Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: aAZn60sTZJ0mu0In9/76wJiDK9ZNtsN/Ob5dI4rsxVM=
Subject key identifier: F6:80:E0:42:85:A2:5C:77:9D:FD:33:C2:7E:CE:0C:CB:8E:6A:6F:EB
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 0196A1647CA3CE8102357332E574F9263430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0D21
Signing time: Mon 05 May 2025 17:00:39 +0000
Manifest this update: Mon 05 May 2025 17:00:39 +0000
Manifest next update: Tue 06 May 2025 17:00:39 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: MsF/hJRMBFgpa/ASpxvFXwFLXM0dnpZ4OHEgLeocREY=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:7c:a3:ce:81:02:35:73:32:e5:74:f9:26:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: May 5 17:00:39 2025 GMT
Not After : May 6 17:00:39 2025 GMT
Subject: CN=f680e04285a25c779dfd33c27ece0ccb8e6a6feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:ee:fe:54:2c:8f:78:0e:5b:13:d7:58:bf:
62:c6:c2:a5:2c:de:7a:4d:40:84:31:7d:8f:83:ff:
02:d7:cf:7b:8c:69:d9:ee:de:b2:93:5e:6e:8c:93:
ce:e6:fb:ca:2f:24:a2:06:e6:1a:6b:d7:26:6e:71:
01:04:1c:ef:96:45:97:32:ff:60:d1:55:8a:03:e8:
fc:4b:60:f2:fb:3a:d2:33:15:b2:ce:88:99:e0:9a:
2e:01:01:a4:4c:0b:df:c0:c7:a1:42:7f:8b:54:b1:
11:75:05:75:79:77:c3:4c:48:5e:1c:35:4c:e0:18:
c9:03:a1:22:1e:5f:5c:e6:28:bf:22:77:f9:34:be:
30:61:9a:f3:94:a4:23:25:b9:b7:bd:ee:8c:5b:4d:
b9:b9:14:b4:a4:a8:9b:38:29:7f:d0:c2:51:26:f5:
09:7b:d7:fe:80:6f:37:f6:0e:ba:2d:01:f8:5b:2b:
f2:a9:f1:f4:d5:81:ab:7c:f6:57:70:b5:25:69:1b:
3b:41:5a:a9:9c:bf:c1:e9:ae:bb:c2:1e:a3:86:5c:
a4:09:f8:ed:55:e3:6a:55:f3:29:40:e7:c9:31:60:
7f:f9:d7:43:97:e1:6d:12:7c:cf:06:7b:c4:cc:18:
7f:54:ac:17:a7:d3:89:46:8c:61:51:94:7e:a5:c9:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:E0:42:85:A2:5C:77:9D:FD:33:C2:7E:CE:0C:CB:8E:6A:6F:EB
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:38:66:5f:77:e0:6b:13:4f:d8:47:62:53:38:6d:da:a5:
51:e3:a0:c1:70:b7:12:0f:ff:89:b9:36:88:dc:9e:d2:c0:76:
55:ad:95:ce:32:27:9f:d4:e3:cc:19:a7:64:f7:16:df:de:87:
52:fb:3d:2a:58:93:e6:38:b6:8a:f1:f4:87:f8:fa:1c:d8:95:
db:6f:e9:7d:27:f5:e3:cd:72:9a:ac:eb:f7:4c:37:27:aa:37:
36:c8:af:bc:2d:16:24:e1:0c:26:63:c6:84:a6:49:49:7a:b7:
98:a9:32:94:c6:8a:e5:a0:b0:bc:76:fc:e6:ba:2c:31:d8:d7:
86:10:b1:63:ce:e5:e6:c0:81:55:f4:54:16:9e:5b:08:49:95:
63:69:64:37:f1:f5:3c:a8:d9:ff:56:fb:70:cf:0a:72:00:3d:
17:7a:f4:59:c4:70:f1:21:ad:04:39:80:1d:10:e6:85:13:9c:
41:5b:38:62:10:8e:23:fc:9c:94:c3:6d:4f:0f:67:ab:f1:0a:
63:d6:56:c6:ee:62:a9:5d:44:40:37:cb:cb:5b:9f:0e:de:1d:
c7:79:55:01:2d:cd:ca:ed:1e:8d:28:10:ec:f2:02:ae:02:a8:
72:d0:f2:49:a9:57:f7:57:28:1f:e1:9d:e1:d3:30:58:52:a2:
93:ec:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:52:00 2025 by rpki-client