Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: mPspu886T/pZT0QM3z857yaFOT4HPj7hNGG22ONUwAM=
Subject key identifier: 32:D1:32:DB:65:5C:F1:30:2F:FC:CB:AF:8E:0A:CD:E2:B8:31:DB:B8
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 01964EFE818E29225BBA414233D24F51398E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0A00
Signing time: Sat 19 Apr 2025 17:00:24 +0000
Manifest this update: Sat 19 Apr 2025 17:00:24 +0000
Manifest next update: Sun 20 Apr 2025 17:00:24 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: Tu1VTf96/ajQDuFZqY4x+/H/3RLe43iUqmjPqvHsNt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:81:8e:29:22:5b:ba:41:42:33:d2:4f:51:39:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Apr 19 17:00:24 2025 GMT
Not After : Apr 20 17:00:24 2025 GMT
Subject: CN=32d132db655cf1302ffccbaf8e0acde2b831dbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:89:6e:8a:15:d4:cf:eb:ad:6c:b7:79:a2:
2f:7f:3d:c9:9f:ba:fc:79:0c:2e:3d:de:81:f0:93:
89:19:19:27:03:d2:f6:81:68:9e:21:4d:54:a1:92:
1a:11:9c:89:3f:c8:e8:3c:b1:ed:27:01:15:22:cf:
5b:0e:e3:3d:49:0a:f6:6f:78:15:35:00:4c:86:cb:
c4:18:41:89:96:5c:6a:1a:3b:ba:97:44:d4:bf:c6:
5a:37:72:23:e6:a8:68:73:6c:33:55:d7:a2:d6:9a:
86:90:d1:a8:a6:46:81:16:aa:36:97:42:75:3c:df:
95:3d:0c:8d:65:39:8a:04:0f:fb:c0:7e:62:58:f8:
1f:55:9f:ac:41:ee:b9:00:6c:a8:eb:a8:18:68:20:
57:1d:6a:5b:d7:b2:01:ca:c8:5f:40:f6:51:81:06:
b0:8b:90:47:c7:92:52:57:e5:e7:46:a6:6e:f4:6f:
42:26:ba:7c:8d:9c:e5:29:95:4b:e4:53:61:9d:40:
cf:66:d5:12:ee:62:ef:10:b6:a0:a9:df:34:e7:97:
70:94:1d:db:08:a1:15:32:11:24:e5:84:7e:6a:64:
2a:bd:77:76:7b:b9:c4:de:06:e7:88:4f:0f:33:e3:
8a:4f:08:bd:fc:a9:c4:92:48:d0:52:fe:fc:bf:57:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:32:DB:65:5C:F1:30:2F:FC:CB:AF:8E:0A:CD:E2:B8:31:DB:B8
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0c:44:45:ad:77:85:ec:c2:5a:ef:09:09:3c:b5:0b:87:2e:
78:be:a2:56:de:1d:cc:46:11:2f:17:1b:8c:15:fd:62:63:58:
e4:eb:4d:60:fa:a0:3f:60:89:d4:c3:91:ef:92:c0:75:b0:f8:
45:d1:cf:25:69:f6:e9:23:7d:35:cf:97:67:e9:da:55:29:fd:
41:ff:0c:42:7d:e3:ca:81:6d:2f:fc:c2:89:b1:6b:80:83:68:
6a:45:fa:ac:93:dd:32:9e:1b:0e:b1:4c:bb:46:01:80:46:a0:
1a:e1:0c:38:4d:19:bd:60:02:80:e4:97:ab:8e:bb:78:ba:ac:
e7:1e:89:e1:38:36:cf:ca:cd:5a:4a:5d:3f:c8:a2:b2:a0:be:
8d:bc:26:63:a1:99:8e:be:9e:b2:4c:30:8a:fb:67:28:28:f4:
ee:4e:2f:22:7a:a5:3f:db:b7:5e:74:14:a8:7a:b7:3b:b2:aa:
b8:45:4c:9e:bb:31:b4:ce:02:8a:66:e7:0d:ec:ae:5d:45:93:
6d:62:21:ae:c1:66:87:ae:29:81:b1:2f:6a:a9:82:ad:67:84:
6f:0f:b9:cd:94:53:0a:dd:ee:6b:a6:e0:43:07:9d:9c:db:1e:
1e:01:2e:b1:dd:2e:34:92:42:4b:3b:64:a9:0c:4c:44:5b:ae:
08:01:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:03 2025 by rpki-client