Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: 1AhkSxj//zANJCytpOZxq9UB8E2rPQysUFQvXDyf2e4=
Subject key identifier: 76:3A:5B:22:46:87:4D:E3:3F:D7:06:68:F1:5D:43:C7:09:4E:7E:CC
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 0196C1CAED35D85168AC0D5BF6792D68D394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 00:00:23 +0000
Manifest this update: Mon 12 May 2025 00:00:23 +0000
Manifest next update: Tue 13 May 2025 00:00:23 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: 9hdDdtpZZq8ludEhCopR/u0zU5nGK6CExLw35T1xN10=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:ed:35:d8:51:68:ac:0d:5b:f6:79:2d:68:d3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: May 12 00:00:23 2025 GMT
Not After : May 13 00:00:23 2025 GMT
Subject: CN=763a5b2246874de33fd70668f15d43c7094e7ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:93:44:c5:3f:c9:a0:ec:89:c0:47:5d:1d:
87:72:c7:a8:25:88:92:62:21:fe:21:e0:64:85:6c:
2b:cd:9f:10:af:14:1e:2d:06:82:cd:dc:d1:da:1e:
8d:7c:64:e1:d0:18:41:c5:05:25:fb:e4:a6:7c:60:
b9:83:57:1f:be:e8:2e:09:82:4a:e5:77:8d:f3:ee:
4b:28:31:87:cc:28:a7:a0:56:09:12:09:9a:b4:7f:
c1:bf:af:90:43:51:90:ad:72:e7:cc:06:d1:fb:5b:
03:b2:3a:6d:17:68:64:79:43:79:60:51:2f:f8:f2:
38:3a:f4:aa:8c:76:a0:8b:30:c3:54:b3:2b:be:2c:
72:7c:4a:33:a5:33:69:39:78:56:ae:9c:e0:2d:d6:
9d:de:7f:22:4c:22:e6:45:ea:60:3a:70:bf:7c:8f:
cd:61:ea:ef:aa:cf:4c:03:cb:93:a6:25:9a:49:7c:
4b:9d:c5:d5:c6:57:24:55:1c:a9:76:57:62:da:0f:
9f:eb:93:16:86:9a:2e:50:c6:90:8c:b5:56:4a:f0:
5a:2a:be:69:e3:3b:25:60:36:e8:2f:24:16:6d:ef:
82:f0:0c:23:8a:e1:20:d4:03:56:69:28:98:2c:9f:
9c:92:37:c2:60:77:34:e6:cd:2f:30:3e:f2:f7:07:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3A:5B:22:46:87:4D:E3:3F:D7:06:68:F1:5D:43:C7:09:4E:7E:CC
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dc:5f:20:91:fd:e2:79:00:d4:86:47:2d:95:33:40:e7:5c:
76:bc:ad:51:42:ca:e6:52:2a:2e:d7:fd:d4:62:18:f2:14:82:
c2:80:e4:aa:f7:27:6d:6e:b3:6a:57:e1:e4:67:ba:3b:7b:41:
75:bf:e1:22:6d:f5:38:ca:3d:b7:5e:70:4d:75:8e:fc:81:a0:
f4:db:23:bb:52:e5:fa:32:43:8c:30:f4:1a:62:f4:df:0b:96:
e7:cb:07:d8:10:37:1f:22:5f:f1:ef:4a:a3:99:61:2f:04:01:
37:3b:56:ee:ed:b7:b6:ca:a5:d0:b7:2e:2d:22:3f:ed:c6:bd:
c6:d9:c5:a6:3b:61:3e:e1:d8:0b:ff:ab:6f:7a:af:00:42:07:
49:ce:ae:45:96:13:72:f0:b4:be:2e:7c:91:02:07:39:eb:5f:
14:81:48:b8:cb:0a:50:80:bc:b2:64:2d:84:89:05:3f:7f:c2:
f4:43:1b:6a:65:c4:05:5f:fb:75:f7:05:0a:a9:6e:bc:bb:51:
3e:f1:7d:69:25:ca:51:dd:a2:d9:9e:ae:c0:75:58:d5:77:5e:
5e:2b:87:f1:64:0e:5b:e4:34:d0:de:64:0d:41:ca:67:17:d6:
bc:7d:6d:8c:91:37:c3:da:b5:81:78:76:ad:a3:0c:69:c3:e3:
e5:38:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:53:23 2025 by rpki-client