Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: KSkiX5xCU1pBbnlk5Xt+lhtI19UnaiSp2GADWi8uEkE=
Subject key identifier: 48:4F:36:D4:C8:D8:2A:E4:88:86:47:AC:04:AB:E5:B3:CA:60:33:AB
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 0196BDEE8AB60930EFBDEF15D0C061B7FC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 06:00:48 +0000
Manifest this update: Sun 11 May 2025 06:00:48 +0000
Manifest next update: Mon 12 May 2025 06:00:48 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: x1rnaL986j+kCfVE0hCbCH0kFRfK/omaokDSdFwkqgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:8a:b6:09:30:ef:bd:ef:15:d0:c0:61:b7:fc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: May 11 06:00:48 2025 GMT
Not After : May 12 06:00:48 2025 GMT
Subject: CN=484f36d4c8d82ae4888647ac04abe5b3ca6033ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:d1:94:fa:f7:4c:b4:04:77:81:46:04:f1:
09:75:65:bc:78:f8:df:9a:87:92:d1:6e:32:21:61:
df:8e:bb:c2:1a:c4:9f:cc:5c:de:06:1e:08:76:af:
af:9f:dd:a4:49:2b:15:f9:15:60:ef:e9:34:44:68:
5a:3c:a4:a0:9d:e3:22:a4:b6:bc:c6:cc:98:5a:04:
ff:69:3c:a7:fb:60:c0:a1:9e:2b:c7:ab:6c:6f:26:
b1:7c:e8:43:80:f3:bf:a5:66:8b:67:1d:bc:e1:5c:
92:a2:34:fa:b8:16:c1:9a:60:06:37:bb:d5:3b:01:
2d:da:f6:27:28:95:db:71:3e:9f:c9:a5:44:86:81:
b8:10:d5:33:c6:4b:6e:ea:0a:01:5d:be:7f:e5:10:
ef:b6:0e:19:fa:a3:68:ee:f2:6c:6e:a5:01:93:c8:
41:72:2a:dc:5a:f8:40:a2:8d:e5:fe:c3:f8:be:2e:
d8:d9:55:da:d6:67:b7:09:51:d3:ee:72:95:90:7a:
9d:bf:07:4d:34:93:eb:35:7c:07:44:e9:6b:3c:ac:
61:39:55:6f:4e:df:af:21:7b:22:82:9f:16:25:4b:
9a:ed:51:0a:79:00:ff:ac:89:04:79:0e:57:a0:dd:
23:b4:7e:67:ae:7a:a4:e1:61:b2:b9:f5:88:e4:1b:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:36:D4:C8:D8:2A:E4:88:86:47:AC:04:AB:E5:B3:CA:60:33:AB
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:60:3d:ad:c8:c4:b4:0e:82:13:87:8b:23:81:db:d8:aa:
80:cb:28:b9:6a:d6:67:fe:ca:21:23:97:d3:02:2d:d6:7d:de:
c2:52:81:44:27:44:4f:aa:30:f3:71:af:40:cb:90:a6:39:f9:
c5:6a:d6:09:08:37:b0:87:a0:f7:9c:e4:98:c4:e8:93:41:55:
92:c9:49:61:09:eb:84:71:01:b4:c9:fe:ef:71:68:3f:2a:57:
18:a7:5f:8d:8d:21:25:65:d6:b8:45:ba:b9:90:47:4c:c6:71:
1f:37:d3:85:3d:fa:56:d0:fb:74:79:00:b8:ae:38:e8:b0:ca:
96:42:d7:d2:f6:57:16:36:6a:7e:b8:9c:81:25:5a:a5:ca:88:
9e:77:47:cf:08:3c:d9:64:d3:72:c1:06:23:44:93:22:e3:e7:
cd:1d:e7:28:d3:5f:88:f5:e2:47:2b:01:53:48:65:be:67:05:
19:0c:0b:99:f6:59:ff:79:b0:0d:c8:f3:b0:19:71:23:b0:ee:
84:c8:f7:80:b4:6a:b3:6b:e0:27:f8:62:d5:5e:b0:6c:0e:35:
11:a0:78:3a:f4:94:7f:6b:b4:47:a7:64:7b:de:6e:1b:8f:c4:
f2:a2:91:c6:e8:ef:32:a8:26:6c:79:3c:0f:31:75:64:2e:6c:
93:b5:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:27:45 2025 by rpki-client