Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: 1Iy315NURG9dJDoGs4AhM6hlTDAgmKo0QjLjxr+d3OM=
Subject key identifier: 56:47:BE:31:D1:7A:81:9A:89:09:80:3B:6A:02:F2:4E:AB:59:05:67
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 01963EE6B19EAD81E22DE299A66E7FC2DF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0964
Signing time: Wed 16 Apr 2025 14:00:28 +0000
Manifest this update: Wed 16 Apr 2025 14:00:28 +0000
Manifest next update: Thu 17 Apr 2025 14:00:28 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: Hb6qbNTaKkQFdeBUvbq84WOzHi0E9cHnpPDocCHK8Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:b1:9e:ad:81:e2:2d:e2:99:a6:6e:7f:c2:df:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Apr 16 14:00:28 2025 GMT
Not After : Apr 17 14:00:28 2025 GMT
Subject: CN=5647be31d17a819a8909803b6a02f24eab590567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:37:c2:bb:d4:ea:ba:71:46:54:c0:f8:a7:
4e:43:d9:fc:35:5f:40:fe:4d:63:a7:e8:72:ea:d1:
24:b7:8a:b2:4a:eb:35:5e:ad:12:de:c3:cb:53:76:
26:20:5a:99:ec:44:6a:ea:d9:97:9c:38:77:13:05:
88:4f:3b:a9:cf:4d:af:d8:8e:55:8d:f6:0c:48:c1:
b0:85:81:6f:36:0a:fd:94:70:9e:da:6f:ec:23:d7:
e1:e3:21:06:70:3e:28:f9:d5:50:71:09:a2:ee:59:
59:55:9e:70:ca:b5:c8:f7:83:39:13:38:85:3e:d0:
26:9c:1f:1c:8f:24:e2:0d:45:65:7b:21:ff:a8:6f:
98:7d:9f:c2:59:65:dc:fe:97:b9:72:de:9f:7e:28:
f2:c5:52:ba:94:de:6a:ed:6e:7f:01:6a:ab:05:16:
27:93:87:25:d4:82:39:11:62:0e:aa:cb:74:01:50:
86:4f:d0:ca:5c:79:f7:af:43:86:71:3d:fc:20:ef:
44:b3:06:a8:34:31:7d:92:8a:6d:26:13:bd:11:83:
9e:9b:b4:60:44:f8:a0:ee:ae:c7:c8:df:1e:b4:c4:
07:e9:4f:e8:9f:ef:76:f1:5e:d4:dd:91:34:b1:62:
23:69:b9:b1:42:ae:24:4c:be:cb:9b:21:7c:55:18:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:BE:31:D1:7A:81:9A:89:09:80:3B:6A:02:F2:4E:AB:59:05:67
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e0:21:4f:8b:73:05:08:5c:5d:2f:ae:92:cc:f3:f1:5b:31:
00:36:b3:bd:20:39:76:80:d9:27:20:87:6b:a2:5f:f3:8d:83:
89:53:e2:e2:ad:f0:55:c6:2b:0c:79:01:b8:2c:04:28:84:30:
fa:89:30:9a:f6:c7:7e:b8:ed:37:06:3c:0f:9a:02:6e:18:dd:
49:79:9a:4e:8a:42:80:1b:2e:e9:2d:08:a3:c3:fb:42:8f:a6:
35:c7:36:03:02:bd:af:ca:43:f4:86:19:4b:88:d2:55:6d:e3:
32:f8:ef:c6:b9:f9:4d:c4:b4:ab:79:12:b1:2e:98:ff:30:b6:
5e:fe:11:6e:c0:7c:89:90:0e:f5:8a:a2:76:73:2b:65:c3:0e:
96:11:21:6d:78:34:52:9d:bc:83:62:28:a4:b6:89:7a:a8:64:
2c:34:9d:7f:3b:15:e2:03:36:ec:ee:8a:4e:43:3a:68:24:b1:
16:0d:fe:cb:5c:c6:27:03:ff:02:55:48:a5:e7:e1:f0:e0:39:
a6:51:41:e2:86:fd:e9:46:d0:5f:c9:22:0b:e4:0a:9e:c4:96:
a9:49:5b:3a:ee:55:e8:cf:b8:ee:d6:89:39:ce:a1:93:40:24:
18:16:cc:ab:68:7c:c2:c9:91:bb:e2:21:a5:23:ff:a7:2e:0c:
4d:ae:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:00 2025 by rpki-client