Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: IfeKADlXz9PcGWetxp5CjbiFIf8Bv/eYIMh6JT0aIro=
Subject key identifier: F7:54:84:10:C0:52:3F:4A:6E:A9:05:84:B9:A8:C9:E2:DA:53:FA:79
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 0196AFFC357F83FC77BEB321576B2C93123C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0C0F
Signing time: Thu 08 May 2025 13:01:03 +0000
Manifest this update: Thu 08 May 2025 13:01:03 +0000
Manifest next update: Fri 09 May 2025 13:01:03 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: km7hZcE1sDnTe5Y3iHWfNOt8bXfLH08M6sizDAmhdRM=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:35:7f:83:fc:77:be:b3:21:57:6b:2c:93:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: May 8 13:01:03 2025 GMT
Not After : May 9 13:01:03 2025 GMT
Subject: CN=f7548410c0523f4a6ea90584b9a8c9e2da53fa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:51:d1:e4:91:a9:50:fd:a7:38:6c:6b:79:
49:00:e4:c0:10:8b:85:d6:e4:53:a4:e7:43:9b:23:
8a:18:55:92:af:eb:9a:5f:db:ee:2f:0a:7c:20:29:
1c:6b:98:a8:5a:5f:e3:93:c3:9d:d5:31:c8:a6:bd:
10:91:1e:11:24:f5:52:ee:e0:c4:8f:ab:9f:75:c4:
a4:9c:2f:79:aa:6f:f8:08:ec:c7:f0:7b:b3:80:df:
c6:fe:42:b8:a6:8b:4c:10:47:e5:14:1a:c1:ef:b8:
71:2a:15:f8:4b:eb:36:7c:69:f8:8f:23:02:b1:8a:
22:e1:32:76:c2:c5:dc:29:f0:fc:cc:7e:c6:fc:44:
2d:a7:c9:92:9b:3c:58:55:df:50:ac:a0:20:46:3a:
f9:58:f3:25:af:9e:15:5d:51:33:fe:72:9b:5b:03:
54:44:db:d3:5b:10:70:45:4d:22:cf:03:35:30:7e:
f2:f7:6f:d9:62:8f:65:04:e1:a8:45:6a:c6:f4:78:
0a:88:b2:20:c7:30:17:cd:3b:40:9c:cd:31:50:df:
15:12:8c:0c:9b:05:7b:03:54:65:41:73:81:01:38:
69:2e:d7:bb:82:92:70:e1:45:88:13:46:57:cb:c1:
56:fe:e9:b2:a0:84:88:e5:c0:20:d6:a6:b4:29:b9:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:84:10:C0:52:3F:4A:6E:A9:05:84:B9:A8:C9:E2:DA:53:FA:79
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:b5:eb:5c:dd:b6:99:25:76:c5:f9:f3:e8:23:b9:08:3c:
c3:03:8c:db:c4:55:cf:e9:91:69:b5:83:9f:19:f2:3a:58:cf:
fa:41:eb:c3:7c:4f:da:21:b6:11:6b:02:bf:c9:53:bc:f9:e3:
e4:17:ae:45:3a:bb:f3:09:2b:1a:1a:2b:ef:3b:2f:5b:fd:b8:
49:56:ec:96:89:f9:b4:48:65:73:e6:ba:be:eb:e4:9d:76:ac:
be:85:7b:c1:5a:11:a5:40:89:8d:b4:b0:51:de:38:8c:19:71:
f3:c4:0d:27:85:f4:bd:da:e9:45:3f:16:37:c4:e6:7c:57:4c:
ac:72:d9:3b:17:31:82:56:b4:45:24:72:c1:0e:95:1f:b4:25:
c1:f5:f0:c5:ed:cd:a3:05:5e:2f:6e:82:18:a0:bc:c9:92:30:
15:5d:af:85:e0:da:52:aa:aa:31:57:d9:4a:01:b2:40:b4:64:
0d:be:86:ed:f1:70:83:55:69:2b:4f:d7:c6:98:4e:01:99:d6:
70:38:b3:09:78:f1:6f:92:52:04:9f:c5:c3:cf:9d:0a:a0:5f:
b0:26:f0:ee:43:a3:fe:87:94:86:51:9e:73:54:70:2d:96:74:
27:d9:75:cf:e6:71:5d:1b:be:6b:e1:07:57:10:b0:7d:ba:8f:
16:aa:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:25:44 2025 by rpki-client