Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: IY5CoGi/3aT7EeKBBcNBcf0uNgdgZ4QNkpLFxe9lGis=
Subject key identifier: 06:0A:C0:2F:92:A1:FB:9A:5F:FA:99:7F:D8:A5:73:E5:3D:1E:8E:56
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019684A359290E2826F838A17071179C7085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 03:00:19 +0000
Manifest this update: Wed 30 Apr 2025 03:00:19 +0000
Manifest next update: Thu 01 May 2025 03:00:19 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: +L3L/cV/9ck1i4XVnaOmX7/MrCOyqgWGKzSSTHzTn5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:59:29:0e:28:26:f8:38:a1:70:71:17:9c:70:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Apr 30 03:00:19 2025 GMT
Not After : May 1 03:00:19 2025 GMT
Subject: CN=060ac02f92a1fb9a5ffa997fd8a573e53d1e8e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:f4:03:db:a5:0c:21:a1:41:ad:c4:b6:f0:
db:05:d0:07:30:13:fb:60:11:43:05:32:8d:f0:d8:
2c:3a:44:11:11:2d:0d:91:4f:6f:dd:ad:6e:92:ca:
cc:51:22:76:a8:5f:cd:44:c9:72:a1:28:d5:f8:f6:
8d:13:bd:9a:04:82:0e:f7:49:a5:21:5b:8a:f4:a8:
62:ca:d2:76:eb:3d:27:ae:3a:a7:32:93:63:f2:35:
d7:ec:f0:cd:dd:88:5d:f6:ab:aa:26:a1:6c:f4:af:
e5:f5:6e:04:0d:a2:0b:87:11:56:70:3a:ae:ed:88:
50:44:12:ff:32:dd:99:ce:64:f0:70:20:56:39:53:
58:62:97:1f:86:21:f2:61:68:f5:02:be:c7:2a:4d:
72:c1:70:e6:e5:fd:8c:cf:da:6b:43:e7:9b:86:93:
9b:74:6e:59:f8:c3:87:ea:1f:a7:d2:b4:4e:f3:a8:
74:c2:47:8f:9f:b4:e1:dd:4c:a2:d3:05:50:47:8c:
a8:c0:2d:50:ce:40:c1:ce:be:2d:7b:2d:ee:1a:64:
cb:d7:b6:2f:f5:60:78:e1:16:51:74:be:f6:a0:9a:
46:f5:e4:c7:9c:63:b0:f2:09:d4:89:09:9a:f2:e4:
3e:85:78:34:6f:90:d9:46:a1:ed:10:0c:49:eb:6a:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:C0:2F:92:A1:FB:9A:5F:FA:99:7F:D8:A5:73:E5:3D:1E:8E:56
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:43:c6:7a:f2:c5:f3:45:d7:6a:77:c6:cd:62:9e:ed:71:9f:
f9:b4:96:98:5d:5f:49:7a:a3:7c:51:01:06:6e:93:36:2f:f1:
18:1e:32:fd:2b:b6:be:ed:ea:2b:76:99:64:8b:d9:78:1b:5c:
1c:41:d4:31:5d:a5:95:34:2c:4d:44:93:db:82:18:cb:03:c0:
81:c9:99:8f:72:bc:7e:3f:2e:77:9d:78:10:17:62:cb:3a:45:
3d:22:14:a8:fd:3f:fa:cf:21:66:27:30:13:d5:38:4e:44:ff:
a1:52:1b:ed:c4:12:5b:10:a2:ce:47:45:ef:ce:68:13:a6:c6:
30:51:7c:88:1c:99:9a:b6:e6:40:8f:36:5f:24:73:33:8a:5d:
5e:8f:f2:d3:88:c3:8a:29:c4:e3:d7:fa:eb:34:5c:07:9e:72:
e7:b9:75:10:8a:87:ae:56:77:b2:ba:59:9e:c2:da:3d:ab:98:
ef:b6:76:6c:99:90:96:6d:d7:62:94:2d:65:f0:6a:95:3b:e4:
b8:87:71:07:46:c5:ea:fe:fa:30:a5:7c:46:aa:4e:15:85:3d:
e3:26:20:57:35:74:c5:d7:79:65:7e:08:19:bc:b3:d7:d9:fd:
7a:8d:99:f6:81:15:c1:b2:9d:d1:90:f7:e7:04:8a:c6:ba:eb:
7d:55:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:33:41 2025 by rpki-client