Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: Zd+7KPqTU5Nj6lHWddmcoiaqS7pU737QRVi/e7vdb/c=
Subject key identifier: 81:D7:F6:7E:6C:17:5F:2D:7B:A5:55:D6:A0:31:23:78:F7:4A:24:6E
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0196591537BC05DEBC5871B6DBE312B9618E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0D5A
Signing time: Mon 21 Apr 2025 16:01:24 +0000
Manifest this update: Mon 21 Apr 2025 16:01:24 +0000
Manifest next update: Tue 22 Apr 2025 16:01:24 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: 4Q8YmWyZ4zLxNqRAeq+8+ckN9+WRHWGuPpgKmP9tiw0=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:37:bc:05:de:bc:58:71:b6:db:e3:12:b9:61:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Apr 21 16:01:24 2025 GMT
Not After : Apr 22 16:01:24 2025 GMT
Subject: CN=81d7f67e6c175f2d7ba555d6a0312378f74a246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:fc:ed:71:77:18:43:8f:17:e4:b8:32:b0:
85:30:4c:2d:9b:c9:32:a4:30:2f:8d:8e:a2:87:70:
c3:94:52:c7:43:bd:6e:94:ea:ce:d9:a2:7f:17:4c:
f7:27:ab:ab:8d:4a:b1:07:db:5f:dc:3e:8c:83:f4:
41:86:1a:d5:c1:63:f8:3e:ba:ad:59:99:46:71:3b:
87:2c:bc:02:67:0a:c7:30:34:67:19:79:0b:36:66:
50:2c:e0:f4:8e:a5:8c:97:62:22:2c:02:97:9a:5a:
35:07:8a:d1:9f:67:92:17:8c:58:f2:6c:a9:07:28:
67:b0:fe:c5:ae:22:55:00:5a:0f:e0:3b:ce:db:13:
10:c9:35:7c:29:f4:34:17:da:29:fb:2b:ba:21:e0:
92:b7:3f:00:c0:35:6c:5e:3c:be:0f:3a:5f:58:9c:
47:fa:1f:81:04:52:8a:8c:1d:b6:b0:ea:65:f4:9d:
71:ce:e6:ef:dc:16:e6:79:10:e9:93:bf:44:88:0b:
5b:17:56:c2:e8:99:75:31:35:81:14:6d:4f:43:7e:
a8:a6:6b:d6:71:fd:e2:78:24:5b:af:d6:3b:79:8a:
a3:1d:3e:8c:4e:81:b2:18:7f:1b:c2:ae:07:78:34:
a6:c5:6a:bf:a7:96:bb:3c:a6:e3:ed:21:88:e2:31:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:F6:7E:6C:17:5F:2D:7B:A5:55:D6:A0:31:23:78:F7:4A:24:6E
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:14:17:6b:62:17:82:3a:4a:b8:74:c4:ee:51:63:e0:b6:
d6:65:06:16:1d:a6:d6:39:ff:35:7d:fb:1b:6a:60:99:65:e6:
e8:5b:0f:c3:6b:17:df:3f:e1:5f:4d:01:47:f3:18:32:e1:0c:
84:c5:d2:85:7f:07:b1:c3:ab:5e:d6:d7:e9:7b:ee:16:fd:09:
08:b0:fd:62:a8:1f:77:5d:5f:1f:b3:7d:a2:81:89:57:47:42:
9e:f3:9f:cd:8c:86:2d:69:8e:a9:58:e9:0f:1b:42:fa:a0:59:
60:b0:6b:65:11:34:7a:04:c3:32:01:c8:9c:35:3b:0b:d6:f4:
15:84:db:c0:49:99:cb:08:42:54:92:23:43:eb:eb:20:8c:cf:
da:9f:f2:66:88:7c:82:df:53:76:2a:b5:cd:f9:19:33:10:e6:
38:ce:57:68:48:91:5c:82:34:58:fe:d5:f0:09:34:f8:ea:e4:
31:35:1e:e3:bf:0a:d8:fd:82:cb:6a:e6:d3:3b:22:b4:40:a7:
98:5d:17:c1:69:60:e0:f8:62:34:48:2d:a8:42:27:56:fb:13:
15:1b:4a:2c:f0:56:8e:81:c6:72:bc:7f:27:3f:02:13:df:4f:
5a:70:2e:19:d5:3f:0a:d1:0b:87:80:54:c1:32:8a:56:c4:aa:
e0:1e:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:36 2025 by rpki-client