Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: Pup9QTPsbhXK6g2Ib7SB5A7g4eHqohNr16tCHg8vHus=
Subject key identifier: 0D:91:34:7B:1E:36:82:31:D3:4E:63:0D:5B:45:C6:27:B4:0F:67:13
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 0196488E834EA445FA9F082619F744C99F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 0553
Signing time: Fri 18 Apr 2025 11:00:21 +0000
Manifest this update: Fri 18 Apr 2025 11:00:21 +0000
Manifest next update: Sat 19 Apr 2025 11:00:21 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: 2orGZRg18clukHJg1FZOvGWe0GMsNiGywyX4mHxwi5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:83:4e:a4:45:fa:9f:08:26:19:f7:44:c9:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Apr 18 11:00:21 2025 GMT
Not After : Apr 19 11:00:21 2025 GMT
Subject: CN=0d91347b1e368231d34e630d5b45c627b40f6713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:8b:96:57:34:b9:05:83:f4:b5:06:42:c1:
d2:03:71:f1:9d:5c:d4:73:77:73:1f:0d:7d:ac:83:
de:62:97:e3:06:cb:a3:cc:45:09:6a:ad:75:e4:f6:
03:2c:a3:ac:82:75:86:4f:76:92:0a:dc:c9:bf:4d:
5a:4b:39:01:50:f5:ce:d1:da:ef:c7:6a:cd:4d:ef:
77:b6:d8:80:8f:62:35:9e:d5:50:01:75:18:d3:e9:
ce:0f:60:a9:11:57:2c:33:e0:d3:f0:59:a0:29:39:
e1:ea:c8:33:a6:84:f2:63:c4:84:1f:e0:fc:bb:09:
ce:ae:17:5d:14:cc:2e:dc:c8:a5:47:59:d4:98:65:
cd:84:f7:64:ce:6e:92:b3:63:4c:f2:46:e4:e8:ed:
40:f9:b1:f5:e5:23:87:83:68:20:39:23:f4:d0:2d:
ba:47:52:61:c8:33:64:c4:85:7c:b6:bc:59:ce:11:
24:1c:b4:33:68:3b:24:a9:ec:1f:e4:c2:91:0c:ef:
f5:99:1c:8f:ef:43:42:96:6a:6a:51:a7:7d:e5:d8:
90:2e:2c:94:a7:f7:a7:50:94:64:de:21:57:86:0b:
d0:69:87:35:67:d0:d9:cf:ec:9f:11:ac:44:5b:a1:
de:90:1a:b3:a8:23:07:f7:0f:6b:e8:d7:17:a1:4b:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:34:7B:1E:36:82:31:D3:4E:63:0D:5B:45:C6:27:B4:0F:67:13
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:05:3e:db:76:ee:e2:cc:60:cd:11:a6:6e:b2:0f:3f:3b:6e:
14:c8:4b:d8:98:66:2e:4f:ed:81:af:1c:fb:6f:54:de:48:87:
61:26:b7:97:19:45:87:64:84:9a:20:99:0c:18:a7:71:90:75:
f6:7b:c4:76:30:e8:6e:12:57:90:4d:97:c0:a2:50:b6:81:06:
22:5a:a1:2a:49:26:b7:42:e2:f8:d1:5c:80:e4:e5:a9:b6:50:
93:26:77:b9:f5:53:73:a3:5a:b6:7d:5a:13:d4:05:1b:75:28:
44:cd:62:e4:77:03:c3:66:be:3a:e8:3f:9c:88:83:e5:1e:9b:
2a:32:74:ff:9e:19:5a:42:98:45:79:2e:89:7d:2e:25:57:84:
6f:7a:63:2f:a7:2c:bd:6e:b8:e4:5a:1e:35:fd:a2:22:fa:31:
0c:af:0b:e3:48:77:2f:27:a8:c6:6c:d0:4c:5d:98:5d:ae:2c:
73:61:93:2b:97:83:96:ca:bc:dc:8d:80:87:10:8b:73:69:0a:
48:44:1b:58:6f:66:37:cf:43:6b:66:54:a9:fb:34:84:90:8f:
b0:51:1d:df:f1:18:99:de:4e:c7:df:ea:1b:60:50:08:2e:6d:
6e:48:85:4a:c8:75:52:72:14:14:d4:b0:4a:2d:38:b7:dd:42:
a1:eb:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:50 2025 by rpki-client