Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: 9uC4Q9TKQMnCgXTcvKfvQm4TDWS8N+T/msZ+A/zWsj0=
Subject key identifier: E9:72:6C:C5:C3:71:D9:6F:BD:11:03:2A:B5:00:57:71:FB:E7:BB:73
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019628CDCC850E6792D051EC3F5869EFF195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 07:01:37 +0000
Manifest this update: Sat 12 Apr 2025 07:01:37 +0000
Manifest next update: Sun 13 Apr 2025 07:01:37 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: WvrloUqO2csYZDtkITfJ3U3pVi1vxBSwCDP8wAoEw7I=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:cd:cc:85:0e:67:92:d0:51:ec:3f:58:69:ef:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Apr 12 07:01:37 2025 GMT
Not After : Apr 13 07:01:37 2025 GMT
Subject: CN=e9726cc5c371d96fbd11032ab5005771fbe7bb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:15:b1:1b:84:c9:56:a3:52:18:d5:ea:6a:
31:16:1e:43:e0:03:b8:57:5d:4d:09:2b:65:03:30:
ad:46:58:29:76:51:de:2c:04:5b:42:3f:66:a2:7d:
1e:7f:07:4b:09:ee:2b:c1:1a:2d:d5:b5:16:a9:82:
32:13:dc:0c:23:88:2a:78:c5:22:18:c8:29:73:06:
41:ed:a8:b7:11:6c:2e:fc:ca:c0:ae:6b:7f:c9:ac:
91:36:66:7f:03:9f:34:95:c8:4b:f3:ae:42:0a:f7:
00:c7:f1:4d:26:be:5e:fb:04:8b:30:36:0b:f5:09:
e9:f4:40:3d:f3:9d:b1:ec:d1:48:91:77:eb:a6:bd:
67:98:08:84:33:06:48:2b:b2:0b:ab:4e:ca:41:8b:
8c:ae:3f:e7:00:9f:de:78:5d:8f:07:0d:7e:5e:61:
ab:8f:73:bf:1f:b3:d2:f8:59:75:da:e0:c7:6d:2d:
13:0b:fa:4c:f3:85:45:a3:65:0d:19:f7:91:db:3f:
62:f9:5d:16:d0:51:aa:14:f7:dc:e5:ee:57:d1:0d:
25:bf:17:d0:15:61:16:6f:f0:5e:ae:be:d2:f5:e3:
f2:79:00:d5:a8:6e:d1:46:82:4a:64:0a:a4:64:15:
26:21:00:72:bf:e5:91:b6:61:a4:be:87:f7:4c:f9:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:6C:C5:C3:71:D9:6F:BD:11:03:2A:B5:00:57:71:FB:E7:BB:73
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:a3:9a:6d:5d:bd:f9:72:cc:2b:25:5c:c9:9e:52:02:03:
86:aa:5e:65:91:1d:36:44:12:d5:da:aa:94:cb:5d:35:c1:83:
db:dd:12:86:5d:93:b6:a1:a6:22:4d:52:47:9a:c3:cb:09:95:
46:7a:00:1a:57:cf:ec:0f:e6:2c:45:2a:45:ae:73:07:0d:95:
bf:f5:fe:94:41:5a:69:a8:5c:b4:0f:51:b2:4d:14:10:2d:c9:
4c:72:5f:4d:0b:91:0e:ca:42:ac:f7:ed:33:a8:93:eb:01:ca:
34:be:e0:0e:7d:18:c5:72:12:98:29:38:a7:5e:9e:21:2a:6a:
23:0d:74:e8:02:2c:e7:e2:4f:39:d8:6c:d2:8e:a0:b3:2e:cb:
ab:dc:15:8c:40:fa:32:7d:ef:a0:c4:5b:7e:60:e6:23:42:11:
3b:60:bb:82:32:5e:73:29:c6:5d:4e:5d:5f:5b:e2:5b:a5:80:
1d:d9:6d:6d:58:71:4a:c2:62:9a:f5:05:21:35:eb:42:ef:b5:
2b:c1:b0:4b:e9:fb:45:73:f2:38:05:fa:ad:c2:25:5c:a9:04:
23:a0:cc:75:54:14:2f:e3:63:b7:93:e4:be:25:cf:f2:65:dc:
8f:32:96:e6:9a:0f:06:85:5d:85:08:86:ec:4f:23:da:05:bd:
e8:74:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:20:05 2025 by rpki-client