Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: diiiVRYrWb9b/QQbOpfckUvh/ze20NwunJ+IhBm1iaU=
Subject key identifier: FF:37:08:A3:27:62:E5:C0:88:DE:60:4B:CE:E8:B1:1D:39:E8:64:0C
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 01967E33B5B25391F11E995FF7817E5A46C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 21:00:40 +0000
Manifest this update: Mon 28 Apr 2025 21:00:40 +0000
Manifest next update: Tue 29 Apr 2025 21:00:40 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: RCRr/WLdV3UgZKZRlCKcpXzfm5LUTypM3xHqq3q8tAc=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:b5:b2:53:91:f1:1e:99:5f:f7:81:7e:5a:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Apr 28 21:00:40 2025 GMT
Not After : Apr 29 21:00:40 2025 GMT
Subject: CN=ff3708a32762e5c088de604bcee8b11d39e8640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:9e:71:32:c8:78:59:89:97:f3:3b:8a:27:
ad:f5:fb:85:56:1f:ee:e3:16:67:0f:89:48:93:60:
52:5d:3b:91:1d:53:b7:ce:29:0c:49:92:82:8c:1a:
c7:84:0c:c9:b4:36:49:cb:7d:08:a7:eb:85:a9:eb:
a0:4a:41:d7:95:bd:53:c5:5a:d6:fb:ef:04:7a:1a:
c4:14:f4:54:27:f0:f9:10:ce:69:4a:7f:65:52:09:
e2:57:85:55:41:4a:d3:9d:77:a6:3d:ed:b8:3a:30:
6d:c1:34:39:58:e5:c4:64:9d:cc:42:27:02:77:3d:
af:5d:6d:6d:a5:d6:9b:df:64:60:cf:f5:a3:1b:b6:
3f:bc:a9:63:e2:e7:9c:a7:56:83:d5:f0:64:23:f7:
72:3e:d4:0c:7d:1d:d3:ed:f7:25:2a:fc:4e:83:07:
14:85:52:1b:44:76:df:65:86:a0:fe:ba:b4:a9:f9:
7b:d1:9f:b2:92:af:b6:96:f4:32:e6:45:07:c6:a0:
ff:59:e2:66:b0:06:dd:bb:44:b2:23:92:9d:cc:b8:
9b:57:f0:78:a1:07:7d:e2:ae:ae:91:5c:33:0f:dd:
3b:a7:b3:f4:21:e7:9d:91:d7:24:fb:96:73:8c:d4:
33:bd:2f:df:11:7a:76:f2:17:52:c2:c0:59:63:b7:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:37:08:A3:27:62:E5:C0:88:DE:60:4B:CE:E8:B1:1D:39:E8:64:0C
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:16:1f:80:9f:19:30:08:15:2d:75:e9:89:af:3a:e9:b0:27:
54:79:e4:48:2f:2e:43:0d:45:0b:aa:56:b5:91:7a:00:47:62:
70:21:65:f0:1f:44:a6:f0:27:a1:58:6f:fe:18:4a:8b:18:92:
95:f2:a8:bd:b5:02:15:7b:be:53:46:44:b2:93:f2:c3:f2:e5:
0f:66:a0:82:96:0b:90:76:b4:28:1e:03:2d:da:44:70:9e:22:
ca:fc:f5:e6:07:09:b7:db:52:9b:ec:10:aa:24:49:a3:27:a7:
91:04:2c:a5:ce:65:18:95:85:f4:aa:e4:f5:ef:9e:d8:37:f6:
74:1c:bf:ec:86:d4:cf:cc:50:3e:02:6a:ac:01:a1:22:f3:c1:
7d:4b:cd:a4:5b:15:39:33:50:90:02:07:78:f5:d2:22:4a:33:
13:90:bb:74:ea:36:63:b2:2e:09:3a:90:69:d8:e2:1c:1c:e4:
bd:b0:fa:cf:34:59:0c:f7:ec:11:c3:08:5f:61:4b:c5:35:92:
41:15:57:62:3f:af:91:a4:ca:09:d2:25:c1:77:b2:81:94:1c:
9f:31:e7:c9:e3:85:57:c2:bf:f4:76:08:d1:f1:ac:9b:bb:e1:
14:0d:88:3c:68:0b:fa:64:f2:d0:61:89:28:b4:d9:56:93:87:
7f:8d:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:56:31 2025 by rpki-client