Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: X1dEH791GwAsjUv1oy2goUALrmyrexXhU7GVlRCdPz8=
Subject key identifier: 5B:4F:55:90:EB:0B:62:64:6C:48:0B:A6:EF:C7:5C:40:98:AC:59:39
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 0196AE0D50A454D8A87C90A431EAC0416702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 1254
Signing time: Thu 08 May 2025 04:00:30 +0000
Manifest this update: Thu 08 May 2025 04:00:30 +0000
Manifest next update: Fri 09 May 2025 04:00:30 +0000
Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=)
2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: +Lx3ySEKycmpPlZ0oUrSsJIHutoJQd7baW0pbdks2nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:50:a4:54:d8:a8:7c:90:a4:31:ea:c0:41:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: May 8 04:00:30 2025 GMT
Not After : May 9 04:00:30 2025 GMT
Subject: CN=5b4f5590eb0b62646c480ba6efc75c4098ac5939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:9b:c8:bc:74:70:fc:4b:c8:ee:aa:2d:4e:
79:97:07:a9:af:57:4f:7e:28:fc:29:90:d5:bb:ea:
3b:86:88:af:4a:eb:d5:15:5d:7e:3e:eb:d4:ad:54:
c3:0a:24:3a:08:ce:b3:36:a9:07:06:c6:78:96:1b:
1d:8b:5f:4b:b6:62:03:c4:2a:29:42:87:cf:d2:92:
7e:c6:53:95:07:6d:b3:36:56:5f:52:75:80:7d:73:
97:90:6f:a9:c0:77:77:54:d0:f1:f1:84:2a:a8:9c:
20:ae:9e:14:0c:0c:d6:0e:26:a0:01:92:8a:30:7e:
73:eb:5e:57:a1:70:d6:cd:8d:8e:a0:a3:47:9e:c1:
ed:d4:83:e6:d8:c5:f7:9d:20:7c:25:26:13:5f:e4:
09:15:ff:82:31:e2:c1:ba:69:f0:ab:25:f4:13:42:
6a:92:2a:d0:a4:90:3e:17:91:12:fb:43:59:e1:b4:
a3:fa:8a:5e:2a:2d:8a:cf:e1:ae:e4:47:cb:72:7f:
c5:9c:c3:4c:22:6b:50:a3:fd:d0:f5:71:7b:75:a8:
29:f3:2e:72:69:e3:1a:d8:5d:81:00:46:f5:ba:93:
f2:44:8d:94:39:07:53:46:ba:ae:50:8a:84:c5:c1:
6b:33:c4:2a:53:99:45:64:ec:eb:bf:8a:d8:c2:82:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:55:90:EB:0B:62:64:6C:48:0B:A6:EF:C7:5C:40:98:AC:59:39
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cb:d5:a4:7d:08:46:9d:e4:3e:6c:ec:d0:f1:c0:89:51:71:
6c:22:2d:60:a3:5b:78:49:c6:68:85:f6:a8:a3:22:44:92:fb:
d1:cf:3b:43:0e:2d:13:e4:ad:2d:a8:5a:c2:8d:f0:0e:a1:c7:
23:f5:c5:8d:52:4d:c8:ec:14:f3:b5:94:43:ca:9c:9b:a2:00:
31:9f:08:e3:c9:15:68:a5:1c:d0:25:32:14:f5:1e:0b:98:43:
d8:ff:ce:e8:6d:bf:cb:a8:f6:a2:2d:36:ec:16:14:1e:ff:95:
ab:90:4d:cc:54:55:00:74:a2:88:af:87:13:f4:b2:d0:28:0a:
24:cf:01:fc:a9:2d:5f:a7:76:8c:6e:80:77:f7:b9:7c:26:e7:
ec:09:64:fb:d9:d8:95:9a:b7:16:c9:1a:b0:55:be:af:6b:50:
d7:55:f5:b3:f9:13:9e:4e:f7:68:ca:2b:c9:93:33:16:da:76:
df:c3:7d:5d:f4:07:9b:e2:e1:d7:8e:6d:57:c4:1d:47:6f:a7:
27:da:16:1d:e9:0f:95:c0:bb:df:cb:51:5e:f8:ed:13:88:2f:
b2:0c:02:d7:82:b2:d1:3d:59:9b:58:f0:dd:a2:3a:cc:1e:dd:
7c:c1:19:a4:2f:2e:e4:c4:06:24:e3:eb:4b:af:1b:7c:67:ca:
f6:67:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:40:09 2025 by rpki-client