Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: aiLLXXqwUMW/3gWrPVVqMZU82FkISjtoWP2ysEsFnwM=
Subject key identifier: 2E:70:61:81:E9:D9:CA:56:50:A9:AA:8B:FB:5B:99:CE:1E:4D:6F:49
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01958BF24C67955EAD103B30E6A9F5ED5DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 149D
Signing time: Wed 12 Mar 2025 20:01:06 +0000
Manifest this update: Wed 12 Mar 2025 20:01:06 +0000
Manifest next update: Thu 13 Mar 2025 20:01:06 +0000
Files and hashes: 1: 8f1DQEzOmVOlZREX0FzyX7_KlmU.roa (hash: vPG/1XLUFUdmTpDY8V/ZQr1qcuxaKozSqJOdcnOMn8g=)
2: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: mpxJCt3U/p1MnotcQHyXJCoOTue87bN93CMcE1Ut6AM=)
3: qSt6_fPnhc395r0EppghyMpbl50.roa (hash: WLU9AacDdZK/vCoUCpNnuiXgsMa/7UTXH1xNyMiTNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:4c:67:95:5e:ad:10:3b:30:e6:a9:f5:ed:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Mar 12 20:01:06 2025 GMT
Not After : Mar 13 20:01:06 2025 GMT
Subject: CN=2e706181e9d9ca5650a9aa8bfb5b99ce1e4d6f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:57:95:5b:51:74:05:0e:f4:85:f0:89:1c:
07:f1:2e:d6:59:7a:12:7a:f5:c3:7a:77:ea:7a:a2:
24:b6:f9:01:ea:32:06:03:3c:0a:9c:fe:21:b3:b7:
55:a8:27:25:47:74:2b:46:48:74:ce:03:97:20:60:
44:35:88:df:35:73:4b:04:eb:f1:8a:5b:59:1e:a7:
cd:ba:61:83:8c:f2:5e:30:57:a1:ef:59:1a:1b:45:
b2:6c:8b:72:b0:71:85:24:73:53:e1:20:32:bd:41:
a8:71:1a:f1:c3:77:d7:14:66:fc:a1:10:f2:0a:8e:
cc:99:0b:32:f0:fa:82:82:b8:42:52:a0:e7:13:91:
3a:80:4f:1a:71:b7:f7:b1:b1:72:e6:7a:64:4e:cc:
18:f4:45:f5:6a:f0:d0:4d:67:0e:06:55:d8:4b:82:
e1:5f:44:b1:c7:f5:a4:44:7f:60:6b:90:0f:0a:c3:
21:e8:53:7a:ae:64:c9:c4:04:bd:83:90:ea:bb:5b:
3b:d7:1c:65:03:05:a0:33:38:47:86:ab:7e:dd:ff:
00:e1:d3:a7:ce:76:6a:86:b3:d1:81:64:56:fe:36:
e0:f5:f0:e2:af:b8:2f:1c:8b:b4:ef:fa:06:8b:ae:
a4:52:d9:f9:c0:14:c6:eb:d0:9e:d8:a0:c9:df:a1:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:70:61:81:E9:D9:CA:56:50:A9:AA:8B:FB:5B:99:CE:1E:4D:6F:49
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:82:94:79:d5:1f:ad:cd:a6:de:44:fd:fe:e0:eb:62:9c:
d1:b5:04:49:4f:4e:77:9e:a8:a6:0f:e3:d4:59:67:56:35:78:
0b:62:04:c4:1a:30:1d:e3:2b:ce:47:3d:0f:49:e9:c7:10:76:
bf:05:be:b2:1d:89:85:e5:39:b5:2e:11:ce:31:12:b7:89:42:
ec:e8:da:d4:47:14:3f:98:b7:a6:33:e8:78:10:f0:fd:4f:52:
fa:76:46:88:34:98:ce:d3:dc:56:77:e6:f3:42:f0:53:3d:65:
e4:cc:97:49:f2:d9:30:1e:db:9e:3a:a0:09:18:f8:0c:39:7e:
6f:f6:c6:bc:49:0f:f9:7c:eb:02:3a:a0:d3:77:e4:fc:78:1f:
79:e0:56:bb:8c:eb:ad:a2:0c:37:ac:16:25:04:ac:6d:3d:2b:
06:43:7b:bd:6c:a9:5a:27:49:f1:69:6b:63:fb:d5:24:bf:d0:
55:36:1d:a9:8a:97:cb:fa:8e:a5:38:26:74:ff:48:ae:dd:af:
93:b0:04:56:79:fb:66:8d:61:f5:32:3f:fa:a2:f2:b5:4d:cc:
6a:c4:60:28:fd:01:59:ac:22:1a:9e:02:66:39:dd:ac:74:da:
a8:10:8f:48:0a:30:34:00:32:65:24:8f:f9:8e:67:8c:46:b9:
0b:6a:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:38 2025 by rpki-client