Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: l2IRYqWKrq8yEQfmD2zIr2rY65rzTr9TAmQ+TumrPcE=
Subject key identifier: 56:09:7F:8B:E4:45:C5:8F:37:35:58:5F:59:55:44:43:59:65:49:14
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 0196BAED6B45B28125419B7F902BDD5EE521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 14C5
Signing time: Sat 10 May 2025 16:00:43 +0000
Manifest this update: Sat 10 May 2025 16:00:43 +0000
Manifest next update: Sun 11 May 2025 16:00:43 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: VgpItgd6mcNf/B74XUh29aRO9y8L5q5ZrkArpj36QDM=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:6b:45:b2:81:25:41:9b:7f:90:2b:dd:5e:e5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: May 10 16:00:43 2025 GMT
Not After : May 11 16:00:43 2025 GMT
Subject: CN=56097f8be445c58f3735585f5955444359654914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:5e:94:33:17:e3:70:dd:44:60:42:28:47:
fd:2a:c1:f0:11:96:0d:0c:ea:40:27:65:41:1e:bb:
59:c6:2c:d8:d3:dc:9f:a9:b6:e0:3b:7d:e0:bf:be:
1a:87:63:0e:1b:ce:16:96:d3:c5:c5:17:8a:f7:22:
79:0c:7e:60:2f:8d:d5:53:09:2e:dc:7c:8a:82:d6:
cd:eb:ff:3a:00:d5:51:eb:3d:52:9d:61:4c:fd:08:
d5:ff:a9:70:eb:4b:05:e6:77:21:f3:81:ea:b4:e9:
00:61:90:6f:cf:0b:10:e6:bb:5b:38:19:e6:49:9f:
ef:c9:4a:ec:66:7b:ca:fe:d4:ce:51:b4:d3:b4:cb:
85:b2:87:6c:2b:d8:d7:5a:3d:d1:d8:a5:15:df:7e:
f1:52:cb:e3:3d:cf:65:fd:85:c0:8e:98:0e:83:44:
35:03:9d:22:9e:2d:79:a5:28:de:41:50:df:f0:9a:
ce:4e:8d:0e:f8:af:57:b7:40:8b:59:d5:e7:c1:b5:
61:19:7b:00:7d:e0:a5:25:3b:02:b1:65:09:73:90:
85:e2:da:d8:fc:27:a5:2c:66:f3:0e:89:01:ce:e2:
1b:b9:88:a7:71:a9:5d:03:7d:3f:2f:6c:c9:63:1c:
5e:3a:09:fa:0e:d3:6d:ce:a9:4e:fd:d3:81:4c:b8:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:7F:8B:E4:45:C5:8F:37:35:58:5F:59:55:44:43:59:65:49:14
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:58:5e:91:09:19:22:71:f7:05:21:e1:45:e2:02:3b:e3:3a:
8c:43:fd:7e:07:0a:b9:23:27:b1:c0:58:1c:3e:e3:d7:d9:6c:
7f:90:ad:75:7d:17:43:b9:ef:b2:e4:54:ec:03:c4:17:44:35:
b3:42:21:3c:5d:52:73:28:c1:4a:4e:3c:b9:f5:60:6e:42:fc:
5b:13:3e:84:5a:f7:35:c6:b4:ee:aa:a4:d9:cb:a2:75:0d:69:
92:e6:e3:19:e7:0b:3d:38:94:30:d0:8b:0a:6a:eb:0e:74:4b:
5b:e8:ef:6f:bd:f9:53:3a:68:31:ee:fc:63:ed:1b:57:d5:ab:
0d:e1:51:7b:38:97:4a:10:ba:7d:b8:a2:83:9c:de:dc:36:91:
f6:84:da:28:14:0c:52:fe:3c:b5:67:d8:2b:d1:d6:58:77:43:
3f:eb:a3:d2:f5:f8:6b:4e:62:77:45:3a:2c:7a:53:6a:1a:ef:
39:d4:69:c7:63:2d:99:b9:f8:f5:1e:49:e6:a4:3c:de:42:73:
38:95:ca:37:2f:a3:8a:c2:cc:65:25:5d:6e:8a:49:18:c1:2f:
df:70:d5:d2:79:72:bc:88:3b:fa:a7:4c:c8:b5:19:a6:cd:a9:
69:06:3c:45:f7:2d:b3:a3:1e:0b:9e:f8:35:63:d1:aa:91:1a:
8b:e3:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:47:28 2025 by rpki-client