Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: 4hhuEOqIgcc4I0POeRZoMdhAmcU+LCyizfVjxArwXqU=
Subject key identifier: 16:83:49:A4:8B:59:AA:15:81:34:C5:46:71:99:C1:D5:49:FD:29:DA
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 0196876DE8A275E5554B61F59A6F79D9F379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 0200
Signing time: Wed 30 Apr 2025 16:00:49 +0000
Manifest this update: Wed 30 Apr 2025 16:00:49 +0000
Manifest next update: Thu 01 May 2025 16:00:49 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: RSoGmtn3H+H5lETjs+4W2Cv1zVKz6BKCMjfjx2GINTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:e8:a2:75:e5:55:4b:61:f5:9a:6f:79:d9:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Apr 30 16:00:49 2025 GMT
Not After : May 1 16:00:49 2025 GMT
Subject: CN=168349a48b59aa158134c5467199c1d549fd29da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:eb:b8:bc:e3:d2:a0:36:53:93:04:13:0a:
68:97:98:65:47:5d:aa:59:20:97:07:50:69:9e:a8:
3f:61:dc:b1:02:6e:3c:6e:be:ee:87:cc:91:63:66:
54:9b:b5:02:d2:62:67:28:04:9d:b1:f1:e4:69:7f:
c9:36:bf:63:d6:25:b6:a7:22:af:c6:b2:89:89:05:
70:07:8a:22:6c:89:0e:c7:fd:d7:67:3d:29:fc:be:
94:ce:e1:b4:dd:bb:24:a5:86:41:ed:68:e2:84:2d:
14:02:2a:c6:63:66:17:56:8a:0c:71:98:83:8c:f3:
e1:52:af:18:4b:2b:c2:a2:23:bd:ab:7a:03:dc:e9:
ce:d4:56:bf:7f:86:ef:ae:5a:b5:16:85:d8:45:54:
e5:45:01:81:96:d8:d9:68:ba:93:ea:37:39:e5:fe:
ea:4c:df:61:d2:30:a6:10:e3:fd:32:cb:7f:05:e2:
20:24:4a:c3:3c:08:f0:35:0f:ab:bb:a2:1d:ad:0c:
dd:8b:4e:41:4f:9a:a3:22:5c:bd:95:fa:8b:ef:c6:
6e:3c:fd:55:16:ab:2b:d7:f7:08:d6:54:db:5e:85:
39:0d:87:ed:61:1e:be:e1:be:83:d7:cd:d0:69:8e:
6d:c7:4b:28:d5:27:63:b5:d5:be:f4:92:2f:7e:36:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:49:A4:8B:59:AA:15:81:34:C5:46:71:99:C1:D5:49:FD:29:DA
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:f2:e7:d9:e3:72:8d:29:e5:0a:db:ad:14:8e:c5:00:35:
41:d0:d1:37:30:ed:e8:b2:20:1c:48:43:e1:9a:52:2a:64:05:
1f:a8:d2:4b:95:d5:da:e4:ed:2e:21:0e:3b:37:77:2c:d3:87:
d6:a5:44:3e:d1:a5:a4:22:ae:cb:43:56:c2:59:28:2d:20:29:
60:59:68:4a:29:ce:0e:3b:63:a7:68:a7:de:11:b5:46:61:cf:
20:8f:3f:2e:33:32:fe:c1:09:db:3b:31:74:b4:c2:6a:93:97:
3c:a8:f6:65:b9:a4:12:46:28:b3:f1:ca:88:c7:65:25:9f:14:
24:45:70:58:65:96:4f:06:e1:fb:58:6d:e1:21:e1:de:a4:f0:
7c:06:72:54:c2:65:50:c8:b4:52:08:d9:c4:8a:32:b7:09:f5:
6c:f7:21:d3:d1:fa:c5:0a:14:ac:ef:e0:14:91:a9:5b:f0:64:
f6:2b:ae:18:87:9c:3a:07:44:13:42:8a:04:cd:4b:26:54:36:
da:be:b2:01:78:67:bf:44:17:f5:bd:ea:2b:50:8f:cf:82:6b:
d4:b8:25:98:64:53:14:6c:25:93:84:7d:0c:05:e8:ff:2a:ad:
9a:fc:08:3e:95:f4:66:02:1d:e3:03:9d:4e:69:9d:e1:3f:b8:
21:06:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:08 2025 by rpki-client