Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: +Ub/MLvDHck8WEp2g316DeKlaioFesnjMY8vZrfl+2U=
Subject key identifier: E8:0F:00:F3:75:5B:E2:D9:A4:1E:0E:C7:EA:A6:D5:6E:EF:0B:42:90
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019656810E9280A3735592BE32D022CDE149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1491
Signing time: Mon 21 Apr 2025 04:00:20 +0000
Manifest this update: Mon 21 Apr 2025 04:00:20 +0000
Manifest next update: Tue 22 Apr 2025 04:00:20 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: mRRaqT3oMkkgRA+/3IeAEFp+tjpWJN2/w206i/OAw8c=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:0e:92:80:a3:73:55:92:be:32:d0:22:cd:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Apr 21 04:00:20 2025 GMT
Not After : Apr 22 04:00:20 2025 GMT
Subject: CN=e80f00f3755be2d9a41e0ec7eaa6d56eef0b4290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:ca:8e:17:01:06:d6:c2:e4:db:f6:13:3c:
ac:36:c0:87:3e:41:1d:f2:7d:f0:3d:1e:73:44:25:
55:59:ce:dd:e9:2a:0a:88:ce:ec:0f:e0:3e:b9:fa:
dc:30:ee:6a:5f:ff:fd:32:2b:62:8e:26:64:a7:2e:
94:41:0d:6d:25:f2:13:7b:a3:67:f7:ad:c5:14:66:
3e:80:9f:2b:98:db:b2:d9:5d:6f:96:61:3f:d8:03:
c0:c6:48:e9:9b:13:c1:b4:14:52:86:b6:3c:f0:49:
f4:6d:a9:95:a9:96:02:8a:23:25:27:6f:c4:6e:59:
b3:90:fb:88:15:ad:81:96:05:55:d2:44:72:78:2a:
6b:56:1a:d0:87:66:c3:f9:46:fd:e6:33:4e:82:fb:
1e:66:02:54:69:5c:7a:65:9d:31:c7:52:44:08:bf:
ad:e0:92:30:ca:78:e0:a7:86:df:e7:39:1d:d7:0f:
06:73:9b:9f:d5:eb:3b:88:8a:7b:29:b5:58:cc:dc:
99:7d:e9:41:8c:c0:36:02:00:6d:61:83:34:e9:47:
48:04:1b:d9:7c:83:23:f0:d1:fa:09:b0:d6:c8:ec:
39:71:64:31:11:0e:6e:de:04:dc:fb:07:83:47:fa:
05:2f:82:15:2d:97:9d:37:d5:73:4b:a4:97:0b:ef:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:00:F3:75:5B:E2:D9:A4:1E:0E:C7:EA:A6:D5:6E:EF:0B:42:90
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:ce:7c:c6:b6:c8:eb:71:86:41:e7:08:0f:84:30:cb:24:
90:dc:87:d4:08:8e:cc:90:94:fd:63:7e:3c:75:d3:a9:5d:ea:
71:aa:d3:cd:21:c2:7d:3a:9b:cc:3a:6c:f2:4b:0e:00:14:f0:
5f:43:ff:c8:07:13:cd:9b:4b:83:58:e4:46:e9:0a:c2:50:f4:
46:de:88:1f:1b:b4:26:65:46:23:8b:6c:bf:5b:ec:6b:9b:47:
1c:6e:7c:9c:83:e4:3c:06:60:ed:55:15:a8:1d:48:6b:56:25:
7a:9e:bf:db:04:9c:31:4c:8f:46:69:7d:b0:10:5d:89:6f:f3:
a1:1b:69:15:c9:97:2f:aa:52:21:07:72:0c:3c:b5:91:72:e9:
b8:fb:c7:0f:19:41:2d:d5:66:39:e7:1a:5b:5e:1e:67:bb:75:
7d:82:99:75:70:1a:f7:89:46:25:56:09:0c:96:41:3a:04:4d:
07:95:a7:a4:89:a4:6d:af:d3:03:51:47:45:e6:21:37:a4:a5:
b7:a0:45:9c:e3:15:2b:87:31:56:52:67:48:aa:a0:01:e7:0f:
90:66:f5:31:a5:fe:4a:0d:f3:c2:9f:d1:8c:b4:ba:6b:97:73:
71:4d:a3:99:c2:4f:a7:07:2c:4b:24:d3:44:65:61:b2:6d:b7:
86:90:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:26 2025 by rpki-client