Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: yFn62gmFTAWcxb6BLzNK/S0ToEjluh6VmSGO1F8CHAA=
Subject key identifier: 02:C3:24:57:21:D1:A7:63:0A:00:FE:5F:F1:47:2D:25:BC:D0:5F:52
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 0196519197A60266CFAFBB3BFB0A79AAC07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 1081
Signing time: Sun 20 Apr 2025 05:00:18 +0000
Manifest this update: Sun 20 Apr 2025 05:00:18 +0000
Manifest next update: Mon 21 Apr 2025 05:00:18 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: TIXm4JrEbw35pCdOX/VpjHlbgDW2gIYk3yqpFHUITkg=)
2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:97:a6:02:66:cf:af:bb:3b:fb:0a:79:aa:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Apr 20 05:00:18 2025 GMT
Not After : Apr 21 05:00:18 2025 GMT
Subject: CN=02c3245721d1a7630a00fe5ff1472d25bcd05f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:72:09:d2:2f:e1:52:ff:74:53:7c:d4:be:
17:a2:c0:d3:fa:65:34:b4:91:a2:d2:8a:fc:2b:5a:
ec:d3:c3:48:c4:de:0c:79:3f:8d:84:a2:f8:e3:01:
4f:02:0c:fc:93:15:96:94:50:5c:f5:e3:04:32:31:
01:c2:21:a6:69:56:aa:23:a5:2d:4e:53:dc:1a:d1:
92:a1:fe:a6:6f:ba:bb:60:70:e2:91:49:3d:38:eb:
51:a3:19:6d:12:2c:ea:42:92:bc:5f:c3:0d:e5:8e:
54:ca:3b:48:15:d4:b1:3b:2f:42:bf:70:0a:cc:c6:
13:cf:b7:27:26:90:fe:3e:4b:37:b7:2a:d9:34:c4:
65:db:f9:3e:5b:5c:41:c2:1a:5c:53:b3:d7:ec:df:
3b:2e:f5:ca:49:a1:f5:2b:0b:c4:1a:a7:be:de:72:
70:d3:fd:46:67:a1:3f:98:21:c4:44:5b:39:ad:c6:
92:2c:1c:e5:c1:1e:54:a6:5e:28:55:12:e4:6f:03:
3a:f0:0c:59:38:e8:25:24:c3:ed:1a:43:b6:f1:68:
e0:cc:4c:d7:ed:d2:a2:a9:26:55:68:70:52:9d:3c:
ab:1d:9c:e7:b5:5d:6f:c6:5a:24:7e:3f:dd:d1:d6:
42:b2:0e:da:ca:ce:81:5f:ef:fa:ef:bd:96:b0:79:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:24:57:21:D1:A7:63:0A:00:FE:5F:F1:47:2D:25:BC:D0:5F:52
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:96:ff:8b:a3:13:0e:27:a5:18:0c:b0:5d:eb:36:fc:c3:9f:
9d:24:fe:fb:69:a8:f9:25:f9:92:eb:6d:d4:d0:11:35:af:da:
69:92:5b:16:71:eb:a2:67:e5:97:5f:9b:e4:d8:d0:1d:b0:d5:
85:51:00:32:2e:d8:25:01:25:1d:a5:c4:2c:d5:a0:aa:c5:c4:
d5:96:61:77:3d:e9:c4:81:51:86:4c:43:7e:5f:96:91:dc:5f:
86:26:a4:37:7b:29:1f:ac:00:c6:86:83:7b:94:ff:47:2f:5a:
9b:79:06:54:ab:d3:1c:ab:16:ad:9a:b4:26:3d:8b:b1:df:3f:
a1:ec:6e:d9:b5:ca:71:e3:1d:f3:5c:36:13:57:fa:36:88:55:
8e:03:17:66:5f:7b:c2:7d:67:f9:ac:93:6a:b9:ed:da:43:56:
2d:1f:5e:f8:e0:dd:93:9e:02:d5:4c:a6:a5:c9:28:ca:8f:a1:
a2:50:4e:b9:fa:13:b0:d8:40:9c:f5:48:69:d0:cd:2a:3c:2d:
27:0b:4d:40:c0:16:74:32:5a:71:00:68:65:b6:ce:68:11:21:
fa:19:4c:e4:85:f9:bc:e8:4d:72:54:a1:13:15:35:65:3f:0f:
97:18:0c:58:89:e3:fe:f2:73:56:ce:05:c6:37:75:8a:82:55:
b8:b9:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:12:57 2025 by rpki-client