Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: nMpaEVnNWhAzfzcivSjbgj0y2fjvMuK2OFp0Fd3pKU8=
Subject key identifier: A0:A6:A1:CC:5D:DF:86:58:7B:31:A2:77:98:53:A7:88:90:5A:45:AA
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 01963DD42FB6D822A7F72CAAFA3CF629C089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 0DCD
Signing time: Wed 16 Apr 2025 09:00:37 +0000
Manifest this update: Wed 16 Apr 2025 09:00:37 +0000
Manifest next update: Thu 17 Apr 2025 09:00:37 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: PEUl0tXYozf7/QvaZZ55wOuvsTnPmO6TL9ZZ/++c/OU=)
2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:2f:b6:d8:22:a7:f7:2c:aa:fa:3c:f6:29:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Apr 16 09:00:37 2025 GMT
Not After : Apr 17 09:00:37 2025 GMT
Subject: CN=a0a6a1cc5ddf86587b31a2779853a788905a45aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:61:7d:e5:84:0b:c0:ce:40:ae:d9:a5:e6:
9a:43:18:43:3c:7c:18:4b:2a:4b:77:f9:5c:45:b5:
af:f8:d9:f6:c9:c9:61:e0:f0:34:8e:5b:ac:b6:50:
74:fb:a1:08:1e:2d:a2:a7:e3:5f:22:3c:8b:d0:a9:
48:be:8b:3e:01:69:1e:f4:30:9b:92:91:09:d6:62:
54:21:96:9c:ea:67:c3:f2:81:bc:7e:f2:12:58:bc:
7b:06:2a:42:cf:08:18:dc:f9:dd:55:7e:df:2f:2d:
0e:48:13:9f:19:ee:9c:c4:6e:65:04:8c:c3:17:96:
23:f7:75:ef:3d:1f:4a:61:cd:17:bf:bd:b0:20:93:
18:c5:f5:40:2e:ea:2a:fd:c4:b3:1f:8e:b3:49:3a:
05:72:5e:55:d9:ea:cf:db:05:d6:ba:5a:2a:94:9c:
1b:ab:22:b1:1d:20:53:5d:a6:59:c6:3e:ad:4a:f5:
83:f7:19:76:c5:88:b0:f3:41:e9:c3:9b:3b:72:bb:
09:41:e7:ee:02:03:a7:cc:ba:36:b8:ec:f5:63:07:
38:30:59:b4:96:0e:d1:cd:53:d2:9e:3a:69:6d:3a:
c9:cc:e9:ae:7f:cf:09:44:7f:ef:4e:f3:73:1f:4e:
62:3b:c6:9d:cb:7f:0a:9b:29:bd:52:b9:cf:1a:fa:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A6:A1:CC:5D:DF:86:58:7B:31:A2:77:98:53:A7:88:90:5A:45:AA
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b3:52:92:b8:b4:bf:20:83:5f:97:11:db:23:93:d7:33:ff:
a3:bf:55:c4:ce:ed:c8:51:1f:9a:1f:5b:2f:3f:82:3f:74:31:
5c:c0:ca:3a:6b:46:4c:8b:4e:b2:14:98:60:2a:77:7e:66:7e:
0e:90:6b:3d:44:2d:dc:cc:fb:ed:b2:34:52:3e:c5:28:72:62:
1b:e9:4b:bf:3f:23:f0:15:d9:71:40:60:7e:0e:1c:cd:45:83:
f6:87:6e:54:2f:85:3a:f1:c1:17:57:8b:ab:61:87:40:f8:16:
a9:d4:f2:16:c1:34:0c:a3:63:0a:e5:10:f0:d0:21:46:d7:53:
ee:1e:c1:5c:30:fe:dc:51:15:cf:86:b0:d5:01:18:91:39:4e:
83:68:4f:07:a6:53:e0:87:86:29:fb:4a:fa:03:6b:f7:6e:d1:
82:f7:2c:3d:1b:b9:f1:83:63:87:44:f5:eb:db:ce:73:8c:f9:
cf:d3:75:02:19:d9:bc:25:83:d9:a4:75:5c:1c:c3:04:49:94:
ab:3d:35:26:b9:19:79:ef:1e:6d:ae:30:5f:f8:a9:dc:b3:24:
ce:ab:5e:a2:25:8c:2f:63:c6:f7:fa:dd:a3:78:5b:9c:86:84:
52:81:92:38:79:d7:c8:2d:1d:2f:65:60:8e:68:1d:bb:dc:3e:
38:72:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:05:28 2025 by rpki-client