Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File: YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier: o6qEU0nS3VDC25WOLCeezwAsc2NchPsRYUhFlagolgM=
Subject key identifier: 96:23:8F:7F:D1:37:3F:37:29:96:03:BD:9B:D8:DE:28:55:4A:99:22
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 01968A6EEB3F0C30D771C0A5F1B4B21B692F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 06:00:46 +0000
Manifest this update: Thu 01 May 2025 06:00:46 +0000
Manifest next update: Fri 02 May 2025 06:00:46 +0000
Files and hashes: 1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: LCXEcrQvNsRWd9R/9+jbImWn2Jx6dM8DUtQelcIqYJ4=)
2: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (hash: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:eb:3f:0c:30:d7:71:c0:a5:f1:b4:b2:1b:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: May 1 06:00:46 2025 GMT
Not After : May 2 06:00:46 2025 GMT
Subject: CN=96238f7fd1373f37299603bd9bd8de28554a9922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8b:a8:0b:86:e5:00:32:f4:66:cf:7f:d9:6c:
df:66:8d:c1:b8:44:f8:9c:84:61:58:36:ea:04:2d:
9c:ef:21:45:6d:38:ad:fd:6a:d3:b9:93:80:8f:2e:
e9:c0:d3:b3:fc:35:17:ac:fc:bd:76:0e:13:df:4c:
d2:da:17:f6:25:5f:b4:c4:3e:e0:8e:32:50:5b:98:
f1:3f:de:9f:ca:80:6a:ca:b1:fa:09:3c:42:ca:02:
c6:ce:ae:66:76:fc:66:f1:6a:de:b0:8e:a1:12:d2:
ee:f7:ad:05:97:95:a0:ba:7a:f6:04:f0:29:88:6a:
7d:06:bb:64:eb:fd:23:f8:8a:b4:3c:83:84:93:f2:
9a:ef:b0:ad:1a:9c:3b:9f:e5:30:80:db:da:5a:54:
24:1c:6c:95:3c:fe:cc:50:d9:d6:7d:67:7f:29:8c:
84:a5:30:15:7a:52:34:c4:de:7c:5b:ac:3f:09:70:
1d:9c:dc:6e:f0:49:31:fa:74:74:55:ca:cc:8b:a8:
db:93:e1:62:66:91:e8:40:d3:1c:cb:d9:09:c7:dd:
89:05:8b:dc:f5:79:e8:0c:b7:78:fa:45:00:3e:ab:
eb:38:97:ad:6a:3a:2b:cb:b0:90:84:4f:3d:12:81:
8f:af:18:0f:99:a9:c2:ee:85:b1:f7:b1:67:ef:78:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:23:8F:7F:D1:37:3F:37:29:96:03:BD:9B:D8:DE:28:55:4A:99:22
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:aa:4f:2d:06:8c:53:3c:9d:c4:19:0f:5d:94:81:85:40:0d:
8a:d8:29:c4:db:7f:b4:01:9c:79:56:9f:f0:56:e2:ea:5d:2c:
55:81:33:12:3f:53:95:92:97:8a:35:5e:c1:5b:32:73:e4:4f:
14:65:82:df:de:5a:45:a3:c2:2d:e8:8a:86:0d:c6:ee:0a:b2:
cd:8f:7f:1d:c0:9c:b8:65:c9:e3:43:6b:2a:2a:ad:d1:9f:15:
f0:65:52:05:57:89:1d:63:c9:54:54:4d:d7:e7:bd:94:f4:75:
9c:2d:9f:7b:3e:68:96:1a:93:a8:dd:1d:b5:f5:27:69:e2:9a:
81:1c:8d:64:6f:55:46:18:db:f1:98:e5:ba:05:a3:18:3b:ac:
2a:b3:cf:28:f1:50:82:f1:50:39:e0:b8:46:60:18:72:66:db:
d2:8f:b4:97:e5:39:fa:60:5d:2d:e1:f3:be:d2:b5:7d:82:07:
1f:58:b8:7d:2c:46:2d:d7:53:03:77:06:9f:78:d7:d9:b5:30:
a4:4e:27:57:43:ee:eb:9a:e5:11:6f:45:16:78:cb:90:13:37:
04:8c:93:09:01:73:f4:84:6b:7f:7c:5c:06:8b:85:46:0d:4d:
c3:bc:51:67:0e:86:56:2b:6a:82:3a:0b:b5:4c:01:5d:f3:31:
63:f5:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:40:24 2025 by rpki-client