Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: znQbe+FoQCcJ0y6nMId8PaeV0avsTG05XsAT3GTN9No=
Subject key identifier: 03:41:78:EE:28:44:00:05:2C:CE:06:01:AC:7E:10:49:16:77:D7:F1
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 0196BD806373CA4019A5A2013AF6E1CDAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 14C4
Signing time: Sun 11 May 2025 04:00:29 +0000
Manifest this update: Sun 11 May 2025 04:00:29 +0000
Manifest next update: Mon 12 May 2025 04:00:29 +0000
Files and hashes: 1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=)
2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=)
3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: /vcdfGiQTIh/goGH30/D+AhhH4eTMGyKsT0+4XxubDI=)
5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:63:73:ca:40:19:a5:a2:01:3a:f6:e1:cd:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: May 11 04:00:29 2025 GMT
Not After : May 12 04:00:29 2025 GMT
Subject: CN=034178ee284400052cce0601ac7e10491677d7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:7a:62:74:8b:37:f0:34:af:c9:80:42:e0:
f7:52:79:e5:17:3e:e2:21:79:e0:e4:70:a7:91:5e:
11:85:80:6a:42:bc:0b:61:24:9f:c7:d8:8d:f5:ea:
8e:7f:4c:a7:09:72:a5:2a:7b:67:1a:98:97:bf:73:
a2:f5:7c:38:c5:47:69:32:b9:39:5c:f2:0d:2f:74:
b1:56:f5:2d:07:16:79:25:91:ff:8c:1f:56:6f:da:
32:30:37:cc:61:53:d1:ad:b0:32:08:a9:2e:2a:c7:
09:2e:62:d4:b1:05:05:78:0e:2b:6d:18:0a:eb:2e:
b0:8e:47:84:e2:ef:51:d4:cd:30:09:30:fe:5e:cb:
59:85:2b:6a:da:d7:95:8f:22:7a:cd:a8:a2:ca:52:
95:0d:89:9a:c9:45:9b:52:2a:93:9b:40:08:c2:c8:
a7:6d:a2:87:a6:67:e3:40:a7:11:79:31:57:c9:84:
0e:c2:9a:91:6d:21:92:9c:e4:f5:25:19:7e:52:29:
08:74:f9:0d:b0:b6:56:58:46:3e:0b:c2:b8:6c:4b:
65:6d:44:9e:9f:30:61:b7:30:b1:f8:e1:82:75:21:
ba:98:ab:8c:6d:f7:d7:6d:d2:f3:cd:06:84:8d:cf:
3a:95:84:61:15:f4:d8:91:c3:2a:eb:c8:da:da:7e:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:41:78:EE:28:44:00:05:2C:CE:06:01:AC:7E:10:49:16:77:D7:F1
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ea:da:6a:22:0c:b0:58:a4:92:2c:2b:28:43:55:6b:f8:5d:
2d:57:bd:52:ab:99:08:27:f0:da:79:37:4c:8c:92:db:b7:b1:
7f:c9:7c:b9:85:86:41:5b:eb:d9:dc:f3:b2:2f:e9:1a:02:d2:
03:f9:1f:31:ae:1e:f7:4f:7d:47:81:58:b0:dc:ba:4d:37:4a:
04:47:0a:77:a4:6a:36:9f:8e:9e:70:6e:9c:df:e0:0c:30:f2:
74:1f:65:ad:40:63:2b:39:c1:38:6e:86:0c:fd:b7:d4:5b:4e:
86:97:11:24:cd:93:de:a5:a3:4e:cf:37:49:18:c5:eb:a7:23:
8d:8a:a5:2c:af:35:52:92:d2:83:3f:da:c2:88:90:a2:56:3c:
c7:48:d4:89:53:23:d2:cc:f8:dc:20:6c:8d:3b:1e:73:33:a4:
26:78:da:81:1b:22:d4:a6:c1:e6:98:b8:a0:a7:97:c7:78:60:
a6:3d:4d:48:96:04:18:f1:30:a0:d7:86:0b:45:53:e2:29:b7:
ba:d7:bf:bc:f6:d8:ae:7a:ba:bf:4b:98:d4:7b:f0:9a:a6:82:
21:65:6f:ac:c9:6f:b3:ee:26:01:97:4e:74:cd:12:00:25:33:
f9:72:03:4f:05:81:66:10:74:e1:cf:13:d9:9e:bc:27:81:12:
8f:41:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:19:45 2025 by rpki-client