Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: jbsWl3HGz232NVgU5wbx+bnVRwm0P0QbFtpQnzR3/Is=
Subject key identifier: E8:38:ED:3D:28:12:37:11:DA:91:D1:98:20:59:DD:76:29:38:17:76
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 0196BA121A5FE0D5F91C96E731515DC251B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 12:01:10 +0000
Manifest this update: Sat 10 May 2025 12:01:10 +0000
Manifest next update: Sun 11 May 2025 12:01:10 +0000
Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: rYr9kMSNjGgK8N0eK/dfig7jMxRHTA/VwBhojf0YNyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:1a:5f:e0:d5:f9:1c:96:e7:31:51:5d:c2:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: May 10 12:01:10 2025 GMT
Not After : May 11 12:01:10 2025 GMT
Subject: CN=e838ed3d28123711da91d1982059dd7629381776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:f1:db:ca:ea:20:24:16:5c:43:95:22:1b:
60:a5:b4:c9:93:5b:6b:a1:61:a4:1f:03:0d:20:dc:
84:12:d1:4e:08:14:ac:bf:0c:10:48:e2:e7:df:98:
86:4f:56:f0:42:a9:46:2e:55:3a:15:81:3e:9a:0e:
b3:bc:e4:18:4e:56:88:3c:c3:12:34:1b:b6:3b:11:
4e:84:66:db:3d:19:f2:71:0a:4c:b0:50:a6:d1:3a:
82:a2:87:ef:1a:fc:44:da:e2:53:ce:0c:b1:9f:ea:
70:66:36:45:e9:4e:28:3e:be:10:e1:8e:4f:98:65:
2c:ba:a4:21:f6:11:69:62:51:20:1f:c4:8c:5b:5a:
5d:5c:e2:92:22:23:e1:52:6c:8e:b3:57:34:30:13:
00:84:58:cc:df:2e:4a:e8:04:2f:c5:7c:9b:f2:15:
1b:3f:49:de:2c:fb:b2:e4:80:8c:17:a4:0f:51:50:
1a:f7:ed:52:c2:26:8c:5a:eb:af:3e:1e:19:8c:3d:
ae:10:1c:07:75:b0:d6:90:96:ec:43:a3:02:3f:3f:
ee:8a:4e:f8:2b:2e:a7:21:91:97:8e:bb:32:30:9a:
99:ab:4b:05:e4:2b:85:df:87:86:4a:04:29:78:70:
f6:3a:58:5e:9b:16:3e:11:ee:2c:ef:83:25:b8:aa:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:ED:3D:28:12:37:11:DA:91:D1:98:20:59:DD:76:29:38:17:76
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:90:44:1f:29:a3:f8:82:f4:31:0b:1d:9d:29:0e:5f:34:
9e:be:00:8c:99:6e:00:cf:8e:2d:f5:ca:ac:f1:85:4e:b9:5f:
98:cb:ee:12:bd:d6:df:c6:cb:03:1e:19:24:4e:8f:88:41:95:
ad:c8:29:8e:92:c0:ce:69:82:b6:c5:e1:49:87:80:88:10:d9:
9d:00:40:6f:5a:45:7b:f9:00:cf:eb:9c:df:87:ba:9e:59:a3:
6f:c6:35:76:6c:d8:5d:62:6b:52:0c:00:17:76:64:ae:e3:82:
8e:04:e7:41:59:99:04:54:67:4a:29:15:bd:31:db:c6:40:e0:
92:48:18:dc:ed:92:fb:3b:64:0c:4d:cd:00:6c:18:26:b2:c8:
f4:4b:34:8c:b9:9a:a8:2d:4c:c2:90:7e:0a:db:c1:11:7a:95:
c9:6b:de:db:d9:41:e5:cc:5c:c7:f2:93:c8:55:58:45:23:16:
1c:6c:3a:86:b8:ed:b1:d6:c5:f4:38:6b:72:06:4a:6b:1e:57:
8a:b8:51:26:95:b9:a0:1a:99:73:47:90:41:e0:4c:8d:c4:7e:
dc:cd:1d:74:3b:17:10:e0:6f:04:21:f7:d1:d7:d6:08:ca:6e:
7f:da:ef:da:11:e0:84:d5:1c:df:5c:ee:47:4e:23:64:fd:02:
8d:7d:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:38:21 2025 by rpki-client