Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier: QqVQ6q+Af5NLnbUUcVi69zNHAJSaX4EJOuFPpCGwmK4=
Subject key identifier: 62:7C:06:C2:D4:4D:72:63:1D:4F:B0:8C:BF:6A:95:2C:A8:CB:85:A7
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0196A6542C0F236C2A3FB67FF8DEF86E488E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number: 0CA8
Signing time: Tue 06 May 2025 16:00:56 +0000
Manifest this update: Tue 06 May 2025 16:00:56 +0000
Manifest next update: Wed 07 May 2025 16:00:56 +0000
Files and hashes: 1: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=)
2: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=)
3: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: K9q9lIdYNylZqwlPWHVH9c9ZrBBnW7duTjJ+zhIYCIg=)
4: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=)
5: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=)
6: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=)
7: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=)
8: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=)
9: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:2c:0f:23:6c:2a:3f:b6:7f:f8:de:f8:6e:48:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: May 6 16:00:56 2025 GMT
Not After : May 7 16:00:56 2025 GMT
Subject: CN=627c06c2d44d72631d4fb08cbf6a952ca8cb85a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:7f:28:ea:f1:4a:f1:e8:4f:88:4d:05:49:
5b:86:e1:1a:e1:32:66:14:c5:af:4d:cc:3f:a9:2e:
c1:c8:26:3d:60:30:50:b1:a1:2b:d0:d6:9c:70:d5:
ec:99:60:d8:9d:72:87:80:75:cc:83:c4:30:10:36:
0d:57:6c:2f:fd:1f:19:c7:6c:86:40:dc:27:9e:35:
e1:f4:d5:54:fb:58:f0:a5:a7:9a:24:13:2d:f8:f2:
93:bb:6c:7d:87:e6:a0:c6:94:49:a8:0a:37:6a:19:
84:fa:58:fc:cd:24:b8:05:82:c4:30:8a:49:e2:07:
4b:54:43:51:eb:e1:0e:39:ff:69:43:b7:d7:f7:b3:
44:e4:a3:56:e9:c0:8c:7d:e1:e5:84:e9:0f:49:67:
23:2f:57:16:56:0b:0e:42:d0:7f:55:89:3a:3f:d8:
a2:f6:82:cd:7a:25:fb:53:13:a8:f5:53:fb:fd:44:
5e:54:37:11:c7:5b:20:07:04:e2:e5:3c:a0:90:d4:
85:d5:ce:8c:e5:1f:5a:ac:46:ad:e6:9e:0b:ad:0d:
8f:89:5f:1c:da:f7:23:06:60:9c:67:23:28:41:f5:
72:2b:72:78:6a:ad:ca:8c:43:63:f8:15:38:ce:44:
49:fb:9b:d8:72:28:fc:99:86:ae:db:a4:41:f7:3c:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:06:C2:D4:4D:72:63:1D:4F:B0:8C:BF:6A:95:2C:A8:CB:85:A7
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:05:ba:e5:2f:2b:f0:ea:5b:4c:7f:ff:50:1d:a6:7e:10:
b8:7e:14:bc:da:ff:ae:e5:2b:52:b6:c6:89:eb:3b:87:a7:a4:
62:6e:c7:17:e0:25:b3:7d:fa:f8:bf:65:4a:ea:4d:f0:c2:0f:
a8:bf:e8:68:4e:0c:75:b3:22:62:08:f9:df:56:91:a0:6d:aa:
57:b6:5b:7a:d3:a4:88:f2:fd:8c:77:1c:19:be:61:d0:85:c9:
8f:f1:87:5a:4c:4c:32:5e:15:c1:48:e4:ae:46:9f:3a:c0:80:
69:d8:bd:d2:4c:25:4c:2f:43:24:49:56:6c:ab:37:b4:e9:c0:
ab:10:8d:ee:67:98:64:8a:c7:d6:a3:de:a2:8e:28:10:45:d2:
40:29:f2:4f:f1:05:f0:85:e2:e7:21:cb:04:95:49:e1:ab:d0:
44:c2:1b:3e:72:1b:12:85:2b:9b:66:5a:d0:33:13:d1:6b:89:
2a:81:28:46:8f:47:30:b7:57:c7:72:36:40:a1:6f:ed:58:08:
ae:bb:52:3e:89:a1:db:8d:88:06:ed:de:52:f0:6b:a4:0a:0d:
c0:d0:37:c5:b0:1f:8a:6e:22:91:f8:63:64:20:8c:3f:fb:f5:
f6:1b:22:cf:f6:2b:b5:0a:d5:ec:68:b0:f3:fa:4c:ee:4e:55:
9a:90:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:23:44 2025 by rpki-client