Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: n5UeOLbFzh+31CDtAv2tt2JHPAQvxeVrxeVOJsVyThI=
Subject key identifier: 8B:60:45:9D:1C:1E:36:5C:4E:8B:EB:09:DF:12:F1:FD:5F:FA:52:A7
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 01967C7C724A48AB96481D90D9111C009082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0BE8
Signing time: Mon 28 Apr 2025 13:00:52 +0000
Manifest this update: Mon 28 Apr 2025 13:00:52 +0000
Manifest next update: Tue 29 Apr 2025 13:00:52 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: y8yhgdKrKR63Dyd6s4GubIGPu5ED43IFdslMKA/H7KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:72:4a:48:ab:96:48:1d:90:d9:11:1c:00:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Apr 28 13:00:52 2025 GMT
Not After : Apr 29 13:00:52 2025 GMT
Subject: CN=8b60459d1c1e365c4e8beb09df12f1fd5ffa52a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:60:20:7d:78:38:d1:06:40:14:bf:4e:dc:
87:17:17:cc:3f:54:e4:9a:41:5b:ec:28:23:e1:00:
d5:f3:c5:4d:66:64:f6:10:ba:2d:56:d0:04:d9:8a:
63:fe:6e:ce:90:94:19:ae:3f:39:7a:4a:e4:35:ed:
0f:a9:4c:9f:18:9a:ee:fb:56:9d:ef:eb:f1:93:bb:
19:e0:d6:98:20:12:93:e4:0d:d1:2a:82:83:5e:68:
15:1e:36:88:ab:1d:e3:e1:af:7f:ab:eb:c5:dd:1f:
10:d1:6a:78:18:d1:57:1a:0b:d1:42:d1:ad:f2:c0:
5d:7a:93:c7:64:25:b3:61:02:01:29:db:67:d3:72:
dd:28:4b:4f:bb:6a:13:40:07:d5:fc:72:0e:0c:31:
5c:1f:3a:b8:b9:1c:f1:f7:81:a8:fd:35:1f:85:0e:
0f:da:c0:5d:aa:1e:31:ca:a3:fa:2b:ca:f7:3a:ae:
1c:d8:47:94:6c:c3:a5:f7:54:df:d3:8c:9b:0a:29:
08:ae:88:b4:f2:d0:49:b4:62:98:01:7b:55:3a:06:
e7:0f:07:c0:c8:96:3d:78:1d:78:fe:f6:ea:77:aa:
86:c3:a6:58:39:46:87:e9:9d:9b:27:e5:41:6e:05:
42:b8:21:7a:85:eb:5e:d0:8e:0c:17:69:a4:e1:29:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:45:9D:1C:1E:36:5C:4E:8B:EB:09:DF:12:F1:FD:5F:FA:52:A7
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:44:5e:86:bf:24:f4:26:23:3a:29:5e:a1:eb:cf:09:93:e6:
49:fc:58:7a:29:2e:aa:91:0f:cc:4d:4a:95:4e:50:e1:f5:a8:
e9:49:8d:45:ec:a9:80:85:41:15:79:ce:0c:ab:3b:c9:ae:5d:
08:13:df:de:87:a1:45:94:43:e2:7a:ef:fc:67:ab:5a:97:f4:
61:d6:a2:38:57:cb:e9:81:a2:05:09:6d:12:69:14:23:52:dc:
42:bf:b6:eb:3c:7a:dd:12:32:f7:43:2a:d5:4d:fb:e3:7b:e0:
5b:62:0a:e4:91:1b:f5:ab:70:db:c9:8c:b6:8d:5c:0c:f9:98:
d4:f2:cf:8a:7b:b4:8d:9c:06:8a:ec:9e:ef:a8:16:fe:c7:20:
e5:5f:ca:3c:28:50:a8:c4:7f:96:fe:fe:6e:2a:cd:4d:55:eb:
4d:76:91:4c:b5:25:63:47:e4:a3:a8:10:49:d3:60:32:8b:46:
08:0d:ee:48:30:1d:4b:10:30:cc:13:59:b3:ab:da:5f:11:f2:
cd:ab:23:43:55:9c:4f:75:9d:11:2f:93:79:6f:8b:60:95:07:
76:62:2a:75:ce:7d:eb:03:4c:50:df:57:7d:1a:98:56:a1:2b:
fb:1a:1b:44:60:89:c1:4c:a2:a5:24:80:15:8a:ae:82:b8:95:
6e:c5:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:46 2025 by rpki-client