Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: 87GaysAGKHRXFToObtRuLNy8iPak0PBR3gQIxE/FtcI=
Subject key identifier: 45:E8:B0:13:C9:0D:22:AC:82:DD:F1:AE:39:05:DB:E0:C8:09:5B:EC
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019642559719B73D2C565A81754260B92FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0CEB
Signing time: Thu 17 Apr 2025 06:00:27 +0000
Manifest this update: Thu 17 Apr 2025 06:00:27 +0000
Manifest next update: Fri 18 Apr 2025 06:00:27 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: 61YSH0ZyLLGSJyXxFN0tRKOu6j3nt+UOoIDEWL1EwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:97:19:b7:3d:2c:56:5a:81:75:42:60:b9:2f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Apr 17 06:00:27 2025 GMT
Not After : Apr 18 06:00:27 2025 GMT
Subject: CN=45e8b013c90d22ac82ddf1ae3905dbe0c8095bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:c7:c9:7a:43:07:29:20:25:d9:6a:4b:c1:
e3:24:a0:41:c5:bc:e2:b4:0f:65:24:36:be:b8:e4:
27:8f:ce:82:f0:f1:8d:56:49:91:57:c6:64:ef:c5:
c8:04:ab:29:21:36:80:12:0d:45:a0:1a:f4:30:3e:
90:b6:b9:0c:29:94:b5:06:c9:50:33:01:c0:3e:4e:
21:9c:1f:c0:4b:10:8f:d4:36:1b:2f:45:bf:59:ba:
de:fa:76:6e:45:e4:56:ac:a2:ef:cf:9c:3b:36:48:
b7:95:b5:d0:e3:24:4e:11:52:69:75:f1:4e:ef:6f:
3d:59:3d:77:66:0d:42:de:00:6d:33:b8:98:bc:03:
99:f3:d8:4c:fb:dc:20:5c:ee:78:c5:b9:fc:5c:fe:
7b:02:90:e3:66:d1:cb:a7:d4:61:db:1d:a7:f2:56:
b8:d2:cb:69:2c:86:81:04:14:a8:b7:f2:44:58:b1:
81:0e:69:1e:06:8a:ad:62:a5:78:d1:4b:fd:ec:f7:
81:8b:70:d7:96:54:0a:74:45:58:a0:57:63:ac:b6:
54:b5:65:99:ab:af:a8:49:dd:c5:5c:8b:51:c0:e7:
92:d3:3d:d2:b0:ae:17:ea:19:b4:8f:a4:c3:6d:1a:
04:21:e5:1e:cb:74:2a:86:43:06:04:3d:50:e4:81:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:B0:13:C9:0D:22:AC:82:DD:F1:AE:39:05:DB:E0:C8:09:5B:EC
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:37:73:1e:b6:07:0a:58:6f:bb:7b:a4:75:cd:4c:b5:46:
eb:d4:e4:2e:a3:f1:d7:48:63:df:91:64:cf:f2:98:d6:81:cb:
9b:2f:d4:e4:45:9c:0d:6c:ce:67:6c:2c:6e:b3:27:e7:d6:df:
ef:25:5e:08:7b:27:b7:04:eb:02:4d:83:73:41:6b:38:72:11:
d1:29:ef:3c:3f:01:bf:f2:2f:b4:c1:cc:5e:a5:80:6b:74:8e:
08:83:12:e0:6c:fc:f2:da:18:c2:ad:52:79:29:d4:51:7b:d1:
18:48:89:ef:8d:96:0e:fd:08:de:8c:c9:e1:c8:db:95:de:ee:
bc:81:76:2a:0d:4b:11:30:85:5f:e1:94:a0:51:e9:f9:cf:00:
de:f4:f0:6a:fa:ea:72:83:06:ca:8e:a4:68:e3:92:b7:bb:38:
f4:84:af:48:5a:b8:81:32:ec:bd:5c:3a:47:54:a4:da:5b:72:
d4:19:1c:8d:6e:28:9a:2d:6d:c8:89:54:73:38:76:f0:d6:89:
37:43:61:29:ab:ee:61:eb:92:37:60:c3:d8:d8:c0:f7:08:49:
c5:5f:62:0c:25:95:23:44:4d:d7:2a:09:33:c2:7d:56:15:2a:
6e:c0:36:a4:2d:e9:4c:e7:22:56:8a:ef:19:5c:8e:52:12:07:
12:01:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:38:35 2025 by rpki-client