Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: VlQajNOeX/Cyo+HadRcFOUcf6ndJo4H9x6VrbqHlKyU=
Subject key identifier: BA:E9:F1:01:52:B2:FA:5A:B6:D2:CD:C9:25:6B:3A:9B:45:39:BC:A1
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019748FA862056043CE531DD69A081C0946C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1445
Signing time: Sat 07 Jun 2025 06:01:07 +0000
Manifest this update: Sat 07 Jun 2025 06:01:07 +0000
Manifest next update: Sun 08 Jun 2025 06:01:07 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: GUmgsFhzuQGL80CXH4ZMvO39ET2Tkja/V4nCCnqbJAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:86:20:56:04:3c:e5:31:dd:69:a0:81:c0:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jun 7 06:01:07 2025 GMT
Not After : Jun 8 06:01:07 2025 GMT
Subject: CN=bae9f10152b2fa5ab6d2cdc9256b3a9b4539bca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:37:6b:b0:1b:33:38:ea:6e:2f:b9:d7:74:
84:45:df:05:8d:98:f4:9d:91:a9:d7:94:f4:16:4f:
68:0b:d7:3a:59:53:5b:96:2c:d1:62:d2:49:e2:da:
a5:8f:0e:97:0f:b4:82:bb:70:14:75:62:2f:d4:00:
5c:4a:eb:5b:ef:e7:b1:6e:c7:e6:ed:74:8d:83:9a:
ab:6c:fc:bf:53:50:67:11:92:b7:dc:d9:18:d4:8b:
e9:a4:5d:5c:6b:7c:5e:36:9a:48:4a:72:c8:60:82:
c5:4c:4f:76:73:2f:20:76:25:48:00:79:5c:cc:d1:
81:be:45:36:81:08:7b:bb:7b:62:23:fa:f5:78:03:
dd:4c:b7:ba:a7:5f:8c:f9:57:3a:21:02:6d:3a:29:
83:55:ff:34:22:a9:e3:c5:67:bf:76:62:9a:dc:05:
b7:1d:ae:67:12:56:5f:ae:bd:a6:79:c2:cd:a4:8e:
33:df:53:94:01:d3:b2:59:e4:f9:f9:9f:2a:e7:b4:
9b:c0:f6:82:26:91:ec:4b:fa:09:4b:a8:1b:0b:fc:
b7:6c:ea:9d:1d:7d:27:c7:df:80:c4:ca:15:ac:f1:
0c:7b:cf:1a:45:db:87:63:62:ce:68:a8:a8:e9:a1:
4d:11:df:d6:7e:aa:7f:7e:15:77:ee:dc:f1:32:aa:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:F1:01:52:B2:FA:5A:B6:D2:CD:C9:25:6B:3A:9B:45:39:BC:A1
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:b5:fe:64:b9:52:7d:4a:a4:62:86:a1:06:2f:37:a2:0d:
a6:9c:da:54:5a:c7:76:15:f4:22:e1:56:49:e4:40:33:3b:4d:
4f:29:12:8d:3c:df:b5:ac:31:e5:d9:83:3f:95:ca:50:0f:79:
52:2b:39:d9:6a:1b:c1:8b:1b:07:7d:39:63:c8:c8:43:15:07:
4c:44:48:9b:89:e5:4d:d9:fe:50:87:fa:b1:75:24:e9:08:fb:
6c:3f:79:79:d3:cf:ef:07:2a:f4:e7:53:a1:4c:45:64:b7:89:
a9:eb:bc:e3:27:4e:ab:31:01:29:32:71:aa:52:60:af:2f:16:
bb:7f:33:18:0f:b7:14:96:c8:9a:19:66:ca:2b:5f:5d:79:7e:
23:dc:94:e8:ff:16:0a:68:f8:de:e3:55:6a:5e:a1:b3:47:f1:
21:fe:46:82:5b:0b:fd:a3:64:ef:f5:21:6c:cd:bc:e2:e5:5d:
db:ca:d8:9c:fb:4e:89:76:1f:d4:5f:c3:ba:f8:1a:6b:1b:3b:
14:51:74:9c:60:d4:c4:c1:2b:d2:59:24:20:71:bb:b0:b5:2a:
fb:65:49:56:57:06:33:7c:27:92:8d:a2:60:4b:2e:5b:cc:0b:
f9:fd:ec:9d:e4:34:c3:eb:e4:1f:1a:20:67:2a:19:79:e5:39:
a9:45:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:07 2025 by rpki-client