Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File: YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier: F7miW61NQA9O3Wd2mxqnpvZ/k+YNkaq2dlCN5q5AkHM=
Subject key identifier: 7D:3A:CC:B4:D7:84:70:D3:66:1B:C8:8E:E3:3E:5C:E1:98:E6:DD:4E
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer: /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial: 0196C2A70FFFA3F319252E50743DAEDE3486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number: 0208
Signing time: Mon 12 May 2025 04:00:50 +0000
Manifest this update: Mon 12 May 2025 04:00:50 +0000
Manifest next update: Tue 13 May 2025 04:00:50 +0000
Files and hashes: 1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: E6MeKM3GJWSoOQgEiil+bLRJIL97I43fGHENjUwsqbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:0f:ff:a3:f3:19:25:2e:50:74:3d:ae:de:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
Validity
Not Before: May 12 04:00:50 2025 GMT
Not After : May 13 04:00:50 2025 GMT
Subject: CN=7d3accb4d78470d3661bc88ee33e5ce198e6dd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:dd:d5:85:04:ed:87:05:96:48:54:e3:d7:
b7:c8:4c:01:2f:a7:4c:93:67:11:30:d7:1e:85:9d:
7e:9c:f1:d1:6f:c0:db:a2:ad:84:7d:d7:69:96:a8:
a5:a0:c4:ed:68:e7:56:a8:b9:5c:64:65:b7:a9:86:
5b:8b:55:e9:5f:21:84:1c:a9:8c:83:2f:0e:97:bb:
c8:35:be:f7:14:96:0f:84:17:3c:b9:b8:40:25:0b:
4c:8f:94:c0:32:18:86:7b:64:50:94:0c:03:c4:73:
44:4c:9e:2a:85:53:c8:40:d9:a9:76:d5:b5:3d:06:
d1:e0:51:ce:ad:5b:fa:00:28:9e:64:49:8a:4f:11:
c0:03:a5:b0:af:b3:92:88:3f:c6:75:59:35:26:6e:
c5:2c:6b:18:2f:d2:2e:2b:55:f0:80:26:5c:ac:34:
25:b6:ef:6b:e1:e7:cb:62:a2:c2:8c:19:ff:5a:eb:
fd:9e:70:86:21:9d:61:3f:19:1c:62:32:b2:b3:0a:
de:7f:d5:a5:36:ff:cb:74:37:e0:22:03:de:38:ea:
b2:bf:31:d7:10:d0:8c:b5:ee:a7:d3:fb:f6:d1:16:
4a:c3:86:d0:03:08:c2:72:11:34:76:6a:97:16:81:
a9:44:4c:b1:da:98:9d:c1:3c:cb:75:c6:f7:ac:16:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:CC:B4:D7:84:70:D3:66:1B:C8:8E:E3:3E:5C:E1:98:E6:DD:4E
X509v3 Authority Key Identifier:
keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b6:6f:87:fb:5f:5e:38:51:1f:e8:84:5a:ac:06:df:f3:77:
43:09:ee:6b:4b:f7:00:2b:34:15:16:eb:75:e4:0d:01:de:1e:
6c:25:69:e2:7a:20:2d:f3:1f:3e:6b:c9:81:f4:e0:e0:93:d9:
0e:8b:6b:53:3f:21:cd:03:7b:c7:c7:99:44:47:a6:23:ca:6f:
e3:7e:5d:3e:81:a2:a6:7e:ba:a1:9f:76:74:03:6c:c5:af:72:
04:9a:73:2f:c4:24:84:ef:1a:f6:07:ba:32:ba:4d:0b:1e:d8:
2d:1f:a6:5b:de:29:88:3f:04:e1:a9:33:58:0c:c0:fb:0d:6b:
6a:79:57:36:07:7c:8f:b9:d9:a6:fe:24:32:62:06:41:90:bd:
65:0a:fc:aa:aa:16:b5:fe:61:6f:8c:6c:7e:84:51:de:e1:f1:
e8:f4:7d:ce:43:bc:63:80:95:75:c6:19:39:4d:b3:73:f2:c2:
b0:14:f6:2b:d0:33:6c:81:ec:5d:67:89:d7:2e:94:dd:e1:05:
11:5d:0a:d9:09:53:a8:e5:57:d7:47:35:7f:2e:05:b6:a6:75:
ea:50:da:3b:6a:55:77:ed:3b:70:60:21:b1:f6:ad:88:7c:fd:
a7:69:f2:82:9e:0c:8a:6c:82:d4:6a:3a:b8:a6:cd:5f:98:b2:
5d:1e:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:21:58 2025 by rpki-client