Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: AfKHOwQWNBWXKyBgmRP8lnThqNehFYEjqsZbyY3TDhg=
Subject key identifier: 39:A6:2A:5C:72:0A:1C:DE:21:67:78:E7:CE:65:40:9C:E5:1A:96:5A
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 019578D8AAC2F415F337DD2B6C55E92623EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0C65
Signing time: Sun 09 Mar 2025 03:00:20 +0000
Manifest this update: Sun 09 Mar 2025 03:00:20 +0000
Manifest next update: Mon 10 Mar 2025 03:00:20 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: QgKxpbhAaDI2HINEEnagBPEBnohUOrjsfJxZM1iO9ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:aa:c2:f4:15:f3:37:dd:2b:6c:55:e9:26:23:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Mar 9 03:00:20 2025 GMT
Not After : Mar 10 03:00:20 2025 GMT
Subject: CN=39a62a5c720a1cde216778e7ce65409ce51a965a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:11:0c:79:a9:43:d0:7d:57:d4:c5:a2:26:
07:7a:4d:fa:92:22:82:d0:d4:60:68:0c:67:34:d0:
48:47:31:26:f9:0a:b1:ed:cd:ed:cd:d2:08:da:ac:
f9:37:a1:ae:fc:cc:0a:a5:00:49:c9:d0:0f:81:7c:
9c:e0:dc:9b:30:a2:0a:81:7f:ad:50:9f:88:c5:d7:
29:94:d7:ff:f2:30:4f:cf:cd:65:9e:92:75:3f:ab:
fa:fd:d3:38:41:74:99:4e:49:57:6e:ba:49:73:d3:
f2:55:22:25:5a:46:62:b9:92:62:49:78:18:97:8a:
40:f9:28:be:3e:a9:27:24:b1:0d:0d:8a:22:2e:53:
5f:59:2b:cd:f6:a9:a0:f5:50:66:52:8f:fd:f9:34:
a4:06:c3:bc:41:5d:59:47:c1:db:92:60:ff:98:d8:
e4:d2:63:88:21:2e:8e:37:9e:0d:cc:e4:33:a4:99:
81:89:48:47:7d:8f:06:ed:a0:bc:52:cf:c3:c7:67:
9d:ef:3c:64:11:89:48:1f:97:d4:07:c4:49:11:44:
64:69:aa:0b:09:e7:0a:f8:d3:c1:a4:09:8a:fb:2f:
66:4f:39:aa:5d:e0:af:fd:21:99:92:3b:f0:b4:68:
5a:a7:53:eb:3a:f0:47:69:80:89:c4:56:07:3e:60:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:2A:5C:72:0A:1C:DE:21:67:78:E7:CE:65:40:9C:E5:1A:96:5A
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:92:e5:e5:48:59:94:02:6a:9e:b2:41:b4:8e:fa:65:de:
27:63:1a:4d:74:92:f7:c9:78:72:71:6d:7c:56:b6:ff:f2:b8:
67:ce:bb:98:3a:6e:4d:88:62:57:7f:e6:4a:80:49:bf:8d:35:
34:4b:2f:00:0d:5e:6a:f6:0e:e3:3d:8c:b1:1f:90:08:9c:f9:
ef:00:47:56:17:4f:8f:49:49:61:4c:d8:99:d2:4e:2b:b2:44:
04:c7:67:06:90:8c:f6:43:8d:8e:74:80:68:1c:d9:28:4b:b1:
b2:38:59:c5:cb:9d:75:ff:b3:f3:dd:df:03:9d:68:55:71:24:
c8:71:0f:8f:7b:bd:de:bc:9b:04:18:52:f8:9c:48:77:7b:a9:
ca:c3:5a:e4:7b:8e:fd:e5:3f:83:19:c1:21:f9:44:e7:65:10:
96:ff:9a:36:02:cb:90:02:14:b2:fb:af:b3:57:b0:05:8f:43:
31:73:5f:2f:e0:57:60:8a:9a:32:64:b8:94:59:b9:99:89:70:
1f:e9:8f:99:2f:d7:b1:02:e0:e3:24:9c:ae:ce:23:d2:f7:be:
16:8d:cf:59:51:22:c1:50:ff:20:e9:20:b9:ed:23:fe:93:d8:
c2:16:d5:83:f9:79:6c:72:71:c6:23:4a:30:f0:d7:e7:46:5f:
3c:c3:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:11:40 2025 by rpki-client