Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: fbjAzlGYG5yjCzc891o034zqy2A/65puViYCY21He2U=
Subject key identifier: 4E:52:30:4B:59:6B:14:E3:49:84:99:00:CC:E9:50:53:07:60:48:E0
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 0196C5A81DE4632D589D343F84F4FAFCFE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 18:00:51 +0000
Manifest this update: Mon 12 May 2025 18:00:51 +0000
Manifest next update: Tue 13 May 2025 18:00:51 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: xVKn8fhgceA3J5XEfx8WanejtnvJyo3AZ9LmoNVVKM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:1d:e4:63:2d:58:9d:34:3f:84:f4:fa:fc:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: May 12 18:00:51 2025 GMT
Not After : May 13 18:00:51 2025 GMT
Subject: CN=4e52304b596b14e349849900cce95053076048e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5a:24:cb:c7:eb:33:ef:15:ea:5b:7a:e3:8c:
0b:d6:66:40:cc:61:ce:6b:bd:8c:32:68:cf:4a:a2:
4e:98:3c:e0:e3:d0:3c:71:88:6c:28:6d:8c:3f:1b:
e0:3b:ea:04:fd:bf:db:30:4e:e4:1e:1e:29:fb:18:
65:40:2b:0c:fc:41:bc:cb:44:e7:a0:63:a1:a0:6e:
cc:18:a8:4c:c3:f3:0e:80:c9:c1:80:64:c2:f6:1a:
9b:1c:97:67:11:da:33:37:af:f8:c6:08:04:41:17:
26:26:a5:0c:b1:30:33:1e:67:22:9e:2c:f1:8c:df:
b1:60:4e:2f:59:d5:02:a0:4f:05:04:97:23:83:19:
8f:3b:6c:ee:e6:e6:f9:f7:af:bd:a9:8a:45:1d:83:
cf:33:df:6f:39:21:30:74:fa:92:58:10:28:c0:39:
f5:c4:0d:80:6a:3e:f7:be:61:8b:49:89:01:ab:60:
65:6e:28:6b:20:f6:cf:ea:97:fb:ef:c7:60:fe:0d:
d6:a3:92:27:44:78:60:50:9a:10:df:1d:2a:23:90:
d1:26:2a:b3:a1:ad:d2:8d:5e:50:cf:f9:f4:73:e5:
3d:e2:70:e6:86:1d:84:e0:87:97:bf:22:25:5a:cb:
f7:e5:e1:ab:3d:eb:ac:bf:b1:8f:b7:43:f1:78:5e:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:30:4B:59:6B:14:E3:49:84:99:00:CC:E9:50:53:07:60:48:E0
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ee:01:36:5a:b0:c9:be:e6:0f:f3:20:6b:e1:47:ea:7c:4d:
e0:70:ca:aa:d0:c8:17:8c:02:5f:7b:af:b8:1d:2a:64:7d:03:
f4:3e:f9:13:42:8a:dc:48:31:ec:f0:da:bd:a9:19:8e:61:3c:
3e:91:5a:40:bb:67:e3:0e:c8:43:ba:89:b1:58:0d:c1:38:95:
0f:a8:d0:ab:e5:91:38:ae:e1:a2:47:59:4e:3b:ef:98:a6:28:
2d:35:13:49:c1:e1:b7:50:fd:d6:86:e4:f5:08:05:71:59:67:
56:20:ce:df:ff:c2:9d:c7:d2:66:9c:61:bd:6e:84:47:eb:ad:
c0:2e:6e:93:d6:d2:fa:e0:df:9a:4e:32:08:11:43:a7:64:98:
ae:c2:1d:e9:c7:36:6f:3e:bf:13:63:e9:45:a4:5b:f6:86:f5:
22:df:1b:43:e0:78:77:f5:aa:0c:f2:39:b5:53:43:b7:34:61:
8b:d1:e3:6d:d0:b6:7c:94:6c:bb:64:f7:fd:dc:f8:61:17:5d:
b5:20:90:0a:f0:ad:47:36:bc:9a:b5:30:41:b4:73:bc:8c:44:
af:f6:34:84:53:c0:54:3c:6d:4c:c6:75:99:f1:3e:b6:59:d3:
0e:ec:e1:44:44:7a:c0:c0:00:58:30:7b:9f:3e:03:9f:fa:43:
bd:73:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:32:34 2025 by rpki-client