Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: fEaMtHx52m11+0TNNY2S+ulvegF2qB3IG6Hrd8N7eNU=
Subject key identifier: 4F:B1:6E:9C:F7:14:03:58:A0:49:68:4E:05:BA:A7:8F:79:9B:9F:A0
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 01958FCEE249A7662F88BCBA94ADA85DDC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 1498
Signing time: Thu 13 Mar 2025 14:00:54 +0000
Manifest this update: Thu 13 Mar 2025 14:00:54 +0000
Manifest next update: Fri 14 Mar 2025 14:00:54 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: Knttbhrj56TNPWxoqHMHBne+FoOe11HKtenEQscCnj0=)
2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:ce:e2:49:a7:66:2f:88:bc:ba:94:ad:a8:5d:dc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Mar 13 14:00:54 2025 GMT
Not After : Mar 14 14:00:54 2025 GMT
Subject: CN=4fb16e9cf7140358a049684e05baa78f799b9fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:95:37:87:3c:99:2b:ee:7a:22:7c:f6:a5:
02:e2:07:93:6b:ec:64:db:40:2b:89:ff:a6:48:f1:
a4:29:55:93:d2:17:39:90:90:f6:60:0f:43:c6:bb:
23:d1:e1:36:07:3c:17:57:4f:f9:6a:7f:f0:5a:c2:
69:76:7c:0e:1b:73:d2:a3:bc:53:a9:d5:05:05:75:
1a:3d:0e:58:2d:77:0e:e9:88:bc:60:15:b9:de:dc:
ce:4a:19:38:3a:43:88:1e:8a:23:55:54:af:7c:11:
de:63:bb:82:78:3f:af:a2:9b:ae:c8:de:1e:60:98:
66:ba:6f:b0:69:6f:68:5b:52:c3:eb:5b:d4:07:fc:
19:3e:e2:53:54:d3:a4:2c:35:10:2c:c3:ee:d0:45:
7e:ad:8e:5f:d8:2d:bd:99:13:9d:63:da:a8:c7:ac:
ee:0d:f6:d3:14:89:a9:29:cd:3d:e3:e1:89:17:d7:
9f:90:3f:fb:72:5d:d3:a3:2b:21:e5:dd:ff:b1:16:
57:46:5e:db:e8:36:6e:b2:11:0e:46:19:d2:96:17:
30:7e:99:a8:a3:0a:36:79:9c:b3:e5:fc:82:2e:83:
ab:40:cb:41:00:a3:29:4d:64:cb:9c:8a:19:71:16:
9d:df:22:e6:b9:d7:e9:f6:8f:25:59:33:61:0b:a5:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:6E:9C:F7:14:03:58:A0:49:68:4E:05:BA:A7:8F:79:9B:9F:A0
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d4:ec:5c:2f:54:8c:a4:8d:0f:16:fe:88:f4:34:c9:4b:d5:
f4:07:a7:dd:95:79:8d:1f:66:ec:0f:3e:82:78:d6:22:2e:19:
66:45:92:1d:30:f1:b2:3b:e9:6c:41:ca:b4:8d:c1:73:4a:a1:
bb:da:52:67:ed:2b:c6:a6:e4:36:ce:d0:7f:09:6b:4e:71:e0:
27:ea:41:a5:ea:6b:2b:06:68:c9:bb:8f:a5:5e:dd:65:18:67:
fa:22:88:7f:0b:07:63:64:b4:a7:1c:b7:ff:c2:a5:1f:02:69:
b6:10:27:c4:b4:13:36:78:b1:f9:a4:c7:c7:d8:48:be:d6:17:
31:de:a2:18:d8:5c:1a:70:e5:12:33:e0:a1:1a:08:1b:62:f0:
2d:da:7b:79:c3:ba:0d:4e:06:1f:4b:10:a3:eb:18:00:b0:97:
d1:cd:c0:c2:4b:48:da:6a:56:17:81:31:2d:8d:1d:cf:04:40:
36:2e:b5:c1:af:be:7a:92:d9:c7:92:b2:31:ca:0b:80:11:ad:
1c:b9:48:22:1a:33:73:c3:a3:cc:71:18:2b:b7:df:d3:17:74:
ce:fe:fd:13:93:93:7e:06:28:2f:67:2a:f3:11:a8:2f:72:e1:
08:da:e6:61:92:3f:83:74:3b:b8:f9:d4:fd:aa:83:36:84:0c:
00:a6:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:49 2025 by rpki-client