Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: 6OP2H77aOOGrOSAZYzsIDuj4cl3i6dshPo6SC1dKp9U=
Subject key identifier: A1:AA:E6:17:70:FE:26:C8:11:AF:EB:3E:6F:CC:B1:A4:99:94:77:53
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 01958EBD2DCFE19FF5F8A34DB6978FFD97B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 0F27
Signing time: Thu 13 Mar 2025 09:01:57 +0000
Manifest this update: Thu 13 Mar 2025 09:01:57 +0000
Manifest next update: Fri 14 Mar 2025 09:01:57 +0000
Files and hashes: 1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: fFSTblZpZfyTjCcWC0MsceSR1BLFqNnEUVDUXbyqfkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:2d:cf:e1:9f:f5:f8:a3:4d:b6:97:8f:fd:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Mar 13 09:01:57 2025 GMT
Not After : Mar 14 09:01:57 2025 GMT
Subject: CN=a1aae61770fe26c811afeb3e6fccb1a499947753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:4a:fb:8b:a9:dd:ab:0a:5a:db:5a:97:84:
c8:78:f1:8b:67:3a:44:3b:1e:00:5b:0e:09:3a:cf:
24:a5:b5:2c:30:25:a3:57:60:ab:6b:ae:a6:46:aa:
a4:98:b9:fd:07:88:ea:7e:0e:37:b6:77:2d:0b:59:
a6:07:2f:80:f1:c6:d3:6a:d5:bd:38:57:ac:c1:27:
c4:42:eb:f9:31:8c:38:d9:b3:4d:1e:06:62:4f:c1:
99:34:c8:43:c9:a2:c9:d4:62:d6:3f:63:a6:30:9f:
d5:41:26:32:fa:ca:7f:fa:80:1f:77:bd:0a:e1:35:
e6:4d:ee:a4:76:0d:03:bb:b8:bc:d1:46:65:c4:28:
10:d7:21:5c:40:81:81:b4:ed:de:6a:51:7c:13:c1:
cb:4f:15:17:f8:7a:68:62:73:fa:0d:89:fe:92:53:
f0:9d:f7:45:02:94:12:6b:d2:b2:43:2c:f0:b5:43:
2a:f8:9f:86:9e:d6:bc:62:5e:16:19:22:b4:29:4c:
3a:b3:a2:e3:1b:89:dc:c0:6b:e6:c9:3f:31:5d:49:
0d:be:0b:bc:4a:db:46:b3:d8:2c:08:80:d6:e3:ad:
30:b5:08:5b:ae:6c:b6:d1:5f:13:7a:04:66:d8:05:
a0:9b:64:53:95:1f:7e:72:8e:93:13:86:a0:69:f2:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:E6:17:70:FE:26:C8:11:AF:EB:3E:6F:CC:B1:A4:99:94:77:53
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:70:b2:ab:ad:13:85:a8:77:06:e0:72:f8:34:81:6a:b1:
ca:3a:d5:e0:8e:1b:36:e6:e5:55:43:a4:90:29:20:90:ba:70:
c3:bc:99:68:74:89:ca:90:ce:75:44:3b:7f:6b:4e:ce:eb:3a:
5c:ea:a7:9f:b2:cb:9f:c3:93:d0:aa:09:30:64:69:fb:08:f8:
61:4f:c8:ea:e2:f2:c2:ad:d8:b7:f5:b2:ad:4a:91:1a:71:d5:
b2:e8:2f:11:15:59:23:85:b3:ee:e3:34:d9:54:61:70:72:f0:
6f:44:0b:f3:ca:ff:e0:c9:45:c2:d4:ef:23:2d:00:8c:99:9b:
37:b0:4b:68:4f:f2:71:ca:41:1c:46:2c:3b:ea:d1:05:2b:61:
f9:5b:d4:c2:8f:b2:90:e9:5f:c0:c7:f3:a0:51:c6:5f:dc:b4:
f7:b0:7a:a0:b9:1e:2a:48:d4:26:3d:7b:79:cc:26:67:be:f6:
b3:90:6b:98:0f:c4:11:ef:14:2b:bb:9b:0a:51:fa:ec:f3:cc:
68:43:d7:8c:8d:33:8b:45:23:81:16:92:e7:e4:34:e7:99:f7:
8a:91:9b:9d:86:c2:f7:74:79:d6:8d:ce:19:5f:a1:d5:5f:b3:
9a:39:9d:6c:4b:bd:a8:c4:ac:7a:0b:48:b0:c9:f6:6a:5f:ff:
39:31:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:32 2025 by rpki-client