Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: Sd0gxAxesNanvWtNXXR1g1iF+PQcf2mV3qCZLyuAjl8=
Subject key identifier: 61:B1:42:2B:29:6F:9D:FB:13:54:0D:CF:02:F4:82:27:76:83:72:73
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 0196789F3B7DE54E08BB19254B7BCF96CAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0BE6
Signing time: Sun 27 Apr 2025 19:00:23 +0000
Manifest this update: Sun 27 Apr 2025 19:00:23 +0000
Manifest next update: Mon 28 Apr 2025 19:00:23 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: p+L5y/dXx5fY2Te/nn66nM5m4v9s3Bs0C00+nHFyrdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:3b:7d:e5:4e:08:bb:19:25:4b:7b:cf:96:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Apr 27 19:00:23 2025 GMT
Not After : Apr 28 19:00:23 2025 GMT
Subject: CN=61b1422b296f9dfb13540dcf02f4822776837273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:3f:12:ef:46:bc:f1:2b:26:8a:e9:e4:a2:
22:8c:99:37:95:e3:7e:36:b8:4e:fd:05:3a:ae:b0:
fb:54:11:e1:01:66:14:87:62:96:7d:58:3e:a0:36:
71:ac:8f:f5:0b:fb:86:7c:26:10:07:6e:ce:38:af:
06:c0:69:27:ac:ab:66:ff:4d:ee:fb:86:ce:b7:1e:
d8:06:b5:67:fc:47:ab:e3:24:b8:8e:81:7d:f2:58:
9e:fb:ad:e5:f7:8b:42:28:f2:57:e4:c0:2f:50:71:
83:43:0f:60:3d:ef:f5:9c:0c:33:ad:88:4a:3e:4f:
c3:24:d9:ed:75:ef:ff:de:a1:40:ac:a1:d2:36:cf:
2d:ae:ff:10:33:d3:bf:ae:70:b4:cb:0e:36:f8:a2:
f3:2b:4b:7e:5f:36:55:48:f0:0b:95:10:91:5f:b0:
b6:ff:73:6d:3d:63:31:ed:cd:47:47:b5:00:e7:5c:
97:cf:7a:e0:6d:fb:6c:f4:e1:80:b3:6e:b4:4b:17:
3a:ec:bc:90:81:dd:6c:51:03:6f:ee:a5:4e:ec:6f:
49:bb:cf:f5:4e:8a:92:7e:eb:a9:e6:88:83:f1:00:
88:85:0d:39:88:ec:76:a6:f0:c9:e8:3c:ce:9b:df:
69:96:b9:7b:2a:4c:81:07:67:aa:5d:9b:fe:12:02:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:42:2B:29:6F:9D:FB:13:54:0D:CF:02:F4:82:27:76:83:72:73
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:02:49:6b:41:b7:b3:ee:67:b6:5c:58:cf:2f:01:6a:e6:
31:53:27:1f:5d:c5:2f:de:9d:a8:b6:e6:72:b0:d5:60:27:76:
b1:f7:9e:5e:e7:e5:ca:96:ae:42:56:79:18:4b:6b:56:fb:05:
3a:ae:a3:a0:2f:35:7b:9d:3f:30:44:81:4b:96:3f:52:e6:19:
a3:1e:2d:8f:74:d3:f1:8f:db:09:71:af:c9:23:35:8d:7c:72:
68:40:c9:fb:f7:3a:4f:c4:2f:16:0e:27:8d:30:f9:b7:e8:eb:
f0:e1:bb:4e:c2:16:eb:55:19:51:c0:81:f9:6f:a4:7d:c8:3f:
48:20:8a:95:27:9d:50:e7:7a:ef:b7:04:36:d8:f6:e6:4c:b3:
19:2b:83:5d:56:5d:1b:32:2a:d8:2d:25:1d:1b:56:4e:23:7e:
a0:58:51:4c:64:41:f4:fa:ca:1f:d4:75:33:cd:19:5c:34:ca:
27:99:ef:78:6d:1d:42:fb:3d:a1:d6:d2:bc:4c:72:31:f3:98:
86:2f:91:0e:8b:3b:50:df:f0:e3:9b:51:28:0d:e3:31:52:e8:
2b:f1:a6:e5:cc:ef:4e:97:e5:70:ec:d1:ad:e7:4f:11:91:6e:
68:81:1a:b5:4e:62:57:6a:04:b7:4f:cf:ee:ac:17:14:5c:77:
93:b0:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:58 2025 by rpki-client