Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: rOef35ZW6sGQrmcV+lToM4MI+e5q5OgiYFZo+HD7YDY=
Subject key identifier: 22:31:8E:22:1E:C8:E7:98:87:59:6E:95:FC:F4:75:D2:6E:75:E1:96
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 0196CB73430EDC07872C6FE66E3667C62CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 21:00:50 +0000
Manifest this update: Tue 13 May 2025 21:00:50 +0000
Manifest next update: Wed 14 May 2025 21:00:50 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: FV1oF0vZk53sNYoZQd+ggRG7AVniI9d3Ndf+l7OcVqg=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:43:0e:dc:07:87:2c:6f:e6:6e:36:67:c6:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: May 13 21:00:50 2025 GMT
Not After : May 14 21:00:50 2025 GMT
Subject: CN=22318e221ec8e79887596e95fcf475d26e75e196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:84:49:7b:f6:b4:18:e7:07:84:30:a7:11:
79:29:a9:3a:c3:16:d7:72:a5:30:08:12:ab:46:4e:
c8:73:08:53:37:2d:ca:ad:76:db:1f:54:20:48:f1:
6a:ef:6f:c6:f7:b2:99:12:87:29:04:5f:60:c7:15:
cd:f6:ea:c9:c0:14:03:28:6f:ed:ee:7e:37:df:fd:
8c:50:08:e3:87:cf:d6:c8:4f:e5:15:a5:49:e4:e4:
80:eb:5e:0d:b1:50:14:8c:70:6e:f5:01:24:25:eb:
c5:8d:46:30:42:b5:b3:ff:01:31:cc:ad:6b:c2:a3:
f3:77:86:6a:f0:c6:a5:4b:ad:1b:60:ab:dc:19:70:
35:5e:52:ed:a0:38:70:a0:39:7f:f5:79:44:e8:29:
ed:54:36:8e:8d:50:f3:88:db:4e:b3:7e:3e:36:25:
a6:b4:ab:a0:1f:55:15:4c:e4:4f:14:ec:ab:21:de:
09:85:96:41:a2:75:1d:0d:9b:0b:f2:4e:46:52:a0:
94:85:1d:d6:02:a3:94:f0:99:79:7c:2d:5a:f5:02:
c1:b8:b4:66:f9:64:de:c7:ab:50:27:cc:90:e7:0e:
c5:62:d4:35:e7:79:ab:0b:c2:b9:df:50:0e:80:34:
db:71:8d:9c:50:3a:41:64:39:80:ee:bc:1e:25:e4:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:31:8E:22:1E:C8:E7:98:87:59:6E:95:FC:F4:75:D2:6E:75:E1:96
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1a:5b:38:63:87:a3:15:86:db:3f:74:86:61:e5:b8:4f:bc:
00:5d:7f:61:c4:78:68:20:77:ca:47:dc:06:31:d2:a8:5b:cb:
ef:a7:c2:14:74:a3:8e:2d:51:2f:e9:ba:f3:f7:63:9c:fc:30:
54:76:6a:f1:1b:7f:99:88:56:2b:c7:f3:df:ee:fe:16:ab:7c:
7a:c1:12:3d:77:71:13:d3:12:fd:58:28:03:87:33:d6:9e:0f:
ac:b4:14:b8:15:ed:dc:7b:8f:a2:25:16:36:79:18:9d:fb:ef:
02:36:13:e6:55:b7:df:47:17:19:96:d1:21:a2:18:08:cf:40:
a4:d0:b5:13:c0:be:72:50:d3:4d:a6:55:77:fd:a5:61:2b:9b:
6a:8e:be:a4:85:4d:81:61:e3:36:b9:07:81:96:cb:50:1c:20:
f5:51:6c:24:30:66:d9:61:a4:15:7e:0a:5a:c6:45:3e:82:fd:
0f:0c:5b:b0:c4:d3:d4:68:e2:59:a5:a8:47:f5:78:4f:5d:8b:
b1:e7:5d:4b:1a:9c:d8:87:c4:29:a2:80:45:3b:18:9d:a0:bb:
5e:1c:c7:61:a8:04:c6:6a:6a:18:fb:ee:2e:4e:fd:5a:06:75:
4e:3c:74:f7:a5:56:f6:15:37:f2:74:a7:ae:c9:bf:94:a0:0a:
f5:0d:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:38:11 2025 by rpki-client