Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: h/U9YKwh3LHnBNed9vyHKd1D3jH0k9ttICG44zKiJY4=
Subject key identifier: 42:A8:02:61:BD:20:A1:DE:57:17:A2:D2:E3:C3:07:64:56:26:56:A1
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01967A56ECFD88DE17C72A0F8A017314F93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 10E4
Signing time: Mon 28 Apr 2025 03:00:39 +0000
Manifest this update: Mon 28 Apr 2025 03:00:39 +0000
Manifest next update: Tue 29 Apr 2025 03:00:39 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: iLUc0iN3UMrr292TB5f9FMpbB7JU00lMqkIhdO23oOg=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:ec:fd:88:de:17:c7:2a:0f:8a:01:73:14:f9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Apr 28 03:00:39 2025 GMT
Not After : Apr 29 03:00:39 2025 GMT
Subject: CN=42a80261bd20a1de5717a2d2e3c30764562656a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:28:b2:df:5d:9a:43:66:5a:e8:b3:a8:91:
87:05:bf:bd:21:f3:a1:ee:76:f7:86:72:97:70:36:
d6:bf:07:e0:19:95:39:77:44:7e:7a:3a:0b:d6:03:
7d:68:be:44:02:13:3c:c1:96:d6:5c:e4:49:21:ae:
70:92:35:77:1b:8a:f5:f4:61:ef:5e:44:18:27:cf:
32:2a:c1:a2:a9:b2:e7:be:c5:41:ca:a9:78:96:83:
90:48:cc:e8:27:3c:a3:30:5a:7f:1a:f0:aa:94:e1:
0f:ac:df:d1:96:bf:25:21:b2:9e:8d:46:63:0f:66:
fb:31:c6:82:68:c0:9d:44:5c:2c:42:97:85:86:ba:
1a:43:52:18:ee:b1:51:bd:45:cd:7b:56:71:93:d5:
40:51:5d:b6:7d:ee:44:0c:b9:fa:8b:bc:09:69:10:
5f:fa:af:e2:57:3b:a8:c0:e8:d9:1b:04:56:24:07:
51:f4:d2:d3:d1:38:04:50:7c:7c:22:bc:97:20:b3:
5a:3f:c8:d1:f3:41:5f:a4:06:7c:ed:11:5e:bb:9e:
c2:be:de:6a:b8:af:1e:c2:ba:ba:89:18:9d:d4:0b:
b7:0a:50:35:19:9b:87:0e:03:cb:ca:38:c3:b7:ac:
92:fd:f8:43:7d:a8:b0:9f:08:a1:f0:19:6e:a3:df:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:02:61:BD:20:A1:DE:57:17:A2:D2:E3:C3:07:64:56:26:56:A1
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:89:e5:e1:51:13:90:3b:44:af:0b:a1:99:59:5a:54:1d:0b:
c3:82:f9:60:40:f1:dc:0d:55:37:80:ca:db:22:8d:38:30:8d:
d6:c7:e2:0e:d0:70:ea:a9:59:34:ff:2d:e0:23:d3:e4:ad:0e:
69:b2:d3:82:06:82:fd:dd:15:6c:5d:3b:12:5b:d0:10:6e:cb:
6d:53:14:3d:00:9f:da:3e:15:92:1d:f5:d8:e5:ec:64:b5:b6:
66:36:28:e1:e1:a6:8b:19:46:69:e7:0d:98:d1:f7:cc:4c:6f:
57:0c:72:a7:76:bd:d2:71:e3:53:95:59:f2:e7:fb:1a:40:08:
d9:95:8e:cf:e1:c1:80:59:40:91:68:58:65:70:37:b9:e1:47:
7a:80:7d:7d:ee:78:87:c4:bc:11:ba:fd:12:1b:45:a9:df:db:
7a:e3:8d:49:2d:b8:4d:01:14:b9:12:ef:54:f7:88:c9:e6:4b:
9d:9d:5b:1c:12:35:4d:5d:80:f0:95:ba:45:e6:13:23:ab:4f:
3a:d8:11:9a:fb:54:f5:ef:d6:1a:98:dd:25:23:2b:4f:dd:67:
29:e4:d7:3d:54:58:5b:40:10:50:1d:90:ec:d5:b7:49:2b:3c:
a4:c4:8f:8e:da:89:eb:59:b4:72:ce:1a:9b:cc:1d:8d:e2:07:
49:8f:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:39 2025 by rpki-client