Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: E8vusTF7KePdzXmKVwZtNLCw04D7TQlt6CUTMJ6Yuog=
Subject key identifier: 78:86:21:96:42:03:D5:BD:90:40:AC:A6:70:D9:9A:ED:8D:C2:37:A2
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 0196AC559BEA98697876FFE516A3624ED01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 152E
Signing time: Wed 07 May 2025 20:00:13 +0000
Manifest this update: Wed 07 May 2025 20:00:13 +0000
Manifest next update: Thu 08 May 2025 20:00:13 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: HiAfBT2omqldGZaYuRGEVVCRiRvaPp9zhq6PpqC52iY=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:9b:ea:98:69:78:76:ff:e5:16:a3:62:4e:d0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: May 7 20:00:13 2025 GMT
Not After : May 8 20:00:13 2025 GMT
Subject: CN=788621964203d5bd9040aca670d99aed8dc237a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:98:3b:ee:82:82:c1:c3:e6:b0:e5:d1:2b:
34:a0:8a:2c:4c:a7:86:a2:c8:61:47:b8:3d:8d:95:
85:55:00:7c:cd:87:14:91:67:b9:f1:92:5c:e0:57:
d4:e8:29:83:d7:bf:eb:f7:5b:cf:05:cc:d3:3d:f7:
92:24:4e:cd:b0:f7:24:bf:11:59:1d:1a:26:a5:de:
be:5d:95:99:89:f0:21:ed:dc:5e:d4:26:ee:33:8a:
1f:1e:db:e4:4e:df:ca:46:63:02:e0:b5:06:4b:e8:
a9:e3:0e:74:1c:d0:5d:2c:e0:77:be:3f:d8:34:a4:
e3:38:f1:3d:8e:67:d0:9c:b1:e1:98:59:fc:bd:42:
64:a2:e2:01:d5:77:d2:35:e3:47:a0:6c:45:7a:5a:
de:db:1c:f1:bd:02:95:40:50:cf:07:58:5a:c9:e4:
9c:25:6f:6c:57:dc:e9:bd:f1:ab:29:4b:ad:ed:8f:
3d:37:85:43:cc:3c:2f:91:86:0c:7d:a8:ae:c7:0a:
7d:ed:89:01:f6:58:55:96:3c:ec:35:8a:12:54:4a:
9c:9a:0a:2d:57:ab:72:6c:7e:8c:94:e2:af:c8:10:
3e:55:b9:cf:72:e9:7b:cb:6a:73:e8:6c:d3:ce:c8:
5e:41:32:1e:c3:c8:5a:3e:60:3b:e2:f1:b8:68:ab:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:21:96:42:03:D5:BD:90:40:AC:A6:70:D9:9A:ED:8D:C2:37:A2
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:7f:c8:4e:ef:ba:b7:53:8c:ff:1c:b0:18:5e:8e:e9:3d:
ff:ba:af:92:be:a8:8c:ca:d9:d5:7b:26:7e:4d:25:0c:aa:2a:
e7:fd:13:5d:dd:9a:4a:9d:92:12:70:f3:63:65:38:d2:39:39:
44:5b:45:1e:16:9c:e8:39:4f:c0:e9:e5:47:08:91:ce:75:9b:
e9:8c:fa:2b:2b:2e:65:41:36:a5:d4:19:a0:32:26:a1:0d:ed:
35:62:6b:84:c8:6c:ec:4b:9a:07:0f:d4:22:9d:11:49:ff:f3:
9c:39:10:f3:dd:c0:36:f4:dd:f9:ee:20:20:7b:e1:74:b0:1a:
f4:59:97:8c:3e:f9:55:0c:a0:93:eb:9a:82:a0:23:22:dc:45:
b3:75:81:42:80:d8:14:f7:21:d4:df:8e:1d:78:c5:18:e2:9c:
fc:90:1c:6f:33:c3:5b:8c:e1:4d:12:7e:4b:b5:d9:c8:e4:33:
bb:b6:8e:49:21:9d:75:03:17:eb:2b:08:70:d8:c1:02:7d:16:
9e:1b:3f:f7:cd:1e:7c:30:7b:cd:4f:6c:00:b8:98:1b:2b:31:
9c:b3:36:39:7d:63:4b:21:9a:d5:be:f3:d2:93:c3:df:56:33:
29:aa:ed:98:2f:7b:0f:7f:78:4d:bd:10:ab:10:3d:82:eb:ac:
85:b6:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:21:25 2025 by rpki-client