Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: yNhyLEnuq7K12At4/Bo9zifTbmc99+Vkwmzos+J9wzI=
Subject key identifier: 5B:0F:58:82:5E:A0:A8:85:4A:70:97:27:AC:B3:56:95:BA:1F:44:18
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 019642FA3010D22C3359F1F97DA9A23DFE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0D64
Signing time: Thu 17 Apr 2025 09:00:14 +0000
Manifest this update: Thu 17 Apr 2025 09:00:14 +0000
Manifest next update: Fri 18 Apr 2025 09:00:14 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: ww7qPtyyD/QdKYsHSdqyt091YrXln5DlsJH/Nb1wFLM=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:30:10:d2:2c:33:59:f1:f9:7d:a9:a2:3d:fe:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Apr 17 09:00:14 2025 GMT
Not After : Apr 18 09:00:14 2025 GMT
Subject: CN=5b0f58825ea0a8854a709727acb35695ba1f4418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:08:28:fa:05:a2:96:6a:7c:c6:60:e9:21:
d2:fb:59:74:ee:ac:60:6b:27:85:d7:49:28:1e:58:
20:6f:c7:7b:65:54:ef:61:34:1c:0c:78:0c:7e:a2:
30:71:a8:48:0c:cf:a4:26:6e:82:29:ff:2f:38:bb:
25:b5:59:b9:03:55:23:3b:4e:9b:27:56:50:0c:86:
be:2c:f9:07:db:61:9d:8f:20:35:ef:2b:e1:cf:66:
b1:b4:3c:71:ef:95:fc:68:8c:84:88:13:04:80:8f:
08:9c:99:a2:5e:e4:b6:c1:60:b4:e8:7d:e1:8e:97:
e6:a3:12:1b:1d:1f:24:61:08:66:7d:23:d5:07:50:
fb:73:bc:5d:75:50:b6:80:86:28:bb:2d:f3:b0:4b:
9e:67:9d:15:5c:86:4c:bf:b3:78:47:85:62:10:52:
59:db:71:c0:a0:7a:56:ab:46:fc:60:cf:28:ad:f4:
43:96:7b:8e:8f:af:f6:e5:2c:0e:02:3c:9e:f1:53:
b3:cd:48:d7:37:a5:92:22:1a:75:7c:2a:0e:69:b0:
3d:9c:75:45:65:10:87:4f:b5:d5:7e:2c:12:9e:96:
49:36:fd:f8:8e:c7:78:bf:aa:20:f3:5f:1a:cf:3c:
bc:3f:79:3d:c1:b1:4d:e5:1e:ae:7a:f4:a2:9d:69:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:58:82:5E:A0:A8:85:4A:70:97:27:AC:B3:56:95:BA:1F:44:18
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:76:fa:f4:65:9e:bf:7f:5e:48:07:60:18:27:7a:7e:58:f3:
8d:72:52:6a:a9:54:db:35:60:f7:1e:4a:1b:59:9e:d5:10:d8:
0c:b1:da:7d:1f:90:f5:65:39:77:47:ec:d9:1f:c1:66:e2:aa:
9f:bc:69:8f:f5:2f:6a:3c:e8:bd:49:5e:16:47:e8:46:3d:cf:
d8:1c:f6:41:1c:c4:6b:07:9d:17:41:bd:ac:f9:17:d2:1d:62:
63:a8:b0:09:4e:2a:68:7c:c1:5b:c2:32:df:2e:54:b9:86:68:
7e:46:29:bc:f0:6d:56:9f:77:3f:aa:ef:ef:ca:35:de:b0:74:
21:e2:bd:57:cb:91:00:81:78:37:53:e8:4e:f4:37:6f:8b:8f:
9e:35:47:71:3e:47:21:50:52:7b:3e:b2:5c:60:46:39:b6:3c:
49:b7:49:5b:d2:6d:f8:73:f2:1f:d7:9f:43:f7:89:b1:4d:74:
30:d2:4b:be:95:61:24:b3:0d:86:76:5c:68:bd:f7:0f:aa:ab:
63:6b:c4:37:85:9f:c3:ed:fa:bb:d1:0a:09:3d:fc:87:81:41:
1c:77:e0:27:76:b7:3f:d3:2f:a2:9d:0b:90:a1:0f:0f:52:2d:
0f:70:55:a6:26:06:d8:e0:8a:ad:75:d9:f9:48:4c:b8:e3:e0:
dd:3d:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:19:22 2025 by rpki-client