Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File: YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier: +j6eT1kRTSWZTuRZoMbdSFU+lrR+TrVO2+AxHfPo1iM=
Subject key identifier: 36:D5:64:C7:11:FD:39:83:8C:0E:B6:83:5D:3E:E0:CF:06:21:5D:EC
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 0196564A6EF7D4F703CF01FFBC1BDBEF0AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 03:00:40 +0000
Manifest this update: Mon 21 Apr 2025 03:00:40 +0000
Manifest next update: Tue 22 Apr 2025 03:00:40 +0000
Files and hashes: 1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: qFzPPPHRhYtvh+u8pym5KmAv1X52aE9Tw07aQ+oxzE4=)
2: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (hash: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:6e:f7:d4:f7:03:cf:01:ff:bc:1b:db:ef:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: Apr 21 03:00:40 2025 GMT
Not After : Apr 22 03:00:40 2025 GMT
Subject: CN=36d564c711fd39838c0eb6835d3ee0cf06215dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:f6:de:30:de:d0:00:99:f6:88:88:65:73:
97:ab:9b:29:2e:fc:be:2e:ba:56:b6:cd:c3:9b:73:
f2:ff:7d:ee:7e:63:dc:e8:fc:cc:f4:42:15:fe:2d:
72:18:8b:a9:a6:b7:f5:00:e6:61:02:87:f1:d4:25:
3a:32:2b:4e:66:6b:f3:4a:d7:26:02:c5:c9:45:23:
6f:41:1c:a5:a8:f5:cc:11:2a:70:e1:41:56:a4:2e:
c5:5a:fd:79:71:00:a2:18:8b:9c:c3:27:bb:ac:37:
82:25:f2:53:1e:1b:c4:e2:a5:3b:ca:ae:35:33:b0:
aa:46:9e:4d:72:6c:02:94:e5:d0:f5:15:28:c3:2b:
02:5c:61:c7:11:61:06:e9:f0:78:19:a5:0b:24:c8:
0b:c1:52:70:50:7b:ad:6b:73:ca:ed:0d:33:44:96:
dd:8a:fe:a5:8f:43:f0:8e:a0:30:03:ad:aa:1d:8a:
a2:a3:bb:85:b8:ff:ae:9c:9d:c5:c2:15:b6:7c:af:
a3:5c:37:49:3b:24:26:69:db:3a:b2:44:d9:d1:50:
82:7f:d6:08:bc:01:07:e6:dd:ec:a8:41:9b:3c:63:
38:e3:d7:67:02:f2:e1:99:98:df:65:b2:ae:46:0e:
01:2a:23:6c:8e:bc:24:01:26:8d:e7:98:3b:1b:e2:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:64:C7:11:FD:39:83:8C:0E:B6:83:5D:3E:E0:CF:06:21:5D:EC
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:f7:1c:8c:c6:fd:78:9e:f5:57:06:9e:86:87:0f:b6:79:
46:bb:6d:e9:5b:cc:e4:f8:d8:98:3f:3f:7e:25:b0:6a:58:5f:
6f:4c:41:c2:81:c2:16:c5:94:65:8b:51:b0:a7:95:9e:dd:21:
ab:d2:f9:6f:c3:bc:6e:6d:f2:82:17:35:65:95:27:bb:d0:d3:
ed:b2:b8:0e:d6:c2:d5:b4:fb:43:2b:29:06:b1:62:42:d8:c8:
3a:48:1c:e7:ee:cd:05:c7:6f:54:a5:33:74:dc:5e:85:56:61:
11:ed:43:11:8e:bc:de:a9:90:30:16:49:03:f6:0d:7b:15:50:
36:22:f0:6c:ab:87:95:92:82:2a:13:e8:ad:3c:c0:62:72:ed:
7c:5f:63:de:c5:37:8d:9b:08:5d:32:1e:25:fe:5d:81:71:88:
dd:c9:0e:0f:99:ec:b6:61:e9:44:5d:0c:8d:24:e4:74:cb:9e:
8b:28:69:aa:d3:e7:40:db:fb:f7:3b:ef:33:b1:f4:d2:ad:bc:
76:8e:c6:23:ab:d7:9c:02:2f:73:c6:51:c0:22:dd:53:e7:23:
31:75:a2:17:96:8c:a6:6c:ce:b6:c6:97:75:df:42:aa:1e:e0:
9e:41:45:0c:83:d1:44:a7:3a:2e:80:a9:4e:e8:20:ac:9c:29:
49:09:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:33:10 2025 by rpki-client