Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: g03UP2y2djt0lntwtMkVTf4uVVi2A0fUP9NOKjXoQ5I=
Subject key identifier: FC:6E:A5:11:E2:A2:C3:AC:D7:7E:ED:3C:1F:B2:94:22:20:A7:23:CF
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 0196B8235A186F9D7677A8C5E27CE0C8A3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 1406
Signing time: Sat 10 May 2025 03:00:46 +0000
Manifest this update: Sat 10 May 2025 03:00:46 +0000
Manifest next update: Sun 11 May 2025 03:00:46 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: Op4jsNxayRgjPE0YsuVqpNkWUrFxsVl4pFD5bW1g1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:5a:18:6f:9d:76:77:a8:c5:e2:7c:e0:c8:a3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: May 10 03:00:46 2025 GMT
Not After : May 11 03:00:46 2025 GMT
Subject: CN=fc6ea511e2a2c3acd77eed3c1fb2942220a723cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:99:08:f8:57:bd:cc:1b:8f:3d:da:0d:10:
cf:4d:df:55:de:73:aa:1e:88:5d:3f:98:02:55:d6:
16:ec:be:f2:94:0c:ab:e6:0b:b9:d2:8d:82:a8:6d:
ed:b3:f8:9d:af:ed:dc:ff:c6:53:60:e6:f6:d6:88:
54:2e:ab:65:fd:6b:16:83:66:51:8b:17:fa:17:be:
e2:28:67:e9:c5:ca:f5:f1:fa:ab:bc:58:5c:7b:5b:
b4:25:81:07:22:51:5f:aa:ae:2e:32:5f:51:65:0c:
e3:70:68:67:f7:8b:29:c6:8c:67:f4:36:88:75:00:
3e:22:da:73:20:a4:6d:a3:c5:bd:4c:4a:aa:07:b5:
98:51:77:23:b2:f0:6e:59:f1:5b:22:6f:4d:1b:c2:
59:95:02:13:3a:9e:92:85:0a:96:6d:21:7c:7b:8b:
eb:87:a0:bb:2c:81:03:f7:a9:f2:2f:4b:0e:60:f2:
29:0c:eb:a5:6d:28:2b:46:e6:f0:e4:a5:ca:f0:d2:
21:89:11:3a:6e:2d:81:39:e9:e6:98:6a:53:c9:7c:
53:9c:21:34:34:a2:96:f0:fe:0d:c3:4c:68:d7:0b:
55:d1:c9:dd:cf:81:c9:50:20:8c:b8:f1:b4:17:b2:
b2:69:94:96:60:18:61:17:d9:f6:59:23:ba:91:3d:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:A5:11:E2:A2:C3:AC:D7:7E:ED:3C:1F:B2:94:22:20:A7:23:CF
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1b:1c:0f:f2:8e:9d:b1:ab:ac:3c:82:c3:b2:7a:4a:40:4a:
06:95:a8:05:4e:c4:00:9d:2d:30:77:00:f7:43:20:63:eb:26:
f0:af:b0:a4:bd:73:bc:9c:45:9e:f7:6a:6f:3b:08:12:4a:a5:
b8:1c:40:b4:77:8c:b6:fb:d0:5c:ac:17:17:80:63:27:48:b7:
48:0e:e1:2c:6b:01:d3:43:2e:b2:45:b2:fc:59:38:c6:5d:4f:
a0:cf:4f:0e:a2:a9:8f:b0:e3:ba:46:83:25:6d:cb:1f:ca:4a:
7b:5e:32:e3:79:74:13:97:04:4f:b9:16:68:f3:f8:33:4c:36:
97:8f:1d:a6:16:91:cd:7d:cb:22:5a:59:a5:f6:d5:cc:3a:b5:
25:c7:35:40:2a:55:be:24:fb:4b:c9:ec:7f:ed:e5:37:ab:42:
98:d4:fc:26:d7:fd:6f:37:8f:fb:da:cc:89:b0:35:5c:49:c2:
f1:0d:a6:e8:7a:13:12:79:70:b0:a2:01:dc:d3:df:ff:1d:a1:
e7:bd:fb:29:e2:8b:c4:89:ba:58:1f:de:7a:82:a4:b0:1d:73:
b5:0d:96:66:af:fd:2d:92:de:61:5d:f2:74:58:0e:3f:2d:8e:
25:bd:f0:dc:06:b6:42:ae:02:f0:71:d1:b4:d3:a1:20:5f:58:
84:56:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:29:26 2025 by rpki-client