Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: vX88KekY6mw+JriA4bhWE50xJcZLldGLaC8BC/OmFmU=
Subject key identifier: DA:D8:C5:E1:49:FF:8B:8F:8E:2C:C5:2B:F1:75:96:0B:C3:20:D7:29
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0196523666EA94C884F9514A2B4CAB3310F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 017D
Signing time: Sun 20 Apr 2025 08:00:19 +0000
Manifest this update: Sun 20 Apr 2025 08:00:19 +0000
Manifest next update: Mon 21 Apr 2025 08:00:19 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: Bi8gHcTTdhGCbxj37+3ZptLNMMkpknfAReqy5e0qbM4=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:66:ea:94:c8:84:f9:51:4a:2b:4c:ab:33:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Apr 20 08:00:19 2025 GMT
Not After : Apr 21 08:00:19 2025 GMT
Subject: CN=dad8c5e149ff8b8f8e2cc52bf175960bc320d729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:20:1e:bf:7a:54:ad:51:91:72:93:77:28:
68:ea:ae:14:c1:d2:48:d8:fd:8e:ef:7e:7e:96:53:
11:59:c8:11:17:c4:0b:b7:ff:d1:45:f9:f5:84:73:
28:09:2b:10:cd:ee:6d:3e:1c:87:09:14:dc:b5:a9:
69:67:6a:d4:70:a7:05:07:c5:b7:e9:cf:97:ff:8a:
5a:09:de:1d:77:a2:3b:44:fe:45:ae:3c:ef:53:5b:
c9:50:4c:8b:f1:18:fb:0f:75:d8:81:70:a1:c4:73:
f2:51:0e:2f:a8:0f:88:c8:dd:7f:56:35:cc:30:90:
5f:12:66:0f:9f:51:56:7d:d4:38:3a:0d:b5:c1:6c:
8b:65:09:6d:fd:79:26:26:3b:c3:55:cc:fa:c9:87:
10:c0:cf:52:c4:03:6a:81:3e:9e:84:a9:7b:d7:ed:
28:fa:2f:d2:4a:8c:f3:08:37:58:7c:4e:65:60:0c:
a6:66:2c:d9:f5:fe:4b:d4:85:8f:15:f6:c1:72:ea:
f5:89:59:96:56:3a:a8:38:1b:47:5f:4d:f0:4c:97:
e5:fa:c3:61:93:b6:47:f4:36:29:17:32:59:bb:77:
c4:d2:50:de:19:de:8d:f6:13:e1:cf:a5:db:9d:71:
49:fb:22:22:62:e4:f3:94:07:a3:48:4e:55:f9:e7:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:C5:E1:49:FF:8B:8F:8E:2C:C5:2B:F1:75:96:0B:C3:20:D7:29
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:57:46:4b:90:21:0d:a7:ea:40:e1:fd:20:3a:a9:6c:a0:6a:
30:49:39:9a:34:2c:8d:b1:b2:15:88:b0:43:2c:0d:89:c9:09:
c5:3a:49:21:29:7b:54:22:bc:35:ba:79:ce:bf:28:cb:aa:0d:
1b:14:81:24:c0:af:54:cc:0e:b0:6d:53:31:79:c3:1f:24:3f:
a1:25:73:4e:bf:85:fd:32:e4:84:63:38:69:9f:ad:05:49:f6:
e2:e0:63:82:59:06:cd:be:f6:a8:f6:8e:80:bb:46:80:b9:ff:
3e:4d:14:e5:c9:2b:0a:1f:55:b8:45:cc:40:e6:6e:32:da:cc:
bc:04:9f:32:39:5e:c3:a5:8d:cb:12:f3:fa:68:7b:b9:44:ca:
fd:c8:b7:0d:a6:c9:15:bf:ae:18:db:e9:d2:63:1f:b1:aa:39:
7f:e5:ec:6c:8b:b4:79:0c:15:9b:09:24:3d:13:97:77:4e:6d:
63:2a:aa:f4:1c:d3:8e:01:ca:84:6e:87:49:e0:3b:d7:c0:65:
35:9d:5c:3a:72:5e:f4:23:7c:3f:4c:40:6f:85:0f:fe:6d:6d:
be:a7:86:50:de:47:b9:b2:4f:2f:18:76:85:c1:00:93:43:c3:
54:85:1d:8e:b7:1c:c8:13:9d:a8:68:e4:58:ff:a1:fc:39:0d:
42:ec:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:42 2025 by rpki-client