Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: LQO/fbS/2peKAn15lQ1nfJq9yf+GBPFlE8+xZhz/JL8=
Subject key identifier: 67:6D:C2:48:F8:4D:B0:C6:D8:B1:E8:45:1E:E7:29:9C:B0:84:19:05
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 0196C12655CF6683861508671A7B14E4859D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0B33
Signing time: Sun 11 May 2025 21:00:37 +0000
Manifest this update: Sun 11 May 2025 21:00:37 +0000
Manifest next update: Mon 12 May 2025 21:00:37 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: BzYLnxnJxPZK/V7ureArYinM4km0pN90ggoF2dUPbuE=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:55:cf:66:83:86:15:08:67:1a:7b:14:e4:85:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: May 11 21:00:37 2025 GMT
Not After : May 12 21:00:37 2025 GMT
Subject: CN=676dc248f84db0c6d8b1e8451ee7299cb0841905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:c8:fc:c9:9d:b3:77:a3:2a:31:be:d5:ae:
ad:a5:82:41:2a:ab:fc:c6:9e:5d:b8:10:46:ce:8a:
ac:19:a1:b6:80:1f:ab:c4:f4:ce:a0:d4:21:27:0b:
0d:84:1f:c2:16:7f:3e:76:f3:67:94:94:ff:2e:b4:
9e:dc:71:1e:21:fa:3b:fe:cf:49:15:60:7d:2f:ae:
6e:68:95:a7:7e:15:00:ac:0c:9d:f5:dc:17:00:ff:
f6:44:32:ad:26:d4:50:5d:57:15:5b:0c:60:17:70:
7e:f2:ae:c3:35:c2:de:16:d3:ff:43:9b:0d:73:55:
5c:92:1e:7b:67:04:dd:7e:c1:5b:60:ff:a0:f8:11:
c9:e4:b3:9f:68:ce:f8:a4:97:c1:cd:3d:a0:2c:4d:
12:54:cb:95:c3:a4:18:2b:0b:fd:e6:a6:3d:3e:54:
d4:58:78:18:96:29:da:8e:ec:c5:20:bb:ca:03:e6:
65:f0:2d:b0:92:4e:02:4c:80:fd:8a:ee:3f:99:5e:
a6:03:f0:96:f9:60:43:bf:27:76:91:31:30:b7:f8:
e1:b2:b2:41:35:16:f2:5a:df:08:8a:79:64:10:86:
a5:d8:b4:21:dd:f6:e4:a3:d3:f0:76:0c:ff:8b:fe:
f4:74:64:84:7a:2a:cc:22:91:3c:94:fc:e9:18:70:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:C2:48:F8:4D:B0:C6:D8:B1:E8:45:1E:E7:29:9C:B0:84:19:05
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:b7:83:14:bc:3d:74:1f:44:8f:bb:2b:de:5b:02:a5:92:
ca:b6:b3:12:ac:c8:f0:6f:6a:72:ce:71:b7:41:d8:c2:07:72:
10:95:0a:39:c8:57:93:5e:6b:88:5d:ee:9d:d7:a1:31:07:2c:
f7:2a:e9:cd:be:06:6b:22:ed:7c:02:01:11:3b:07:22:e6:32:
85:ef:4d:ce:7f:56:60:ae:1f:92:66:f0:0a:b9:1a:1d:f1:33:
6f:19:21:96:32:2e:9e:f8:8b:b9:4e:4c:3c:bb:7d:ad:f4:a7:
c0:44:2f:e1:91:74:ed:d4:e7:03:95:76:ae:57:d5:4a:8b:4e:
15:9b:f9:89:0b:4c:74:6c:7f:38:65:45:79:b1:1f:5d:42:ca:
70:8d:c0:c1:a6:0d:0c:ea:2d:c4:61:b5:c4:5c:c5:2d:89:8f:
e0:77:85:6b:c2:b0:8f:e4:ab:0c:61:d5:a2:36:9e:16:00:6f:
06:ff:4f:8b:36:d3:02:f1:31:b3:88:fa:86:e2:52:8e:68:53:
26:12:0b:b7:07:ab:80:2f:44:b0:b7:07:37:bc:5f:46:68:48:
33:82:49:fe:f4:1a:12:d4:29:f2:fe:b6:39:9b:4a:3c:70:33:
1a:2a:00:8b:0d:e7:5e:b8:f7:7e:1d:ee:e2:69:2e:90:c9:f7:
47:d4:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:29:11 2025 by rpki-client