Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: sgNU94ktg+G7VAcqKoVEpoIhyC+qycZbkwktxG20RBE=
Subject key identifier: E5:D9:1A:6F:3D:29:B2:10:48:98:44:1A:C5:C4:2B:51:C5:F6:21:81
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 01962A17701712C63B8E1BB1C31A8CDC18AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 13:01:41 +0000
Manifest this update: Sat 12 Apr 2025 13:01:41 +0000
Manifest next update: Sun 13 Apr 2025 13:01:41 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: 7toSTDqyfX01xENWr5xMTK8o6FiVBRW2Ed8UUX43Zzs=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:70:17:12:c6:3b:8e:1b:b1:c3:1a:8c:dc:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Apr 12 13:01:41 2025 GMT
Not After : Apr 13 13:01:41 2025 GMT
Subject: CN=e5d91a6f3d29b2104898441ac5c42b51c5f62181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:4a:13:c8:a2:a3:9e:fd:74:f5:c7:05:76:
b4:ed:e0:75:e2:b3:6e:4a:00:1f:a6:cf:c8:e6:89:
ad:fd:d1:fe:ed:52:fb:bd:df:6a:1f:2c:72:04:ef:
88:38:c2:36:da:03:d8:48:ce:a4:5c:24:48:f6:b9:
d7:bb:35:a3:90:ac:9c:d1:e0:d1:66:2e:b9:a6:e3:
81:ca:ad:a8:88:1d:8f:ab:58:52:92:f2:46:6f:0e:
e3:ba:c8:e8:47:d1:4d:5d:98:12:69:af:19:15:8e:
df:b7:8b:2b:c0:c7:fb:32:f3:7f:27:79:fc:8e:64:
c5:91:91:7a:8a:ab:f8:f1:99:c4:24:8b:56:5b:77:
bb:cb:59:88:4d:99:12:6c:89:3d:87:40:08:e3:b9:
e2:43:0e:53:59:d0:ce:6e:19:d3:75:bf:1e:b5:97:
02:53:5e:9c:cc:6a:1a:de:80:11:af:d1:3e:25:fe:
0c:41:44:bc:9d:7b:6c:6b:6a:d1:21:54:f0:20:eb:
bc:c0:2c:7a:75:8f:c9:02:61:c3:46:2d:12:04:8a:
be:8c:3c:41:c1:51:db:10:24:3b:b3:40:c8:89:71:
ca:c8:45:dc:6d:69:9a:4f:71:de:f6:68:0d:2a:9d:
b0:c8:fb:7d:22:7f:7c:c0:ad:19:bb:1e:52:87:2e:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:1A:6F:3D:29:B2:10:48:98:44:1A:C5:C4:2B:51:C5:F6:21:81
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:60:07:81:4b:7b:8d:11:4f:38:9d:83:6c:9b:ed:5a:ac:4a:
ba:65:ea:3c:a4:94:d2:66:70:74:5f:67:5a:04:02:d7:ae:15:
cf:f5:c5:42:e6:9e:fe:47:05:5c:f2:bd:e9:40:d5:82:80:69:
6a:b9:c3:67:f9:14:9a:8a:7d:d6:f0:6e:80:e6:2f:f0:e7:15:
64:38:44:7b:24:87:68:97:c3:e8:58:00:c1:6c:58:8b:83:d1:
f7:cc:eb:8e:7d:5b:c5:7f:0c:cf:25:6b:78:31:84:d2:c5:3e:
01:e2:e5:52:b8:61:e2:d7:88:00:9e:5d:f4:00:67:97:da:60:
13:2d:90:6f:29:1f:81:58:6d:d3:74:23:f5:e9:7f:1c:19:7e:
f6:4e:d5:c1:91:ec:1c:ba:70:e4:89:42:30:ad:43:c6:c7:93:
3a:15:27:75:8b:01:e1:10:0e:8c:58:49:86:06:af:5a:94:a8:
b8:65:29:0d:b0:bc:a0:32:8d:20:25:82:3d:1e:a3:fe:63:71:
2f:4d:d0:23:87:96:b7:46:f8:7a:69:18:6c:88:d6:d8:5e:d4:
28:4c:f9:57:b9:e3:66:6d:d8:97:b2:3f:0b:ea:db:25:a2:fe:
b6:81:05:40:f0:fc:60:c2:1a:1e:26:60:e1:a1:1b:27:13:1a:
a1:31:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:45:08 2025 by rpki-client