Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: ThIhfCwAbunED6BVvxqeyReTcig+cv4Hlp263yf4/H8=
Subject key identifier: 79:44:9D:6F:D2:DC:20:54:32:4D:6D:00:50:46:25:2D:00:A9:60:C4
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01965E3B05E86081452790F3CCB68FEC5303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 16:00:48 +0000
Manifest this update: Tue 22 Apr 2025 16:00:48 +0000
Manifest next update: Wed 23 Apr 2025 16:00:48 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: xWJxRMbq1M2ge+id6wplc+rugMsFiQybIfTmsxArYvM=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:05:e8:60:81:45:27:90:f3:cc:b6:8f:ec:53:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Apr 22 16:00:48 2025 GMT
Not After : Apr 23 16:00:48 2025 GMT
Subject: CN=79449d6fd2dc2054324d6d005046252d00a960c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:cf:ec:04:c9:aa:15:3d:c9:49:87:4e:93:
29:37:9b:83:18:d0:71:50:6a:e5:f6:50:31:f8:64:
6a:d5:72:cd:7a:cd:41:0c:6a:bf:99:b8:61:d8:6d:
f6:4d:b5:c8:41:65:48:ad:7d:4d:dd:c9:be:2a:f6:
e3:40:e9:7d:d3:a4:5a:d8:19:97:3b:df:5c:e2:ed:
cc:07:49:87:68:89:c2:61:c2:0e:28:13:06:cd:ac:
50:5b:ad:1f:9d:ef:66:df:74:a7:12:88:f0:e3:c4:
95:b7:31:0f:40:cf:d2:bc:55:e1:c1:79:87:47:0c:
a9:bc:c4:b2:ca:35:2c:33:52:27:e8:b9:30:3d:8d:
cb:6e:48:0a:81:5e:35:78:fe:14:40:48:cb:20:f9:
96:b1:2c:0d:f3:de:df:06:d6:28:10:3c:3b:d4:9d:
f2:c6:e8:7f:70:97:58:4d:16:c2:c5:0a:a2:d9:f8:
23:32:fb:7e:66:e6:c4:8a:ff:32:8e:5e:f1:7e:26:
c7:5c:8d:cc:d2:a4:87:b1:0b:31:72:51:a5:a4:79:
18:d7:27:38:aa:56:97:f3:0c:3d:cb:90:90:b1:81:
ed:09:82:ca:5f:f3:dd:60:85:13:41:87:82:13:98:
9a:9d:2a:b8:15:6f:de:0b:63:18:3b:02:46:c9:26:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:9D:6F:D2:DC:20:54:32:4D:6D:00:50:46:25:2D:00:A9:60:C4
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:45:6a:ec:09:f9:a2:f7:fb:6c:a5:a2:78:53:e8:37:3c:
3b:f7:7e:3e:36:6f:90:f5:15:0c:fe:31:5f:6d:6e:25:5b:38:
9b:1a:f7:f1:15:e4:a0:49:ec:c0:2e:35:fb:ff:5e:e2:9f:4b:
aa:51:aa:73:84:53:00:ef:0e:2b:d2:16:e3:06:0f:84:b0:e3:
bd:1a:c8:04:51:25:1c:4c:dc:94:30:22:b5:9e:6a:d0:a1:32:
dc:17:55:28:7f:24:bf:04:79:39:5d:14:32:47:6c:17:0c:db:
61:05:0f:1f:a5:09:88:39:45:f6:83:ff:27:8c:e2:31:ae:70:
ba:9c:09:51:bd:ba:15:9e:1a:37:0a:72:e5:ab:7e:81:c6:d6:
6c:eb:a7:a2:5d:71:4b:f1:0d:75:70:ce:48:48:08:95:97:2c:
6b:9b:89:8c:ef:eb:41:52:17:18:14:2c:ac:fb:1e:e9:1e:12:
ef:49:68:bd:d3:58:43:2f:b9:8d:03:3e:68:69:67:1b:91:ba:
10:46:15:b1:54:4f:4b:57:50:72:1e:50:27:a4:c9:68:d1:28:
df:24:72:bc:93:64:23:00:43:21:18:2c:b2:d5:ff:0e:04:a1:
75:e5:fe:99:f4:3a:1e:38:d8:ae:f0:26:c5:1d:55:28:ad:c4:
8c:be:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:01:55 2025 by rpki-client