Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: YvilCCQeoRyyl39Inu1GoNF07FTwWLxAiBvvyugG2WE=
Subject key identifier: 72:B8:4F:1E:BF:17:C3:C3:15:93:B4:5D:40:4B:E6:87:0C:86:9C:EA
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 019646A0BABA21CCBA6216BB6CCC0A159D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 1444
Signing time: Fri 18 Apr 2025 02:01:00 +0000
Manifest this update: Fri 18 Apr 2025 02:01:00 +0000
Manifest next update: Sat 19 Apr 2025 02:01:00 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: dDkSZsv1CWilgixGSFsOlOMtbJeQ6Q9h9aQ8qnikVUM=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:ba:ba:21:cc:ba:62:16:bb:6c:cc:0a:15:9d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Apr 18 02:01:00 2025 GMT
Not After : Apr 19 02:01:00 2025 GMT
Subject: CN=72b84f1ebf17c3c31593b45d404be6870c869cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:03:c1:97:34:0e:86:17:c6:c7:5d:71:8b:
70:ad:5e:ef:b2:0f:64:af:eb:47:3d:9f:c3:c5:4f:
92:2c:b1:c0:da:6d:8a:d2:5b:24:b7:f8:df:5a:b1:
b7:30:1a:22:2f:43:45:17:2e:ae:89:5b:0f:92:76:
2b:ee:5a:c8:e1:d5:c9:ea:fe:96:91:d4:a6:7b:f4:
6b:7c:e9:4e:02:e0:82:24:27:a7:32:d0:40:0f:5a:
2b:8e:fc:b7:ee:c0:75:82:ad:79:e0:be:46:ef:f4:
c8:fe:c0:33:ea:5c:e5:5a:b7:86:e6:d6:d8:63:20:
2e:2f:9b:f2:90:69:71:6e:46:65:53:5e:ff:da:81:
e1:f1:db:11:f3:01:5d:bb:e8:28:84:f8:21:fb:fe:
91:b6:e8:a2:61:d9:07:d3:4b:4a:00:ac:63:5c:58:
d0:c9:0e:56:d4:37:bc:41:48:07:ea:38:4c:be:d7:
04:3a:1b:14:27:86:7f:d1:8d:5a:be:d9:31:58:10:
19:9a:e7:cf:09:81:bf:00:5f:e9:a4:8b:a8:e1:5c:
bb:e5:d3:83:88:9e:22:85:56:d3:2a:55:ba:96:6d:
0f:34:a1:22:41:2c:7d:7c:6d:41:8d:28:60:f0:09:
7c:a0:e8:62:98:f2:f9:00:aa:02:7d:55:b5:9a:ed:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B8:4F:1E:BF:17:C3:C3:15:93:B4:5D:40:4B:E6:87:0C:86:9C:EA
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:d9:35:e8:f6:87:74:de:19:86:cb:60:b4:53:3d:f0:b9:
84:b1:3c:70:ed:66:ad:c9:4d:54:f4:52:ce:56:6a:0a:72:41:
1d:f2:42:3b:87:d1:e5:34:fa:dc:7e:2a:c7:80:32:91:c6:f3:
57:ed:ea:98:e8:df:5f:8c:4d:d7:22:13:dd:84:5e:27:43:ad:
7b:87:ea:c1:15:9a:14:85:be:cd:2b:d0:2d:0f:87:11:37:d7:
1b:7a:10:c9:68:8f:3d:17:95:ed:7e:61:e1:ed:b8:99:61:85:
8b:da:62:45:10:bc:d9:c9:f1:3f:98:15:db:33:a6:5c:27:88:
41:69:ea:56:f7:08:c5:a8:ef:aa:12:20:ae:48:af:aa:6d:6a:
97:35:68:ae:be:31:cc:4a:22:cb:86:d0:89:8e:63:a0:17:9f:
ea:90:e6:4f:8a:0e:25:ce:37:21:33:ee:14:44:c3:04:2b:cb:
0b:b5:59:40:33:89:a5:ef:b9:c3:3e:d7:bc:3f:da:9a:35:a0:
bd:32:bc:56:9f:76:64:23:87:4f:27:2e:43:a6:30:e7:c8:41:
8a:46:da:8e:20:ef:19:32:56:29:88:e4:02:76:15:15:2f:71:
b0:b7:e5:5a:01:14:6f:ef:87:aa:9e:1e:bc:e3:65:bc:f4:d4:
dd:d4:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:30:15 2025 by rpki-client