Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: R7lDwpxPLIlXz9/v+79nASepQxaD8vU22Q4t7iYpXxo=
Subject key identifier: EF:3A:2B:CB:F9:C3:F9:80:45:86:A7:6B:1E:04:A5:07:64:C6:2C:FC
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 0196B8FE95940657CECDF5D6F32AB9AED857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 126F
Signing time: Sat 10 May 2025 07:00:14 +0000
Manifest this update: Sat 10 May 2025 07:00:14 +0000
Manifest next update: Sun 11 May 2025 07:00:14 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: TJnT4wGIopOZoezyfP4+ard+m8JX7dHFwJClquDL9gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:95:94:06:57:ce:cd:f5:d6:f3:2a:b9:ae:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: May 10 07:00:14 2025 GMT
Not After : May 11 07:00:14 2025 GMT
Subject: CN=ef3a2bcbf9c3f9804586a76b1e04a50764c62cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:5f:aa:ca:39:a2:ae:17:7c:db:16:86:52:
a9:36:7d:66:dd:f8:6c:71:c4:46:1d:e2:2f:c9:94:
57:35:eb:36:f4:8d:b3:58:74:9e:d5:4b:1d:45:16:
2b:80:a1:d3:aa:7a:37:72:a6:14:c0:cd:be:94:6d:
04:5e:d7:9d:89:fe:49:85:06:6e:a0:70:f6:ff:59:
37:d3:cb:8f:ec:73:1d:29:df:7e:2e:eb:f5:96:ab:
cf:83:fd:29:80:b2:3f:99:42:dd:81:6c:30:c4:3b:
87:27:41:42:fe:e1:2c:01:88:6c:f6:06:1b:60:fe:
20:70:08:43:2c:8f:80:16:be:29:33:8c:ec:c0:00:
6c:3b:95:2e:5d:45:8d:73:c9:a4:46:80:54:a0:29:
74:4e:e1:b8:3f:84:a4:eb:49:f0:a0:a4:67:c5:f3:
ed:94:e5:e7:c5:6c:0a:03:56:dc:5a:dc:25:5d:3e:
2d:7c:6b:f0:45:8d:5c:14:30:13:93:ba:d2:01:73:
4d:a1:1f:89:e0:78:9b:92:c3:e7:f8:da:8c:4d:c2:
c6:fb:1c:64:31:e1:fc:f3:af:b9:7c:a3:30:74:da:
ac:60:03:38:78:25:05:c9:63:17:1c:a5:42:90:91:
9f:34:14:23:4b:e4:46:68:3d:e4:02:90:33:5e:1e:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:2B:CB:F9:C3:F9:80:45:86:A7:6B:1E:04:A5:07:64:C6:2C:FC
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0b:54:4f:03:8f:c5:c6:db:7d:f8:a7:4d:54:15:ff:7a:b1:
ac:fa:1d:55:8d:fe:49:4d:e3:2a:00:67:7b:ff:38:8b:4b:da:
aa:bd:04:24:ac:84:42:30:4b:08:ba:c6:3e:b2:8a:a3:5a:21:
ad:c3:b6:a5:12:9d:ef:34:7e:d2:74:02:3d:e6:c5:62:3a:57:
02:65:24:89:fc:02:c2:00:4c:fc:d3:b8:6c:6e:97:d9:b7:bc:
a6:74:b8:d6:bb:22:ae:1d:bd:8b:f7:31:e7:58:90:c5:a8:ff:
f7:a8:0c:67:f5:ae:2e:14:09:70:48:74:f9:c7:8a:12:e6:e6:
1d:bc:96:8a:c5:0c:d5:36:49:01:91:7a:85:5e:e7:2e:44:8a:
74:07:7b:00:78:89:05:38:e5:dd:c4:38:c5:81:85:f4:5b:0a:
e0:68:68:44:35:38:8b:e0:16:31:2b:fd:1f:4b:a1:ed:68:9c:
61:8f:0c:3c:c8:23:ab:0c:cc:47:f5:0a:25:09:bf:d0:21:32:
4b:21:b8:aa:ca:52:b6:9b:cc:c2:f9:00:e6:5b:50:3c:46:e8:
7d:a9:94:e9:7c:f6:38:39:a6:6a:92:a3:a7:7e:b0:e6:79:20:
58:c1:28:cf:7e:a7:9d:34:f4:48:07:8b:2c:58:b0:5d:ad:b0:
51:fa:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:44 2025 by rpki-client