Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: zzOhWIMtPsSIv5g5Ln5ZQru1d1HPIhFZqFd1necsVxw=
Subject key identifier: 32:F7:FD:61:F3:4C:62:A2:2D:F0:07:F6:77:A0:E4:AC:DD:78:4F:23
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019611A086F8A6AFABCDD7138B02E9A28C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 0274
Signing time: Mon 07 Apr 2025 19:00:54 +0000
Manifest this update: Mon 07 Apr 2025 19:00:54 +0000
Manifest next update: Tue 08 Apr 2025 19:00:54 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: SCIpMbx0UV7ZvT/trlT+E793AtvaSq1KeKwfUm4zNfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:86:f8:a6:af:ab:cd:d7:13:8b:02:e9:a2:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Apr 7 19:00:54 2025 GMT
Not After : Apr 8 19:00:54 2025 GMT
Subject: CN=32f7fd61f34c62a22df007f677a0e4acdd784f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:e7:0c:5d:e6:3a:12:dc:4c:f2:d5:79:2f:
38:7b:a2:39:f1:0b:68:12:df:0f:74:cc:d2:e5:eb:
98:6c:52:ca:a0:99:a8:6c:2d:90:9f:40:09:10:d1:
8b:4b:32:1b:6e:41:5b:de:30:5b:b5:c4:c3:40:44:
c7:08:d4:52:5c:a9:1b:4f:71:98:f9:08:ed:02:6e:
ef:c8:d6:99:4f:7e:5b:c5:4b:1d:c8:6b:57:1d:d8:
0b:ad:dc:54:9c:43:3d:77:10:88:39:69:ad:7d:d2:
95:4d:48:5d:a3:f3:c0:00:2f:95:76:0c:d4:9a:f9:
ea:97:f1:d0:87:d5:4d:a5:fc:36:b7:73:9e:8c:c5:
46:e8:8c:70:4d:f4:56:3b:17:49:50:de:39:90:c2:
27:3a:5f:a5:e7:90:64:77:c2:10:b3:e1:9a:cb:57:
69:c1:ab:c6:d2:51:45:09:92:bd:1f:bf:a8:d3:b5:
86:8e:17:55:b4:fe:6e:92:85:37:3b:7a:8f:ee:35:
24:6b:7f:56:a3:fb:b8:b1:a8:e4:49:a8:17:97:83:
51:41:f6:01:d9:fe:c9:ae:07:ed:9c:13:24:31:b1:
46:40:a0:f1:b0:8c:44:95:c4:15:25:63:ee:bc:ed:
d8:a3:85:13:83:9f:27:76:f2:0b:f7:03:0c:83:22:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:FD:61:F3:4C:62:A2:2D:F0:07:F6:77:A0:E4:AC:DD:78:4F:23
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:6a:56:da:1b:8f:72:32:4a:64:aa:56:9e:8c:f5:25:11:
e7:cb:03:cc:eb:11:b3:71:72:f3:e7:01:01:3c:ee:4a:0d:31:
b9:b3:e2:20:2c:30:2c:fa:22:62:fd:e1:8b:46:d2:68:d5:90:
d2:01:9d:08:cc:0c:4f:42:dc:4a:57:52:31:7b:1f:99:8e:06:
f7:86:ed:ef:1a:f3:4c:7e:5c:21:93:ae:d8:05:5c:df:8b:19:
cc:7a:1c:ca:74:6c:9a:1f:10:4f:cc:ba:2d:17:a6:bb:3c:56:
47:f8:18:ee:c0:3f:4b:30:54:0f:30:1c:49:3e:74:fb:bc:fc:
41:1d:92:67:5a:73:95:cf:fb:f0:17:ed:7b:1c:0e:e8:04:3f:
73:34:e1:af:03:3c:06:7f:78:28:01:f1:49:55:b0:6c:3e:73:
58:e1:51:fa:19:47:41:30:b8:ab:de:22:68:0e:18:e4:5f:af:
ce:7d:61:50:22:5d:3c:48:bf:7a:10:a7:6e:07:ef:d4:5b:d6:
72:7e:66:ca:d4:6f:43:60:1f:93:7a:07:77:f3:59:95:7c:f5:
7b:38:e1:b2:c6:ae:c7:1b:65:0c:f9:17:9c:6c:3f:0a:83:f8:
63:5a:85:2d:be:df:21:23:e6:95:13:5f:1a:78:d9:59:80:d6:
5c:3b:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:18 2025 by rpki-client