Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: v2Eo6Z1Opve7eUIGlm9bAGzwZzS1jSg9RNlm17TR65s=
Subject key identifier: 71:31:0F:8B:96:2F:C2:75:1C:D6:ED:26:4F:50:2C:A2:31:36:60:97
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 0196A2AE0DE512C2223930A10D7A5FDC28AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 14B9
Signing time: Mon 05 May 2025 23:00:37 +0000
Manifest this update: Mon 05 May 2025 23:00:37 +0000
Manifest next update: Tue 06 May 2025 23:00:37 +0000
Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: GGQxEnFkCGvbc6kAAJaBXlzbuIWK+dz4+rH0zJ71KRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:0d:e5:12:c2:22:39:30:a1:0d:7a:5f:dc:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: May 5 23:00:37 2025 GMT
Not After : May 6 23:00:37 2025 GMT
Subject: CN=71310f8b962fc2751cd6ed264f502ca231366097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:e7:4c:5c:ec:a9:84:a0:f2:7b:58:9c:fb:
11:1a:b4:9d:f7:d0:31:19:07:1f:85:3d:3a:8d:41:
a8:54:61:a8:8c:65:ef:b3:48:7d:e6:78:be:a9:3b:
07:a4:a5:e9:6e:4d:b4:9c:16:d2:17:2c:0d:31:1c:
b4:c5:22:88:ed:b9:5f:d0:d1:28:8b:96:8d:fe:04:
bb:00:bf:9b:c6:66:86:3c:f7:6d:3e:ac:a9:c7:21:
e4:58:99:9e:85:d3:4f:4b:dc:22:d6:ba:b2:eb:97:
45:4a:bc:43:35:82:65:3e:60:4d:b8:ef:f0:d5:d8:
ba:60:58:f3:32:4f:81:fb:5b:93:06:1e:96:77:28:
e6:22:7c:bc:8e:d5:6f:db:c7:f7:15:21:55:76:2e:
10:6d:49:42:05:16:05:7a:d3:fc:8a:42:d9:00:97:
bd:f4:f6:e1:24:bf:c1:fc:11:38:ec:43:55:2f:15:
6c:9e:f0:24:9b:09:c5:a7:5c:b3:21:22:1b:e5:1c:
b0:f2:12:c6:fa:6d:9b:8e:e9:ed:22:3e:82:0c:8b:
7f:6a:06:e0:4c:ff:87:f7:36:96:5d:71:89:a6:52:
a9:5a:20:6f:0e:7c:ba:3d:fb:39:11:d0:74:14:85:
83:81:aa:6d:a5:43:83:75:f3:97:fb:c3:c2:55:84:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:0F:8B:96:2F:C2:75:1C:D6:ED:26:4F:50:2C:A2:31:36:60:97
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9f:13:79:73:5d:e4:24:a2:a8:26:e8:c0:18:4a:d8:a5:5d:
0c:f3:9d:79:fd:c5:92:54:40:ff:32:03:b5:14:51:70:dd:fd:
a7:e9:20:ad:18:1c:c7:7c:dd:f8:46:2a:dd:3f:e6:b8:57:4b:
64:b6:e7:5f:75:56:ca:72:00:23:bf:2e:1a:7c:31:5f:3e:e9:
67:ea:92:d1:eb:c1:95:e0:bf:60:26:58:fc:cb:59:03:cb:bc:
4f:fb:ec:52:2e:54:a0:65:45:ab:26:6f:11:ce:d5:a3:1c:9a:
c8:d3:31:fd:d4:39:15:4f:b4:a7:bd:d1:f3:27:fa:55:92:bc:
76:95:cc:24:6b:55:39:9e:92:70:30:49:5d:91:57:b3:63:f6:
a8:4d:82:44:20:b5:3a:d2:30:7e:90:bf:28:ef:a5:37:e8:ef:
2c:90:b6:75:32:2f:e7:be:87:50:62:dc:e3:54:57:3f:15:d3:
be:58:7f:ec:92:51:b8:9e:46:7d:23:e1:b9:a4:51:a8:30:6b:
a1:58:cf:46:08:87:9b:4e:71:d9:5a:e1:61:f7:53:8f:55:a2:
5e:62:32:fe:b1:9e:70:67:49:1b:b0:69:36:0e:ac:d0:60:b8:
e3:03:9e:1a:85:5c:8e:83:d9:e7:84:96:2e:2e:fb:06:ed:fd:
c9:62:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:44:14 2025 by rpki-client