Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: pjn7QayUSxwUKXaC4HGPJ+fs1KEUyU1oM4R8XV0DftQ=
Subject key identifier: 61:13:F0:11:32:1B:DC:5F:74:A2:72:80:34:E1:DE:9D:EE:12:DB:D5
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 0196BC37514042E866DE0377CD10EE936BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 14DE
Signing time: Sat 10 May 2025 22:01:03 +0000
Manifest this update: Sat 10 May 2025 22:01:03 +0000
Manifest next update: Sun 11 May 2025 22:01:03 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: vZ0bHugQir7QbrPRlOovT1P3F4NTGriWa+kis3aRT0Q=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:51:40:42:e8:66:de:03:77:cd:10:ee:93:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: May 10 22:01:03 2025 GMT
Not After : May 11 22:01:03 2025 GMT
Subject: CN=6113f011321bdc5f74a2728034e1de9dee12dbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:37:e7:c4:ee:8c:e0:44:5b:36:1f:08:d9:
df:60:de:b2:e2:ca:fb:16:c5:4a:82:ff:ad:2a:53:
87:16:86:3e:b9:df:a5:67:f3:7c:23:ac:6c:a6:4c:
6e:b6:29:12:7c:b2:15:ec:2e:68:b5:11:3b:74:4f:
07:ad:5d:c3:f2:02:4a:b0:ea:bf:03:30:1b:af:6b:
5e:66:51:29:49:5f:e5:68:1d:ae:bd:5a:73:0b:cc:
d8:5d:e9:20:3b:af:fa:ae:f0:db:00:3c:a0:b7:c7:
dc:1f:66:43:e6:c7:97:d0:3c:2f:d8:e8:e1:f9:e9:
cd:7c:4e:f0:d8:d8:cd:01:ed:22:eb:48:9f:b8:03:
6d:7c:98:17:22:cb:4f:11:8b:1d:fc:b1:99:3d:46:
a4:ac:c3:f5:c2:80:d4:2f:eb:05:5f:49:0b:82:fa:
9e:d8:7a:10:5e:ec:68:66:99:7e:25:c2:f4:9f:0c:
71:e4:b4:97:05:85:7f:e2:7d:7f:86:a6:42:48:76:
9e:8c:24:59:19:9e:31:08:df:dc:da:71:93:30:6c:
35:df:4b:35:80:1b:1f:9f:78:40:d1:8d:a8:67:26:
4d:e6:19:34:d3:17:cc:56:6c:ab:8b:12:c4:db:a5:
0a:94:2c:e1:18:78:11:62:9c:46:55:fe:51:f6:c1:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:F0:11:32:1B:DC:5F:74:A2:72:80:34:E1:DE:9D:EE:12:DB:D5
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:34:ca:83:40:2e:59:8e:d6:82:36:d7:df:f4:b0:a0:0e:a2:
fd:44:18:db:7e:ba:17:08:c6:1f:c9:cd:8d:73:49:df:d4:3f:
f7:48:39:27:d4:77:47:08:64:32:09:63:50:1c:b5:42:77:b9:
04:72:be:5e:32:df:1b:b0:54:07:47:48:99:c4:e5:9e:94:69:
b2:9f:a1:1f:5d:90:f8:0a:6b:d2:f3:de:8c:c3:e5:b6:ae:76:
35:79:2d:fe:ac:50:cc:dd:02:e8:07:74:d6:4a:af:16:00:37:
27:51:22:db:a9:81:df:73:96:3a:ce:4c:dd:7e:aa:f2:fe:b8:
b0:43:6f:3f:5a:9c:09:9b:d1:9a:01:90:43:cc:05:75:b8:97:
d9:06:1e:5f:0f:5b:34:a0:79:88:c1:25:70:a5:00:c3:74:5b:
ef:df:02:bb:c2:68:4c:e2:8f:2a:61:2f:16:74:9e:4a:5c:b7:
c6:52:65:b2:4a:4f:cb:fd:5e:5a:8a:f9:a5:41:22:75:3a:b9:
73:4e:dc:62:d2:d1:de:2d:70:b6:1f:45:20:fd:53:6c:32:35:
5e:84:34:81:f7:0e:80:60:d7:0b:2e:50:42:a9:fa:5d:83:f3:
6a:a9:cf:08:1d:e1:90:e3:2b:5f:d9:ca:5c:0b:8b:29:72:3d:
6b:d6:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:29:44 2025 by rpki-client