Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: piqCjePtvfnyKGrPAB3p/3RgXXeEmpoKd2mo1SvpqpU=
Subject key identifier: DE:E9:65:13:8E:92:F8:5A:30:6F:D4:0F:0C:3E:CB:85:B0:64:B3:ED
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0196A089560B6DCE4756490EC2A3B0D994B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 13:01:16 +0000
Manifest this update: Mon 05 May 2025 13:01:16 +0000
Manifest next update: Tue 06 May 2025 13:01:16 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: F01EG1wvE6MSE/xQM8Y1lJDZ1mxwC7P+dIbN3QdI4dg=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:56:0b:6d:ce:47:56:49:0e:c2:a3:b0:d9:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: May 5 13:01:16 2025 GMT
Not After : May 6 13:01:16 2025 GMT
Subject: CN=dee965138e92f85a306fd40f0c3ecb85b064b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:6d:3b:33:9d:0b:0a:d7:6d:46:ab:2e:90:
ef:80:e6:66:e2:f6:a2:6f:47:9e:f0:c8:a3:d9:c5:
a3:4d:69:9f:12:5c:73:04:01:ec:3b:2f:17:b2:b6:
3c:0f:f5:28:ba:35:29:8b:b7:19:94:41:14:cc:b0:
1a:b5:6d:7b:40:a6:9f:3e:1e:2d:a8:30:58:bb:56:
15:96:b4:d9:1f:97:bc:fa:85:d7:89:90:c1:fe:a8:
8b:8e:30:4d:ce:f0:a0:c2:04:82:2f:45:28:9a:dd:
45:c2:c6:da:6a:a7:91:60:19:3c:12:aa:e9:d9:fc:
dd:7e:5a:e1:c8:c7:1f:41:82:38:61:64:ca:32:0a:
ea:a7:2a:82:38:c2:9f:53:8b:9f:4d:63:f4:dd:8f:
dc:a2:84:e9:aa:b5:98:f8:99:22:9a:a2:16:a0:56:
b4:3b:05:9a:cc:46:42:31:33:b3:93:52:78:1b:ec:
27:6c:0f:9d:29:63:3b:89:10:cb:33:03:a3:33:ad:
de:6a:75:5b:d7:5b:f3:0d:8c:95:79:b7:ae:cd:d8:
60:0f:05:80:7f:7c:f0:65:a2:b0:14:c4:b4:95:73:
47:a9:d5:05:71:f6:c1:0d:08:3f:af:78:b6:53:fe:
52:1e:7e:40:3f:ca:24:ab:86:6d:97:92:f0:d2:1a:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:65:13:8E:92:F8:5A:30:6F:D4:0F:0C:3E:CB:85:B0:64:B3:ED
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d8:d1:19:0b:a9:64:1f:db:47:b6:65:63:b6:bd:31:b2:fc:
57:9a:2f:25:28:55:68:61:90:d9:c5:5f:41:68:ea:12:42:4f:
ac:70:38:a3:ad:1a:c9:a0:d8:31:91:35:66:b4:05:29:b3:f1:
be:06:85:1e:fc:ab:c2:6d:4f:35:93:65:34:b6:f5:13:1e:74:
9b:36:b8:d2:2b:8b:37:48:4b:ad:6f:4a:e3:c4:67:c3:c5:73:
57:01:82:e7:b9:b1:a6:17:74:aa:36:52:6b:fb:f7:c7:b7:ce:
07:95:ac:94:36:fa:e6:6e:70:06:ad:b6:80:ff:49:bf:8a:19:
11:e5:de:cc:a4:52:b7:c0:4a:c3:a9:85:2a:bf:63:11:ac:8d:
94:5c:e8:6e:46:8a:30:a7:31:7d:72:f4:bd:73:2b:c9:24:ff:
06:ac:c6:93:23:1e:53:f5:93:c2:eb:7a:7e:64:f7:2d:ef:3c:
a5:fe:53:22:95:fe:65:56:a4:bf:0b:aa:f5:ca:d4:06:bf:f5:
0c:83:e4:de:21:bc:f8:78:08:b1:51:04:74:c5:8e:61:1c:cb:
85:f7:bb:55:26:a9:a2:e6:dc:f6:16:92:75:a1:2d:1e:62:d1:
dd:a1:39:74:63:47:23:0d:53:80:22:88:ff:6b:28:e0:23:fd:
46:ea:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:48 2025 by rpki-client