Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File: YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier: GVppS9tFH5EJy148q66EnLEgZB31QotUVzJx0TwgyUM=
Subject key identifier: E5:4A:27:31:15:CA:D1:D5:3E:95:FA:A6:96:41:8C:32:30:47:29:F5
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 01965537BAB5AEF4C46580BF1AA05583B936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 22:00:37 +0000
Manifest this update: Sun 20 Apr 2025 22:00:37 +0000
Manifest next update: Mon 21 Apr 2025 22:00:37 +0000
Files and hashes: 1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: PB3C1ZLjh+p4a6NlrJPvYBWV+e/BMuIFk1VBS5R7LkE=)
3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ba:b5:ae:f4:c4:65:80:bf:1a:a0:55:83:b9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Apr 20 22:00:37 2025 GMT
Not After : Apr 21 22:00:37 2025 GMT
Subject: CN=e54a273115cad1d53e95faa696418c32304729f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:b3:d2:36:79:6a:6e:ab:35:95:09:bb:75:
bc:d0:fd:4b:a7:48:5d:a2:2e:c1:15:1c:d0:6b:27:
55:de:b6:b4:b9:26:54:77:bf:47:86:24:45:66:73:
ae:51:c7:7f:99:95:da:89:af:9a:2f:fa:1e:ee:e5:
02:ed:aa:5e:da:4f:de:e6:df:ce:9a:34:36:58:03:
7c:74:00:b5:97:10:41:f9:9b:90:a7:e8:83:a5:39:
93:98:19:a0:ea:9e:b0:fe:10:ec:04:8d:5c:e0:f2:
a7:5e:91:61:69:07:75:4f:f1:da:fb:af:83:17:12:
1f:94:c3:f2:ad:f0:c2:df:3a:2f:90:e5:25:d2:6f:
77:7c:91:2a:14:b9:88:bf:7c:1f:11:bf:ce:1a:93:
20:78:4a:2c:52:e6:2d:03:68:76:23:a3:d2:ce:ca:
77:45:f3:33:5f:06:79:62:0e:c3:2b:2b:ec:31:1c:
d4:c0:8d:46:02:e3:0b:f2:be:5e:b7:fc:f4:ac:60:
63:63:db:5a:d5:84:63:5c:a1:26:8e:e5:ee:b9:8e:
fa:c0:46:78:eb:88:1d:9b:cc:51:e3:1e:9f:3e:2d:
17:6e:27:56:cc:fc:2b:51:6c:02:7f:c0:b1:08:ce:
51:4c:ee:22:40:f3:9b:ee:2f:25:84:20:c0:1d:be:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:27:31:15:CA:D1:D5:3E:95:FA:A6:96:41:8C:32:30:47:29:F5
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:8f:2a:4f:ab:88:02:cb:c4:cd:b4:c2:f7:1b:34:02:41:
1c:03:40:df:9f:56:0e:54:64:9e:a9:66:25:d5:5f:8f:e0:38:
a8:3b:aa:58:a6:ce:87:63:8c:75:f3:17:f6:74:ee:81:4d:93:
19:dc:a3:71:a4:37:a0:fb:66:65:78:8c:31:c8:a9:d1:7b:ba:
8a:e6:e2:a6:a6:38:37:26:1a:fc:53:25:b8:c5:fe:20:29:f6:
60:46:ac:83:50:d0:1e:fc:aa:3a:af:94:2b:10:44:be:c1:d3:
ec:e1:ae:0e:af:d2:ff:1f:53:bc:fb:79:0e:7b:fe:8f:20:d9:
5b:0c:66:8d:f1:a5:e3:68:7b:35:7c:32:b6:83:79:9b:af:f6:
74:e4:89:fc:b7:8c:9c:fe:ff:ef:b4:99:d6:19:fc:3b:bf:30:
13:f6:8a:e6:66:32:72:3c:07:69:4b:6c:27:7a:3a:0f:8e:0b:
e4:40:56:e8:33:b3:5d:cd:df:b8:95:ee:27:69:b2:79:f0:53:
8b:c1:df:06:8d:cd:fd:ef:70:27:d6:4e:92:73:99:fc:b7:a0:
9c:c2:1d:7a:55:2a:17:48:3a:4e:98:2b:1a:59:c9:d7:6b:31:
e8:fb:96:0c:5e:ba:6c:42:1b:55:41:57:da:01:74:e8:46:6e:
17:68:ec:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:28 2025 by rpki-client