Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: NS66D9Ybw4mbjCD0ac4L1YEgwUdy/6CJebjYHZ4fUf4=
Subject key identifier: 2F:C1:B4:79:B9:D2:F0:54:2B:A2:5C:5F:25:EF:03:2B:A7:F9:6C:5D
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 01963F54D4E6B4DC1ECF8FDA7625845454F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 16:00:45 +0000
Manifest this update: Wed 16 Apr 2025 16:00:45 +0000
Manifest next update: Thu 17 Apr 2025 16:00:45 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: cDZdJcRJjW1VwTT+Wy8sG4Oju1XMpZHXvQJSl56bUgY=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:d4:e6:b4:dc:1e:cf:8f:da:76:25:84:54:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Apr 16 16:00:45 2025 GMT
Not After : Apr 17 16:00:45 2025 GMT
Subject: CN=2fc1b479b9d2f0542ba25c5f25ef032ba7f96c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:ec:e9:ad:f4:fc:b3:15:32:10:81:fa:bb:
1e:e0:31:65:76:35:b0:8e:17:bf:80:3b:59:91:ab:
f8:52:f5:11:65:41:7d:8a:b5:9f:7a:d4:56:32:13:
61:42:b7:34:a0:43:8e:31:5b:e6:e8:73:25:f4:15:
66:94:a5:fe:bd:fd:46:a9:5e:3e:f7:e5:2c:75:fa:
ee:0e:58:72:12:08:74:de:22:24:89:5f:0b:02:e9:
41:57:0c:36:60:14:f7:ba:ea:00:be:19:3d:29:01:
a9:41:1c:df:dd:a3:1a:d9:0c:80:b2:20:84:12:82:
22:01:e1:9c:76:03:78:67:60:10:34:e4:26:29:77:
bd:b7:2e:58:27:fe:bb:05:c3:17:01:67:d7:9e:f3:
4d:d7:7e:3d:6c:ce:c8:b8:b6:f6:0f:a8:c0:89:fd:
34:de:18:9f:8e:68:f8:13:10:da:48:ff:a2:fa:67:
d0:2b:44:cb:5c:57:04:07:5f:32:2d:a1:ed:8f:7e:
9c:2b:80:54:3f:a8:08:68:c0:ca:06:8f:fd:67:55:
7e:bb:d1:be:81:a2:71:fe:20:c0:f7:e0:6e:78:97:
68:c5:df:04:c1:b5:f0:12:24:24:7d:2f:fe:fb:c5:
c3:96:12:72:a9:b9:c4:8f:bf:c0:a2:cf:27:51:92:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:B4:79:B9:D2:F0:54:2B:A2:5C:5F:25:EF:03:2B:A7:F9:6C:5D
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:a3:f0:ef:1c:8b:30:9a:27:e2:ee:6b:5a:44:03:07:3f:
2a:a2:d3:91:d6:7e:c9:2f:98:e4:0b:47:37:8e:f7:50:de:9f:
7c:61:b1:74:e1:ec:c5:fa:d5:17:bf:83:cb:46:bc:04:da:af:
cd:c4:f9:79:21:88:97:34:2b:84:59:8e:9d:54:ab:d9:dd:3d:
24:9f:f1:62:a0:36:44:a6:3b:be:18:42:ea:bd:98:bc:87:14:
05:c8:ab:35:29:40:6d:f0:3e:d9:c4:93:31:25:42:5a:54:5b:
9a:41:b2:5e:32:1b:ca:2d:91:68:e9:56:92:5f:12:18:dd:51:
f6:84:39:60:65:90:ed:3e:60:bc:22:cf:73:a4:e9:42:71:79:
ad:ed:eb:10:8b:01:28:ad:01:8b:83:94:ea:d7:5b:7f:23:78:
61:8e:c8:e5:8e:00:29:74:a8:2f:fd:0c:5f:79:58:64:78:6a:
9e:ac:2f:19:6e:e2:6f:98:f8:23:c3:53:b3:36:58:03:f9:9d:
a4:ef:bd:f8:30:1d:7e:38:eb:ab:bd:48:89:06:e5:08:b1:7a:
e4:25:5f:3b:e1:1e:6b:b9:29:c4:f5:5a:a4:16:5a:07:83:1e:
71:8c:be:58:96:d7:3e:30:65:68:84:5b:db:65:6f:62:b2:06:
29:8c:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:40 2025 by rpki-client