Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: 4NLntV9rk81ZZ+9ursCitj7OgV9mlZmwYCWsegYYg2I=
Subject key identifier: B3:4B:EF:3D:33:09:EB:BD:50:C7:13:EC:0A:FA:90:C8:C3:96:8A:06
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 0196B4EB571E471793F4846BDF313720FBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 12:00:44 +0000
Manifest this update: Fri 09 May 2025 12:00:44 +0000
Manifest next update: Sat 10 May 2025 12:00:44 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: 6QL9FJ/I+vIQSojVdjwACZKBHSCWUUwVgRP2a53Ic4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:57:1e:47:17:93:f4:84:6b:df:31:37:20:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: May 9 12:00:44 2025 GMT
Not After : May 10 12:00:44 2025 GMT
Subject: CN=b34bef3d3309ebbd50c713ec0afa90c8c3968a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:e4:e4:3a:20:16:8c:f1:47:aa:41:51:d4:
78:f5:26:23:98:99:a1:7d:5b:03:e5:63:1f:7e:3b:
f7:30:98:81:87:87:9a:0e:0c:36:0e:ff:99:8f:36:
df:8d:b9:64:c1:f7:96:91:79:ff:5f:f9:1e:56:74:
ab:f9:f7:3f:7a:85:0b:b6:9f:7f:6e:3a:09:54:0a:
b9:2c:b2:b7:89:2e:3e:50:f1:20:ef:d5:41:57:97:
9d:9e:6a:23:03:82:a5:dd:b8:68:c9:c0:be:c2:8f:
c7:fa:bc:87:f5:15:f2:3c:04:b5:89:70:08:65:f7:
01:92:1d:ae:06:c0:37:2c:90:c7:a5:b0:95:66:67:
2b:03:b5:09:87:28:4b:d8:06:88:dc:53:76:fa:f9:
5e:86:3b:20:1b:16:90:c6:e8:d5:bf:cd:23:66:0a:
58:ac:b8:a7:9d:30:ba:8b:6e:fb:67:7b:1a:54:a2:
45:e0:6c:04:5f:90:63:82:9d:cf:78:8c:85:cb:b5:
ed:98:c1:3d:f2:31:fe:68:e8:bb:5f:e2:f2:cc:0d:
fb:bf:4f:c6:a1:7c:72:95:52:88:76:54:d3:7b:62:
a5:da:91:34:95:dd:da:f2:5c:3c:97:87:01:0d:dc:
72:3d:35:b0:64:0b:16:88:0f:1b:46:e7:67:09:95:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4B:EF:3D:33:09:EB:BD:50:C7:13:EC:0A:FA:90:C8:C3:96:8A:06
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2f:9e:6e:66:60:e1:0f:a5:66:2b:48:07:a2:a4:70:ed:2b:
23:52:12:53:61:2e:c7:2b:95:87:0a:ba:fe:79:94:6e:fb:2d:
ff:49:00:59:97:57:02:5e:f8:b3:62:10:67:84:fc:f7:7a:da:
f0:90:a2:a4:b3:42:91:c6:37:11:f4:8c:b3:0d:5a:57:e7:97:
1d:a0:04:30:cc:21:27:18:17:4c:a6:88:94:81:09:18:64:30:
73:a6:f7:2a:f3:11:b4:f4:1e:1e:60:52:63:ab:cc:ae:58:80:
db:a4:a1:5b:87:58:a8:8f:3a:08:68:c2:83:62:87:7f:ab:b4:
67:4b:db:03:b4:ef:68:bf:d9:4b:e7:0a:5d:51:fb:0f:b3:19:
04:94:46:a1:41:eb:c2:a9:1b:11:cc:00:60:94:54:f8:17:a0:
cd:28:4d:24:a7:7b:90:02:68:66:bf:c9:08:f8:09:0f:ad:77:
27:06:a6:43:a9:42:ca:b1:50:6a:00:c9:5a:95:31:88:c8:f6:
dd:98:7e:c5:05:f4:6c:f8:38:8b:8e:ae:fe:f2:ad:e0:c7:e2:
14:c4:10:0c:fa:b8:da:dd:4d:af:e9:98:4f:a3:eb:31:a2:5e:
d4:71:98:49:1d:07:89:7f:5b:c8:01:1a:8c:a5:98:6b:c4:b0:
9e:72:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:01:03 2025 by rpki-client