Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: 2Hc6aoTzAp4Ze5329HOFQVz5OdZPvyAiOHXFc/s3UgY=
Subject key identifier: DD:36:1C:B5:7E:94:F8:16:F6:AD:19:90:52:93:C8:67:3B:96:14:61
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019655A5AB638A97E4779214A28626C8880C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 0F8E
Signing time: Mon 21 Apr 2025 00:00:42 +0000
Manifest this update: Mon 21 Apr 2025 00:00:42 +0000
Manifest next update: Tue 22 Apr 2025 00:00:42 +0000
Files and hashes: 1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: AAuEow276M7+PXmYE9q2l54TJT9XWy1ONVmWh7un+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:ab:63:8a:97:e4:77:92:14:a2:86:26:c8:88:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Apr 21 00:00:42 2025 GMT
Not After : Apr 22 00:00:42 2025 GMT
Subject: CN=dd361cb57e94f816f6ad19905293c8673b961461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:54:04:a8:88:f7:a2:05:ec:02:e2:dc:36:
ae:71:56:9d:c4:c5:fa:a5:05:25:6f:94:22:84:57:
b5:f0:70:ee:cd:81:cf:ea:55:a9:62:bc:c6:1c:ea:
5c:2f:41:9b:a2:d0:ea:03:5b:0f:3a:9a:be:8a:12:
f1:50:36:3d:50:b2:a5:b4:e3:1a:43:df:db:5d:46:
1e:e6:ef:e6:4a:8a:36:92:48:82:39:ec:04:94:46:
6d:8a:98:dc:9b:99:c7:71:70:b8:2e:62:eb:57:b8:
c0:d6:22:6f:11:12:92:f8:55:3e:eb:cd:dc:12:d9:
09:22:56:ff:9e:7f:1d:9e:df:a6:1e:b3:15:52:a3:
34:31:93:57:d4:73:ea:3d:ac:33:32:fc:f3:b0:2c:
7a:4c:31:d9:de:32:21:f2:7a:eb:cb:91:e4:7e:4d:
12:f5:63:cf:97:ea:20:2a:98:51:08:15:99:1a:8a:
66:35:8e:d9:f5:b5:f4:da:13:b8:ec:cb:27:c3:12:
2e:26:88:34:69:7a:6e:99:84:93:62:56:fb:3b:e9:
c5:eb:65:b8:78:8c:ab:d9:23:cd:1d:af:9e:25:b3:
02:6a:c6:90:c8:22:73:42:d2:9c:5c:88:75:1c:1b:
c7:e1:ad:8f:5a:0b:47:8e:62:d1:79:91:46:6c:70:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:1C:B5:7E:94:F8:16:F6:AD:19:90:52:93:C8:67:3B:96:14:61
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0d:1a:2f:91:4c:52:66:5e:bc:74:50:40:29:7d:6f:95:96:
4c:df:f7:0f:22:9d:21:2b:81:4a:1f:20:49:af:ed:82:bf:d4:
6a:f7:dd:8a:1a:75:ae:fe:a7:d8:6b:de:e9:67:1a:be:9d:2e:
53:b9:a4:fd:30:47:a6:27:19:92:84:15:a7:83:b7:58:47:52:
ca:1b:c7:38:cb:45:0a:83:54:d9:93:88:e1:45:bd:28:2b:90:
59:8a:36:b7:47:32:7b:05:08:6c:45:7f:de:d0:ff:26:0a:53:
06:3b:c6:f9:43:a8:7d:4a:44:87:27:de:d7:a7:03:7b:dd:9e:
e6:11:77:54:50:ee:98:22:b5:53:3f:c6:19:0a:5f:5c:f9:11:
c9:04:5e:67:36:c7:1c:91:6c:9e:b0:f7:6e:ef:0d:18:28:21:
26:e2:49:b2:69:2a:ba:4f:44:d7:aa:a9:ee:f3:8c:59:7b:02:
71:95:ae:5a:b6:71:f2:a9:ba:f5:2e:d8:8f:83:aa:20:b7:8c:
66:72:bc:b8:cc:71:b8:8e:40:4d:a4:a8:0a:03:66:d3:a8:19:
7b:7f:bf:fd:86:b6:39:bb:f9:54:db:73:af:9d:21:b0:7c:01:
11:65:bc:51:a2:b4:ca:69:04:03:84:c4:00:5d:5d:ed:5f:b9:
d1:67:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:57:14 2025 by rpki-client