Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: FTJHNSMGD7byG63ul7EHPcIfJbX/6g8P3izCD54Z3A4=
Subject key identifier: DE:30:CE:F4:E1:FE:10:60:47:17:8F:B7:D9:14:86:AC:0E:DF:70:E8
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 01965425659C4257D9F3AACCDC15B80A62F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 17:00:59 +0000
Manifest this update: Sun 20 Apr 2025 17:00:59 +0000
Manifest next update: Mon 21 Apr 2025 17:00:59 +0000
Files and hashes: 1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: kKqUNfAH5WrcK7BjJd+Oq9ZyQuA4aqvIYIe/NgPQGtg=)
4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:65:9c:42:57:d9:f3:aa:cc:dc:15:b8:0a:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Apr 20 17:00:59 2025 GMT
Not After : Apr 21 17:00:59 2025 GMT
Subject: CN=de30cef4e1fe106047178fb7d91486ac0edf70e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:93:49:13:e2:e2:fd:49:2e:08:67:dc:45:
f3:52:62:76:8d:01:bc:c6:ce:7a:70:ce:8d:39:48:
d4:43:a8:6e:1f:c1:fb:3e:c9:ea:cc:64:1a:c4:d6:
95:e4:7a:af:08:88:1c:21:53:22:30:85:cc:84:8a:
75:be:ac:98:d2:78:ba:26:cc:f1:8a:ad:e3:54:55:
a8:34:b6:83:e1:52:6a:f2:7c:78:42:19:3a:17:9b:
1f:b2:03:4a:8e:b8:81:23:41:0a:dc:e0:fe:1f:c5:
78:b0:10:42:53:eb:7e:8a:50:04:bc:f6:40:3c:b3:
dd:55:22:db:fa:e8:9a:ba:41:4a:7d:05:e8:a3:d5:
eb:b1:f3:9c:02:fa:59:50:82:00:df:94:87:a6:e2:
c9:4a:59:82:44:89:d6:93:f6:66:07:10:a2:75:03:
02:4d:13:e6:a9:12:68:96:7d:1b:f6:6c:56:70:8b:
ea:6a:bd:c9:ea:e9:93:85:29:b2:32:43:6d:a4:4a:
e8:df:a2:49:ff:5a:c1:6e:cf:a5:d0:f5:6b:66:90:
6c:52:bf:e7:aa:5d:1a:51:8d:b3:d4:8f:30:c8:41:
24:c3:ee:ec:9d:af:3d:bd:88:9f:5e:a2:e6:4f:73:
60:89:9b:fa:8b:db:a8:ee:4a:60:d0:a7:35:07:db:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:30:CE:F4:E1:FE:10:60:47:17:8F:B7:D9:14:86:AC:0E:DF:70:E8
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:21:cf:b9:d4:c7:07:59:bd:5d:f4:aa:8f:14:b9:6d:00:3c:
60:ed:0e:a3:47:81:8a:4f:16:63:49:c7:4a:83:72:04:34:fe:
9c:b6:2f:09:96:45:f1:20:83:32:e1:be:8a:2f:26:56:75:39:
05:0c:71:71:30:fb:6c:6a:0d:73:a8:2f:7d:ac:97:f6:29:0b:
4f:f0:02:73:28:3f:9d:e9:57:56:d1:23:52:e3:f1:6b:af:cd:
43:75:c3:2a:74:19:91:32:66:23:8e:67:c9:ae:4c:5f:57:d2:
15:fc:81:f3:81:7f:01:54:3a:9a:de:7c:c0:37:8c:95:61:3c:
44:84:56:0e:cd:bb:71:c6:bc:05:13:c8:17:2b:be:38:97:b0:
75:38:13:97:49:e5:f1:a6:c2:47:28:d9:70:7a:69:91:09:1a:
48:bb:90:f1:12:46:fe:29:72:f1:e4:ee:2c:31:6c:0f:8f:0b:
df:4d:f0:3f:20:22:23:85:9e:45:f8:7c:90:c7:a5:09:25:94:
43:0c:2b:e8:9f:e1:95:3f:2c:9b:df:1b:91:ca:4a:8d:51:48:
b4:19:7d:30:20:30:e6:7e:b6:67:6f:2a:13:a9:0d:4f:80:fd:
fe:49:b6:55:e5:54:a1:ed:8d:b5:84:2a:fb:b0:b6:fc:63:17:
bd:29:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:14 2025 by rpki-client