Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: N6kZbBZOx1GCHa6TX7sjJHdaKEVXOx6EDvXSM2H96n8=
Subject key identifier: 17:0B:6D:7A:A3:4C:B6:FF:E0:D8:5C:93:1D:4A:DF:26:AF:2E:28:B4
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 0196C9F27AFABD27B8B189EF0B1CFE43C076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 0898
Signing time: Tue 13 May 2025 14:00:33 +0000
Manifest this update: Tue 13 May 2025 14:00:33 +0000
Manifest next update: Wed 14 May 2025 14:00:33 +0000
Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: H32flYIJE85phbkfPL5aX9Q70n8EozlT4hHmSM+IHZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:7a:fa:bd:27:b8:b1:89:ef:0b:1c:fe:43:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: May 13 14:00:33 2025 GMT
Not After : May 14 14:00:33 2025 GMT
Subject: CN=170b6d7aa34cb6ffe0d85c931d4adf26af2e28b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:95:1d:27:00:2c:2c:50:88:8e:d3:fc:d1:
c8:53:e5:e2:ed:2e:cf:77:d8:da:b0:0b:f9:6b:70:
00:c3:b3:a2:0e:93:96:b3:3f:35:76:47:f6:a3:77:
d5:e4:ec:91:a2:6a:b7:52:01:1f:18:2e:62:83:95:
59:65:67:4d:eb:e0:4c:6a:2a:41:98:e6:c2:de:ce:
83:f0:4b:1f:46:fc:b0:b4:7b:27:56:69:aa:ba:c4:
b7:ce:2d:fd:92:5a:65:d5:ed:a9:1c:66:5b:86:3c:
5c:14:33:e6:9f:95:7f:44:8a:06:10:e3:d5:5c:2d:
02:99:12:b0:d2:c5:b9:fd:2f:6c:e7:9b:65:34:80:
c7:91:49:63:a7:3f:67:53:75:f9:72:87:90:cc:e9:
60:0d:7c:2f:7f:ed:b8:1b:c9:81:2f:84:0f:e9:a2:
61:ec:75:f7:92:15:56:e0:17:20:a2:06:6a:21:c1:
34:56:71:3d:da:f7:de:dd:03:57:c9:73:57:70:ed:
32:11:51:f2:fe:5c:3a:b2:a7:53:92:09:e2:57:63:
11:68:b8:2d:69:77:fd:b7:30:f6:c0:df:2c:ea:de:
61:8c:29:dc:6e:af:25:1f:5e:35:f2:7d:78:0e:dc:
ad:07:51:78:a6:10:e9:52:99:e1:7c:30:a2:c7:b5:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:6D:7A:A3:4C:B6:FF:E0:D8:5C:93:1D:4A:DF:26:AF:2E:28:B4
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1a:d9:2c:b3:83:70:ce:74:e7:f8:70:0c:7f:bf:fb:0d:de:
46:1a:5f:3f:9e:d6:06:a2:32:f2:da:8a:49:3a:50:a9:d5:88:
eb:a7:ac:9f:94:56:18:59:71:56:04:40:d5:64:fe:fa:e2:e1:
b9:65:46:f4:ee:e3:a2:ba:77:92:56:ea:a6:83:4c:ca:2c:9b:
41:88:e3:df:dc:cd:8d:bb:80:19:2a:87:bd:ce:02:5d:1f:0e:
30:8e:e5:b0:03:04:f9:99:5c:92:04:39:09:5c:32:13:0e:6f:
a7:17:06:bd:15:6a:b5:8b:c0:13:9e:f6:1c:20:19:bc:60:74:
4c:63:94:7b:56:60:8f:75:7b:9b:da:6b:f3:60:22:c5:57:d6:
8e:2d:92:2d:11:69:41:9b:30:6d:11:85:99:3b:68:c1:52:fc:
80:ec:51:c4:f2:5c:2e:bb:92:9f:59:31:cd:48:44:32:6d:ef:
de:b4:0c:04:3f:a4:93:3d:73:67:24:80:bf:bc:b4:80:ef:17:
47:3b:e5:9a:c0:1f:a9:aa:62:76:3f:77:7e:90:09:b9:db:5b:
64:60:98:fd:b4:11:c6:e4:1e:12:ce:29:b0:91:02:dc:c1:01:
11:63:64:ca:9a:01:60:75:29:91:fa:50:75:09:78:19:68:0a:
04:b9:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:17:34 2025 by rpki-client