Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: da34hZOjfHjMTMFb/sLw3+UzN+NOAVI4BtLmDi7Pfdc=
Subject key identifier: B7:08:BF:40:B7:7B:8F:A7:0C:36:04:E1:DB:3B:F3:76:C8:31:25:04
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 0196CD986159C8B641F915F98AA921240499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 07:00:37 +0000
Manifest this update: Wed 14 May 2025 07:00:37 +0000
Manifest next update: Thu 15 May 2025 07:00:37 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 6DjTyJ0c08kxlDDZM3Zl2ZtTGJkrStP+IegY4KX0FpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:61:59:c8:b6:41:f9:15:f9:8a:a9:21:24:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: May 14 07:00:37 2025 GMT
Not After : May 15 07:00:37 2025 GMT
Subject: CN=b708bf40b77b8fa70c3604e1db3bf376c8312504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:c7:eb:3f:96:54:ff:5d:19:d7:cb:bc:af:
bb:54:92:c6:58:f1:02:95:ac:a7:59:05:d3:1d:46:
b8:1f:94:14:02:55:0e:e7:5a:07:54:f5:6c:e1:5e:
bd:6e:86:10:e5:6e:9b:39:79:75:2c:be:22:ce:a4:
5b:2a:2a:5f:5a:19:40:db:4f:23:8a:da:21:63:f7:
36:a3:b8:4b:79:58:d4:a0:59:c1:39:9d:7f:cc:d0:
28:b7:4d:53:2e:58:54:18:d7:07:62:f4:d4:60:94:
fa:f0:fc:38:04:54:17:45:b8:97:1d:26:3c:11:e4:
05:0c:49:b3:61:73:ee:6f:15:25:48:a8:66:21:33:
77:75:51:e5:7f:60:c9:48:fa:71:b5:5f:58:55:86:
f4:ca:fa:f3:2b:50:f8:68:92:c4:95:8d:0d:f2:25:
01:84:bc:a4:4a:e8:2d:00:db:9a:52:6e:5f:b8:32:
de:f6:3b:f8:21:f2:9d:93:4c:0a:0b:b0:a8:55:a5:
e8:a9:85:2c:83:ac:4a:6b:90:62:62:6e:7b:db:3a:
91:63:ba:41:f2:12:48:ea:27:4e:ec:24:29:a1:75:
95:36:b8:3b:5f:b1:fe:3f:0b:80:bb:32:9d:78:36:
58:96:56:d1:4b:36:27:93:0f:01:73:b0:5e:0a:08:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:BF:40:B7:7B:8F:A7:0C:36:04:E1:DB:3B:F3:76:C8:31:25:04
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:f0:b9:67:7d:34:ef:3e:37:6e:80:f7:29:78:46:df:c0:
96:e5:eb:c8:b5:7b:ae:c6:f2:2a:38:2a:5b:69:63:13:26:e7:
aa:c2:c4:35:e0:91:42:ad:5b:c1:e4:64:9f:b1:5a:6d:7a:bc:
60:5e:d2:46:95:5d:64:b0:5b:c2:54:47:82:45:7b:25:7d:06:
ba:35:21:95:a5:0a:bf:28:bb:05:91:71:d2:0d:ad:f5:b3:fe:
78:27:b2:1e:5f:67:5c:7a:92:51:97:65:5c:bc:e6:af:40:ce:
e3:82:93:b8:a3:b8:93:40:de:44:d1:22:11:8b:14:d2:27:8e:
8c:a1:25:82:d6:aa:a3:b8:24:32:2c:c4:a4:6d:44:d6:bc:9f:
06:68:c1:6b:bb:ec:5b:dc:5c:ed:8f:97:c6:32:4b:49:d7:2c:
56:f2:47:60:d7:a3:4e:c5:ff:df:30:69:9b:fc:68:55:f2:bc:
b7:33:fe:6e:13:0c:7e:a1:34:32:35:56:90:61:3f:2f:de:6b:
33:62:5b:69:06:42:8e:ce:a0:bf:00:16:51:a5:b5:5d:ed:61:
1c:73:4f:52:55:29:ec:f8:9f:d5:86:60:9c:fc:45:12:9e:11:
cc:bc:8f:5f:5b:ae:a9:e0:59:f6:e8:b3:0b:c5:1d:6a:fb:87:
7d:b1:59:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:37:19 2025 by rpki-client