Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: 0Vw47O0DA4HLrjmtWuQI7vAFzPRuEcv3rVokxfeTkEQ=
Subject key identifier: F2:25:E0:CD:E9:86:1F:B7:77:5E:96:F0:A4:49:11:CE:97:91:8E:51
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 0196C202307674C0F8E5B116114A7F360436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 01:00:45 +0000
Manifest this update: Mon 12 May 2025 01:00:45 +0000
Manifest next update: Tue 13 May 2025 01:00:45 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: aQOGxpotNtmxQoia2w1pGm3RX8kNW7D/I8Q2BJlJrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:30:76:74:c0:f8:e5:b1:16:11:4a:7f:36:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: May 12 01:00:45 2025 GMT
Not After : May 13 01:00:45 2025 GMT
Subject: CN=f225e0cde9861fb7775e96f0a44911ce97918e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:69:ba:9c:1c:72:1e:09:45:d1:49:90:1c:
47:d6:ff:8c:35:ab:fb:37:aa:c3:d0:d9:7b:2e:15:
f7:fd:12:14:1e:05:69:ef:db:e3:51:39:43:b0:59:
ea:f4:6f:25:14:54:17:0a:d7:a8:31:a7:1e:d2:f9:
47:9f:ad:17:60:53:a5:a1:fb:7e:55:8e:92:3a:92:
00:a0:b4:3c:03:d8:78:f5:00:9b:82:97:66:f9:57:
b7:71:59:5b:89:dc:33:d0:c6:b3:d9:46:05:9f:3e:
23:7b:0c:f5:c0:5d:02:34:8f:3f:d8:bb:8d:51:44:
52:f1:ab:ef:9e:db:dc:17:23:05:3c:36:55:d7:26:
76:e2:de:eb:57:d1:50:c2:00:88:42:d5:81:73:b1:
9b:de:45:3d:73:e8:93:27:40:87:4b:04:6b:bc:f5:
5a:00:36:27:65:d4:ca:23:98:6a:a5:e2:04:cd:06:
b2:21:d1:ed:1b:0f:6f:31:e4:52:99:eb:65:e7:e2:
ea:3e:60:70:7c:fd:9c:52:71:dc:ef:19:a0:71:de:
c1:7f:ad:5a:16:5d:7c:e6:88:5e:ed:7b:ad:23:27:
25:d7:6e:03:d5:8c:e6:f9:a3:f1:4a:e6:7f:d9:c1:
bd:59:33:2b:a1:3b:c3:c3:0a:48:41:34:76:98:53:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:E0:CD:E9:86:1F:B7:77:5E:96:F0:A4:49:11:CE:97:91:8E:51
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:57:0e:8b:c8:8f:2a:cc:eb:eb:e6:23:ad:1c:d2:2e:fc:
b7:32:2d:b6:49:4d:b4:1e:37:d2:df:ed:6e:b8:8b:ad:e6:4d:
91:d1:58:38:01:02:45:7c:62:80:1b:cc:19:cc:39:25:fc:04:
ed:20:52:cf:ea:66:90:07:50:c5:20:df:80:eb:96:97:4e:a3:
fd:3f:49:53:ad:ea:5d:ca:d9:2b:0b:8a:de:24:4d:23:1c:c3:
90:31:e2:28:79:3d:f4:26:bc:f7:e1:66:f4:74:19:5e:5e:ec:
c2:0b:0e:ef:76:61:91:35:fa:52:dd:41:98:23:63:07:e9:9f:
bb:c0:af:9c:71:96:c7:3a:7e:65:f6:5a:b3:b6:9d:70:c8:25:
d0:14:0d:e2:bf:32:0e:7f:03:2c:6c:dd:c1:80:09:1c:42:b2:
df:f1:23:ae:84:e1:b6:d2:4b:cb:6d:0a:8d:03:88:b2:1e:78:
ce:dc:02:86:ae:93:3c:35:29:21:a6:06:20:28:fa:5c:bc:14:
bb:d7:7f:62:e3:e8:da:22:69:2a:85:4d:d6:07:d3:13:21:15:
d3:64:bf:12:46:ee:00:a4:80:96:9f:34:53:92:7f:07:1e:2f:
10:17:28:22:9b:af:22:90:a6:07:3c:6b:12:db:14:79:b5:cd:
b9:2d:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:51 2025 by rpki-client