Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: lAm6M6dTqOi6vBe1sQeilTc1NWD0QNjl6OJtNhzLF2Q=
Subject key identifier: 4F:B4:3A:3F:FF:AF:7A:ED:61:CB:DB:A7:AD:E6:6D:80:07:96:5C:92
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019677FAC93817908622BDC0AF9379D64373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 116E
Signing time: Sun 27 Apr 2025 16:00:46 +0000
Manifest this update: Sun 27 Apr 2025 16:00:46 +0000
Manifest next update: Mon 28 Apr 2025 16:00:46 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: cb0B5g4M2O8wWiEUJ5yYQqhjAGZ2zTqcVoH1TroBcjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:c9:38:17:90:86:22:bd:c0:af:93:79:d6:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Apr 27 16:00:46 2025 GMT
Not After : Apr 28 16:00:46 2025 GMT
Subject: CN=4fb43a3fffaf7aed61cbdba7ade66d8007965c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:3a:3c:e5:ea:4a:8a:fe:f8:89:32:e5:1f:
77:10:7b:a5:7a:bf:25:5b:88:ac:fc:36:7b:31:a5:
7d:71:b8:4a:1b:e3:0a:19:a3:6c:fe:8f:dc:99:23:
e4:72:29:c4:94:63:a0:c5:29:5e:78:21:67:33:ba:
69:3a:3d:ce:9b:62:11:a0:89:f4:d7:6f:f3:b0:8d:
45:a2:bc:fb:26:ef:d0:e4:a7:49:14:55:da:44:2b:
41:78:12:e5:bc:e0:ae:e4:36:8a:42:b6:c0:02:ad:
80:e6:a7:a1:e6:3d:c8:22:7a:93:3e:6d:e4:43:31:
71:4b:a6:0e:0e:6a:0a:69:0b:37:13:ed:1d:f8:ef:
51:c5:eb:7d:e1:e5:e5:47:f7:a1:43:08:f8:b3:0c:
7e:24:fa:26:07:81:26:1c:41:89:3b:86:56:56:68:
45:50:d0:86:c4:00:3d:1d:47:aa:43:60:43:17:cf:
12:b3:4b:a2:e0:35:73:9a:1f:55:07:63:cc:ed:b7:
4b:99:a7:7d:41:57:c1:40:2c:a8:6b:e9:93:fc:9b:
93:2e:70:17:98:ab:a3:6c:4e:7b:57:ae:70:00:35:
35:7c:77:7d:88:45:6b:38:85:61:91:06:e0:f7:00:
88:90:af:10:19:25:a5:65:61:e4:65:dd:ee:30:39:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:3A:3F:FF:AF:7A:ED:61:CB:DB:A7:AD:E6:6D:80:07:96:5C:92
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0b:07:42:bb:e4:e5:2d:72:f8:8f:98:25:3e:d6:fa:00:45:
80:fc:52:9b:ba:a6:16:88:24:29:f1:d3:bf:dd:04:03:f6:6a:
c3:31:da:b8:a4:bc:ad:6d:b3:1d:6b:e5:ef:b8:af:d5:52:6a:
50:47:2e:63:9a:d6:d2:05:94:a0:8f:ea:89:18:c4:fd:cf:90:
9b:a9:79:b7:19:31:10:4e:4b:bb:f4:11:94:2b:c0:80:cc:7b:
de:1e:20:9e:16:82:d4:63:bf:2b:64:83:37:20:99:0b:77:54:
ea:db:33:a6:50:bd:eb:bf:56:9f:a9:12:9b:9c:02:e7:48:98:
60:68:fe:eb:e7:dd:8f:cf:56:4b:30:0d:03:c3:8d:69:89:f8:
99:ca:30:1f:b3:93:b8:ca:22:3b:80:3b:76:09:88:dc:fa:a8:
c9:37:bd:84:44:b4:d5:46:dc:1a:b4:1a:bb:d7:09:4a:4c:5a:
47:d1:35:01:60:cb:a1:5f:64:f3:ef:79:be:31:ea:20:46:69:
25:9a:3b:ab:c5:2b:91:8e:f1:2c:b8:be:32:c7:34:8d:00:d7:
21:b1:3e:a4:a2:86:ff:e5:6a:c5:7d:01:90:39:7f:79:06:30:
4f:fd:22:49:f9:f3:36:f8:db:b9:b4:fb:99:96:03:5b:00:96:
0d:e3:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:09:35 2025 by rpki-client