Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: DPutenK4sqRXttNE+y/TIrPfAT4A/ddvDg13IwjN+Qw=
Subject key identifier: DD:F9:97:32:26:83:F4:21:5A:19:9C:6D:A1:C0:D9:1A:B8:65:13:7F
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019657267C2C7CC3A497E622D752317396A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0924
Signing time: Mon 21 Apr 2025 07:01:02 +0000
Manifest this update: Mon 21 Apr 2025 07:01:02 +0000
Manifest next update: Tue 22 Apr 2025 07:01:02 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: NiHRjcsTU0ZIGpMiSjQ49yYLnLdJrIK2rDJnaeRsjIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:7c:2c:7c:c3:a4:97:e6:22:d7:52:31:73:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Apr 21 07:01:02 2025 GMT
Not After : Apr 22 07:01:02 2025 GMT
Subject: CN=ddf997322683f4215a199c6da1c0d91ab865137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:d0:6d:34:61:eb:d4:26:c4:69:b2:70:aa:
c9:6c:4e:6e:17:16:b1:aa:69:d7:03:8f:ec:19:06:
98:a1:92:65:29:9d:da:ca:33:1e:ed:46:17:01:9a:
34:64:8c:dc:89:72:a3:01:2d:d5:86:9e:f8:81:90:
f4:39:b4:c1:3a:c1:9a:d5:79:51:8d:43:dd:0d:4f:
f1:0c:d6:56:f2:97:5a:28:8a:9c:ad:b3:a8:c7:97:
7a:66:13:cd:b2:46:db:78:e3:52:b6:33:3a:95:76:
bd:6f:4d:9e:0a:03:15:b2:b2:ab:1f:bc:ea:77:0f:
1d:d9:41:fa:af:d9:db:3e:49:39:9a:ad:61:6a:a4:
65:96:ca:00:6a:37:67:90:aa:f3:c5:e2:c7:14:e6:
ae:1d:00:73:8e:b0:08:e2:69:67:59:96:74:e4:a6:
40:68:94:99:b6:f0:d9:da:10:28:f3:dc:af:2d:33:
10:29:40:71:6a:7f:b9:c9:e8:31:b3:93:5d:58:e4:
a5:24:0d:20:dc:82:9b:57:92:81:b6:0f:c0:c4:66:
fe:c0:80:f7:bf:62:69:a6:a4:5e:4f:e0:81:8a:97:
2e:94:bf:6a:65:a6:25:03:8f:c0:66:6b:7c:8c:0c:
98:2b:2f:70:71:49:4f:b3:df:19:8a:64:a3:7a:dd:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:97:32:26:83:F4:21:5A:19:9C:6D:A1:C0:D9:1A:B8:65:13:7F
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:e2:23:70:26:95:d9:52:b8:e2:b9:ee:1e:5c:8e:3c:b0:eb:
ad:44:75:11:67:9c:73:81:b1:1a:8a:b6:59:91:94:8f:19:57:
27:6a:b8:ea:7b:3e:41:f5:20:93:ad:f2:8c:9a:31:e1:6c:da:
f7:a2:8b:b2:9e:83:c4:1b:02:36:a8:cb:a0:90:8d:10:da:fb:
bf:d0:37:65:2b:70:ae:ff:41:97:c3:c6:24:be:57:3b:0b:bf:
a8:18:a5:99:74:a1:ca:1a:28:7b:1d:35:51:e1:d1:6c:ef:d7:
1c:2a:17:8e:85:da:9e:9a:8b:8a:52:da:45:03:b3:91:58:89:
da:7e:5d:f0:ab:ca:69:e4:5f:28:d7:df:36:16:9d:18:17:14:
e9:9c:a4:22:75:4a:30:87:e1:9c:4f:7a:4c:e6:0b:98:31:fc:
12:e0:96:a0:bc:cc:22:64:25:50:e9:76:47:35:3c:b8:7c:db:
70:90:6e:5f:4a:56:34:46:c2:35:49:9d:a3:2e:ea:74:7c:e4:
1c:78:c7:14:c9:1f:8f:ad:7a:5e:c6:2d:1e:c8:26:61:00:da:
31:59:04:0b:b8:ca:b7:a7:0d:90:53:8c:28:c3:46:9b:82:9d:
c8:c2:8d:47:ca:19:69:1a:17:a1:89:5d:1b:ca:0b:48:51:66:
34:7a:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:22 2025 by rpki-client