Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: 2KahSBpf0wR8DwQeOMAyHNWNMvK9yrbPWfjp9Zx1dTE=
Subject key identifier: B4:10:6C:07:C8:20:DC:EB:C2:68:98:85:55:A4:A0:FE:90:BF:62:4E
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 01967FB3F69F9198EAF13A08225D499A6105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: E6
Signing time: Tue 29 Apr 2025 04:00:22 +0000
Manifest this update: Tue 29 Apr 2025 04:00:22 +0000
Manifest next update: Wed 30 Apr 2025 04:00:22 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: PYJtnmxh9kANRAtAHumcXgY2hRxrRYXSqHhhcaY4uak=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:f6:9f:91:98:ea:f1:3a:08:22:5d:49:9a:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Apr 29 04:00:22 2025 GMT
Not After : Apr 30 04:00:22 2025 GMT
Subject: CN=b4106c07c820dcebc268988555a4a0fe90bf624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:70:62:f8:72:e6:08:95:af:84:10:ed:45:
ab:26:56:f8:18:84:47:a7:c2:53:14:3c:0f:8c:6c:
51:b2:45:40:90:4b:0c:d1:1e:c2:93:25:2a:c5:8b:
e5:05:aa:b0:f5:40:aa:ca:e7:fb:56:16:df:fb:07:
72:de:84:7f:6c:5f:fa:32:6b:9f:2d:d0:01:35:1b:
6b:67:ad:f1:52:83:39:f3:38:4d:70:0b:3f:3c:38:
e1:be:8e:f9:9c:4d:e3:a6:e9:f3:12:5e:00:86:3c:
94:ba:6a:e4:13:55:05:03:1c:e5:23:84:65:60:cd:
df:98:58:1c:2c:b0:f8:45:e7:a3:36:0a:93:63:59:
99:f5:45:6b:49:68:c7:d1:3a:ba:fb:1c:66:c3:2e:
36:c7:dd:06:d2:64:fe:24:58:9f:41:8d:b4:ce:0a:
60:ad:bc:ec:1b:95:35:42:5c:3d:86:ba:c8:de:ea:
77:33:bc:02:a8:c6:47:a5:82:54:17:a7:b9:4c:38:
0d:bc:3c:90:6c:26:b4:1c:ef:57:c3:5d:77:2b:20:
8a:be:83:60:cb:4e:03:6f:91:46:3d:21:cc:f1:c1:
07:32:2e:d3:83:5c:64:ce:99:9f:4e:4a:9c:0c:15:
06:77:74:04:b4:8a:01:8f:71:55:96:10:66:94:f1:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:6C:07:C8:20:DC:EB:C2:68:98:85:55:A4:A0:FE:90:BF:62:4E
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8e:bc:86:f9:57:c1:81:14:83:0f:cb:d4:79:87:63:c9:cc:
93:d3:5e:d8:e2:1c:94:99:2b:f6:fa:7b:75:5c:28:0f:d3:e3:
77:2d:47:04:19:0d:23:43:23:40:dc:ba:d3:09:4f:ab:77:60:
e7:ba:0c:ee:a7:85:15:2a:0d:87:e5:2f:26:17:46:85:b4:41:
0a:55:0f:f2:fd:b4:63:e5:0e:7c:da:6e:f6:d9:d0:d9:05:41:
25:c3:d8:55:aa:e9:1c:ef:72:24:13:cf:48:3b:2f:c5:f4:14:
f4:ff:5e:9d:02:5c:ae:03:11:2e:81:e0:53:c1:c1:7c:3b:1f:
3e:8a:a7:54:5c:f0:48:09:45:c6:7c:85:b1:ee:8a:32:5f:12:
cb:a0:be:26:79:69:d6:19:97:7d:90:0b:bf:19:bf:f6:94:25:
eb:8a:9a:c8:6d:3a:0b:10:f7:02:00:a5:75:65:bd:9a:86:ad:
9a:dc:31:9d:c5:f9:33:5d:3a:a4:d4:83:5d:c3:e1:cd:b1:47:
cc:be:10:1f:59:b4:a2:1e:ba:04:5a:3a:6f:f0:f4:1d:fb:59:
a7:3b:aa:24:4d:54:d5:e2:58:38:17:ac:d4:c7:a0:24:bd:a4:
4d:07:9f:c3:f0:11:0a:65:9a:be:2f:88:60:62:bb:32:41:bf:
71:e3:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:37 2025 by rpki-client