Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: M6olG2+uCsc+nuoVT4IGKfSnvdEdmiLGKT0agf5aZ5k=
Subject key identifier: A5:6D:F8:13:A0:DA:2E:E7:49:BA:06:DB:0D:86:F1:2E:5B:B2:07:83
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 0196C126657C4DB0073F26C9C334405EC9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 21:00:40 +0000
Manifest this update: Sun 11 May 2025 21:00:40 +0000
Manifest next update: Mon 12 May 2025 21:00:40 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: 3ezdGZQSFQjHtEmYaWtPtO5ZPV2qKnOI8sAkikv35vY=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:65:7c:4d:b0:07:3f:26:c9:c3:34:40:5e:c9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: May 11 21:00:40 2025 GMT
Not After : May 12 21:00:40 2025 GMT
Subject: CN=a56df813a0da2ee749ba06db0d86f12e5bb20783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:ea:49:69:54:1c:5f:ff:32:e0:ad:ca:4e:
06:4b:0d:d4:34:b5:d7:2d:36:7f:ef:5e:c8:56:42:
a2:ff:ca:1e:60:42:ab:83:cf:e1:b9:1d:5c:20:c3:
f2:72:bb:8e:9e:98:c4:10:72:db:e6:9d:d9:d8:ca:
88:c2:bd:b3:cc:4e:e6:29:89:af:9f:cb:36:49:35:
f5:62:1b:60:61:2a:2e:8e:1a:d4:60:bf:ca:58:e8:
46:1d:d6:b5:6a:f2:59:bd:6d:0a:3e:65:ad:a4:89:
e9:cb:ab:af:af:07:00:b9:f1:e9:77:f2:ef:b1:19:
a7:09:17:cb:94:7f:7e:87:e9:f7:95:59:0f:24:d9:
05:ea:ad:0e:52:98:1e:4a:d8:38:ee:f0:18:42:36:
05:4f:b2:a3:cc:49:37:22:47:e8:2c:65:00:73:01:
32:67:c2:b2:b5:0b:4f:da:58:fb:a7:cd:d2:d0:53:
4c:f2:29:33:da:fc:fb:44:a1:f6:5a:5b:7f:03:9e:
f9:12:bc:54:61:e7:a6:dc:ba:09:09:f5:eb:9e:e1:
da:d8:4c:2e:88:de:9a:4f:40:d3:49:2c:17:b1:6b:
f4:93:2d:f9:b5:4a:8a:96:df:0a:a5:41:aa:65:fe:
74:72:0d:48:e6:ff:c2:d6:d5:24:f1:d9:19:02:07:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:F8:13:A0:DA:2E:E7:49:BA:06:DB:0D:86:F1:2E:5B:B2:07:83
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4d:fd:0f:9d:fd:8c:ed:1e:35:83:4d:08:2a:93:6f:54:95:
80:05:03:58:df:48:7d:e9:69:f9:b9:39:77:c8:7f:74:19:7a:
4d:ac:49:4a:5b:7b:51:13:c5:20:00:bf:dc:46:31:30:e9:f9:
40:3e:c3:f8:e0:34:b1:56:b6:df:ed:1c:4d:a4:bf:21:ba:59:
b4:01:af:80:ee:d8:76:17:f1:83:dc:9f:79:29:51:96:73:de:
4c:61:6f:42:0c:96:1c:0b:66:c2:80:8b:46:92:31:8a:4c:7d:
88:d4:cd:3a:8c:c6:94:16:de:67:30:9d:b6:62:6b:3a:55:a5:
bd:6d:41:3f:b1:26:a7:bd:aa:7f:13:98:8f:c1:00:86:48:4a:
b3:ef:7d:88:ea:92:46:9d:a2:a4:14:a5:02:fc:e4:72:ee:86:
16:0d:59:60:53:f8:c6:28:c4:d6:fe:3e:67:bc:50:32:06:e4:
eb:a4:87:cb:3c:cf:50:b5:ac:6b:6f:ef:13:6d:8b:da:b7:a7:
c6:2e:34:78:57:90:b8:4d:29:9b:1d:a7:b4:d9:7d:60:36:ba:
84:a6:28:49:1e:f6:b8:43:72:31:86:0f:57:50:d9:4f:ca:39:
e5:c3:77:f4:64:3c:62:81:40:69:a3:6c:14:b6:29:df:84:2d:
3c:e4:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:38:14 2025 by rpki-client