Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: NVKUGvnuo4h70Ehi5AW6hGe2znvJW0Pi6aVF3tDHt5M=
Subject key identifier: B7:09:22:A6:43:8E:74:CD:22:BD:E9:82:60:EF:D2:55:9F:67:19:9C
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019655DD2E082316117A1811F6794D657B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 08C4
Signing time: Mon 21 Apr 2025 01:01:20 +0000
Manifest this update: Mon 21 Apr 2025 01:01:20 +0000
Manifest next update: Tue 22 Apr 2025 01:01:20 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: YbekKxtZlLl1K0uhI7fptAMEzOM8qhB4eUSNLFQreT4=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:2e:08:23:16:11:7a:18:11:f6:79:4d:65:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Apr 21 01:01:20 2025 GMT
Not After : Apr 22 01:01:20 2025 GMT
Subject: CN=b70922a6438e74cd22bde98260efd2559f67199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5a:f2:c6:82:e5:7c:3f:8a:c0:27:49:99:7f:
81:79:5a:95:90:77:89:70:2c:0f:01:c9:61:4b:68:
e2:d3:2c:3a:51:25:8b:d3:28:a9:60:13:d5:c5:50:
cd:ba:05:4f:d7:11:3f:26:fb:4c:3a:c2:fc:65:a6:
13:0c:aa:c5:db:b4:e6:48:a1:f7:2a:66:0c:37:bc:
95:19:dc:70:b6:18:36:16:2d:7e:95:90:7a:1c:77:
37:9a:35:be:48:20:97:1b:59:63:46:17:42:02:15:
b8:05:3d:01:a2:a7:d5:cf:2b:b4:69:c0:3a:5d:a1:
e7:32:d6:6a:e8:cd:eb:13:ac:37:34:66:4c:46:60:
76:b4:50:4c:6c:ab:0e:0d:1b:7a:37:29:6e:0d:d2:
12:4e:f5:26:fe:93:68:8b:8a:32:e0:8d:8d:76:0b:
5f:ef:38:f9:bb:0a:77:d1:19:10:86:43:6c:6d:98:
04:fd:43:7d:e5:77:10:dd:de:0a:30:db:c3:68:94:
86:63:4f:bd:d1:1b:c4:0b:a1:d3:8a:2f:cd:f7:88:
6f:27:cf:f2:9e:0b:a1:b1:21:ef:bf:31:7e:ef:11:
df:57:ec:96:3b:6f:fe:bc:24:85:4f:0a:9f:e7:0e:
96:40:ac:68:3a:6b:58:29:12:ca:59:d5:91:37:47:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:09:22:A6:43:8E:74:CD:22:BD:E9:82:60:EF:D2:55:9F:67:19:9C
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:90:c3:16:5a:be:96:da:01:e3:9f:0d:41:f4:a1:c7:7a:
8d:46:ae:7f:df:ae:e3:54:73:81:79:e7:80:7c:ac:8d:9c:34:
a3:fa:51:31:4a:f7:bf:91:8b:60:cd:dd:56:f0:3a:e8:8f:34:
95:bf:e8:42:e1:5e:00:db:da:bc:8b:1b:06:f0:8a:4f:b4:4c:
30:2a:59:58:55:b2:b0:f6:c2:35:7f:cc:0b:3f:0c:d8:44:8a:
18:5e:7e:03:87:d2:48:10:95:e2:a9:8f:00:49:e6:6c:05:a7:
a5:7f:df:d0:8c:b5:1b:7e:e2:8c:fc:f2:e5:1b:a7:27:a1:ae:
75:e4:cb:bb:e0:14:25:0b:a3:65:6c:9c:10:1c:20:5d:21:6f:
df:a8:8f:2b:93:4b:06:87:d4:a1:67:ba:1c:c0:bc:a2:e6:6b:
12:41:d2:30:50:2a:b8:6d:23:38:8e:89:57:21:d1:e0:a4:82:
15:c2:6d:83:9f:a2:af:af:55:3d:18:38:47:ac:8b:5b:ed:64:
9e:0a:0d:83:f3:6f:09:f6:a4:4f:a2:bb:20:4b:e2:df:33:6e:
14:76:99:72:e7:64:db:76:24:a6:ee:4b:e3:d6:a6:d6:2d:9a:
34:01:65:51:a6:9b:89:e0:77:97:90:7c:8a:c8:60:18:65:a8:
ab:48:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:01 2025 by rpki-client