:7d:43:
47:95:12:59:b4:a1:48:f9:71:58:97:29:44:c8:19:
dd:0a:65:31:eb:5b:67:51:bf:68:d0:13:4e:66:e7:
9d:ed:b1:10:da:d0:cc:4f:ab:89:9a:3e:24:5a:d3:
e1:d2:91:21:01:eb:9b:7b:b4:26:b0:57:d3:f1:81:
f0:62:85:1c:f7:78:87:6b:f0:9a:18:f1:4e:9a:36:
3d:37:1d:b3:ef:72:ee:59:88:b2:fb:de:0f:69:d9:
3b:19:bb:9c:58:f0:9c:38:ae:09:74:5c:4c:9d:36:
68:34:d8:03:8d:45:24:e6:0f:b2:73:2d:db:b4:69:
23:81:11:ea:a7:4f:8f:df:69:92:23:be:1f:fc:d3:
a2:7e:9a:94:93:96:93:d6:60:d0:ea:10:25:c8:87:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:CB:38:4F:CA:B2:96:D2:73:06:BC:5D:C2:45:AF:2C:9D:5C:95
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d8:4d:42:7e:3f:9d:0c:c0:99:02:09:0a:1c:ee:f6:6c:fc:
bd:e5:b7:d7:a6:fe:47:8e:c9:90:6d:fa:44:8e:59:f3:be:4d:
ff:06:77:d1:cf:42:a6:de:f9:40:62:c1:95:fc:04:77:54:cd:
c5:dc:f3:f7:84:06:89:28:4e:56:0d:5a:b9:bc:ff:b7:94:b5:
79:a5:4d:22:5f:61:54:de:17:ba:21:ac:34:c6:44:66:5d:75:
bc:16:5d:03:8c:0a:19:27:64:28:9e:df:8c:bf:3f:38:a1:e6:
97:58:d5:79:38:0a:56:d0:e3:31:e5:2d:a3:24:38:50:c8:0e:
89:cf:e8:e7:4e:2c:26:7c:32:5a:c4:d6:4f:7c:a8:f5:70:84:
7d:f5:d1:f0:c2:34:26:49:8e:c3:c8:d8:b6:26:0e:b5:dd:55:
41:a8:2c:7c:9e:2f:90:c7:f6:d0:e6:aa:be:5d:12:10:bd:79:
84:74:ee:26:94:85:86:62:cc:5d:c7:b8:57:3f:e1:bf:ed:7a:
9d:dd:e7:87:08:76:55:e0:76:8f:cc:cc:5c:8f:79:65:fb:08:
8c:95:dc:88:d4:62:9b:69:dc:56:28:1f:b4:d7:91:f1:fb:ca:
47:42:8b:eb:f9:dc:d5:3d:3f:e7:c2:78:b4:7a:93:3b:29:2f:
3e:9b:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:10:42 2025 by rpki-client