Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: d6haemtqeH2XNfx/bScA1yRhAaARdEKzmzFF4OhiFKw=
Subject key identifier: 60:5E:74:BF:E1:17:F5:0D:5B:E7:7B:B4:FD:31:42:42:66:13:4D:18
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 0196B1E9DF305E9BE5F955A962D7CA0955F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 22:00:16 +0000
Manifest this update: Thu 08 May 2025 22:00:16 +0000
Manifest next update: Fri 09 May 2025 22:00:16 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: WYYD9mhN+iu4Ndup0G+fuJnR8RebR7wY+HbxUsPiYvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:e9:df:30:5e:9b:e5:f9:55:a9:62:d7:ca:09:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: May 8 22:00:16 2025 GMT
Not After : May 9 22:00:16 2025 GMT
Subject: CN=605e74bfe117f50d5be77bb4fd31424266134d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:26:0a:56:a2:f6:4d:5f:07:58:7f:6d:1c:
51:05:16:b8:fb:0a:15:83:8c:85:0b:26:76:29:c3:
ab:a9:9a:9b:07:91:1c:9a:05:5c:3a:3b:03:e0:c3:
f1:dc:a5:a9:f3:f1:87:81:56:a3:67:65:db:ba:2a:
4d:b3:6d:98:5c:c1:29:fc:25:af:2e:d9:bb:db:73:
03:46:1d:56:f1:f0:df:c4:c7:e2:32:0f:ef:29:98:
43:b8:72:dc:fe:4e:70:88:3d:e0:33:b9:7f:ce:20:
63:3f:c7:a4:81:01:7d:58:05:92:0a:e9:42:cb:b8:
3f:17:e3:7e:15:c8:e7:e6:e3:f6:6f:86:11:48:10:
67:c9:91:79:0f:a3:64:56:b1:06:8f:5e:70:08:87:
5d:d9:9e:b4:dd:b4:04:1c:86:22:38:51:40:aa:01:
58:c4:ae:6b:77:e1:11:77:b3:6c:24:38:92:6b:29:
9b:d8:5e:84:3f:24:18:20:81:d4:a4:08:49:7e:01:
72:3a:68:f7:3b:1f:11:f3:63:40:b0:73:ff:10:ac:
92:ea:8a:0c:97:2b:15:3f:81:7b:22:13:6b:42:6c:
bd:07:05:56:20:e3:07:2b:a5:7b:a1:38:7d:e7:d0:
81:c2:4f:57:87:bc:19:6b:62:af:b0:d4:ba:a7:a8:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:74:BF:E1:17:F5:0D:5B:E7:7B:B4:FD:31:42:42:66:13:4D:18
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:48:11:9b:42:59:0a:86:3b:c9:39:38:ea:d2:f0:f5:b3:6a:
84:a3:a8:c2:eb:84:37:1d:ae:59:4d:94:ef:a2:5b:8d:71:a0:
ba:61:49:7a:0b:83:ee:a3:9c:fc:64:24:4a:dc:7d:92:84:0c:
18:37:59:1c:53:7e:04:d5:13:f4:5f:cf:0d:f2:ef:f2:84:29:
4f:a7:b3:a1:97:43:b3:c6:8a:8c:a0:eb:7b:56:6f:ce:29:43:
14:e8:8f:7a:0a:9b:c0:da:6b:5a:55:13:a6:05:eb:ab:7c:ac:
39:9b:54:f3:e1:c6:8a:87:a1:cb:0c:ee:f7:b9:c0:12:ff:19:
4e:cc:91:57:b5:97:53:1e:a4:dc:9a:54:36:17:23:45:53:ff:
9a:75:bc:a6:39:04:59:d6:a6:ef:2b:16:09:cf:97:a5:b6:c3:
6b:f9:48:0f:46:b3:f4:a8:d3:da:c9:34:79:ad:b8:25:a9:4d:
f6:f2:a4:35:e1:30:ae:6e:7f:28:c0:2e:b7:cc:80:1b:71:46:
2c:c8:2c:4b:cc:e9:e9:9b:a6:df:4a:da:21:74:6b:de:c3:b8:
b7:cc:60:8e:db:c9:1e:47:d3:bf:54:87:82:fb:2b:25:d2:79:
bc:4e:ea:d6:94:95:f3:f7:dc:f6:73:db:e1:a7:a7:44:f4:f9:
09:eb:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:08:43 2025 by rpki-client