Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: ODUWI0lNfBq7vJPP8C5gIrFEp89pY4PT0i5JvqrsZT8=
Subject key identifier: 97:BE:58:54:5C:4B:2D:35:3D:97:54:A4:E7:63:3A:96:90:14:3F:4F
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 0196BF00E8BA6C81D5586607BBDF36777E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 13E6
Signing time: Sun 11 May 2025 11:00:29 +0000
Manifest this update: Sun 11 May 2025 11:00:29 +0000
Manifest next update: Mon 12 May 2025 11:00:29 +0000
Files and hashes: 1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: 1TpX73ZwcNtrJyey8OfYW7jJETWnQsapIh3ZvwI1RZ8=)
4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e8:ba:6c:81:d5:58:66:07:bb:df:36:77:7e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: May 11 11:00:29 2025 GMT
Not After : May 12 11:00:29 2025 GMT
Subject: CN=97be58545c4b2d353d9754a4e7633a9690143f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:f2:0f:c1:ca:18:bc:fe:e5:f2:d0:5d:ec:
b9:fd:5a:c6:fe:bd:26:59:74:37:45:64:f6:f4:9b:
ee:77:db:d3:0b:80:0f:51:dd:cc:e2:93:ce:c8:af:
a6:ee:28:f9:ef:fd:a8:6f:be:a8:b7:23:1e:47:4a:
b4:39:b8:d6:ad:37:f2:92:51:85:0e:2f:2f:10:85:
71:57:51:00:f7:92:53:79:c2:83:1b:12:e3:6b:26:
32:db:5b:78:fe:c5:48:5a:eb:df:c0:5e:a0:a5:ed:
63:55:d1:d6:47:c3:74:36:10:b3:f5:c1:38:d4:b9:
bc:02:b8:d1:91:37:ca:33:5b:e2:a4:76:be:a9:25:
0b:d1:a5:41:81:af:d2:f3:92:9e:e6:bc:44:8d:ea:
cf:57:de:da:5c:d1:3d:85:66:82:83:9d:56:a6:70:
5e:4a:62:26:fa:cc:c7:65:7b:97:fb:a3:43:e3:77:
97:ef:1d:1c:18:bd:ca:09:31:75:f5:a5:88:13:ad:
33:a3:d9:e1:c1:28:98:da:ed:3a:e6:a6:d9:12:3c:
72:4c:82:0b:f4:13:2a:83:6c:6b:e2:d0:7b:1a:a3:
b2:fc:05:fd:29:cb:c3:bc:62:ac:14:47:ad:52:ab:
b7:28:fd:e2:10:20:b7:89:2f:ea:f1:0e:b5:48:22:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:58:54:5C:4B:2D:35:3D:97:54:A4:E7:63:3A:96:90:14:3F:4F
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:25:7f:bf:9e:57:67:db:f2:1d:f4:56:15:5a:33:63:0e:
86:71:b0:35:3a:66:7a:2b:23:72:9d:f7:ff:11:0c:a2:94:5e:
65:f8:eb:0d:4f:7a:cc:34:03:3b:86:30:9d:31:c2:36:72:84:
53:08:b4:06:6d:f0:a6:f2:3c:d8:f9:f2:0e:16:4a:95:5a:fb:
9f:b8:5e:35:22:c6:fe:95:8f:ab:ad:a3:85:15:bb:01:b4:f6:
e0:8f:07:22:22:29:62:60:b5:5c:a8:5f:f4:0b:4e:03:05:b9:
45:24:69:e2:2e:f7:a7:6b:1c:82:21:dd:42:ed:40:91:c7:da:
f7:5a:f4:1d:ac:09:35:2f:ac:bd:f3:67:49:8e:f9:e6:dd:0f:
53:7f:33:7f:29:49:d0:e2:c1:64:c9:a5:de:db:24:1f:f2:68:
cb:df:b2:04:7b:04:62:a1:11:4f:05:a6:8b:80:5b:1d:67:cc:
ef:09:e2:91:85:9f:1c:67:d0:25:f6:ae:19:72:c4:98:78:a4:
da:ea:c2:31:e9:6d:e7:3e:40:cc:84:06:cc:67:08:70:cf:86:
88:63:a6:da:b6:55:9c:34:ec:f8:7f:af:d0:35:7b:10:3a:ef:
d8:d1:78:53:55:80:cf:84:1d:11:40:d2:c9:f9:3b:9c:3d:2d:
dc:fa:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:46 2025 by rpki-client