Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: 7aV4IM0BDJ5gUQ9bX2msvPPCKAYZWYmAEt8JzRy+niQ=
Subject key identifier: 7D:87:4C:6C:EE:A8:E0:45:85:C3:33:A3:DF:28:A7:15:A3:CF:D7:FE
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 01969C753B80D351A5F15A85331E59B1B65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0CFC
Signing time: Sun 04 May 2025 18:00:50 +0000
Manifest this update: Sun 04 May 2025 18:00:50 +0000
Manifest next update: Mon 05 May 2025 18:00:50 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: nMI1f24GRZO/VN528safxyZ12SLBk4OVUxa/e5Mtc6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:75:3b:80:d3:51:a5:f1:5a:85:33:1e:59:b1:b6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: May 4 18:00:50 2025 GMT
Not After : May 5 18:00:50 2025 GMT
Subject: CN=7d874c6ceea8e04585c333a3df28a715a3cfd7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:84:26:69:73:42:ee:01:c8:8c:9d:54:6f:
38:49:aa:31:50:62:3c:75:d9:0d:9a:dd:39:f2:15:
4e:e9:bd:c8:83:85:49:79:4c:10:69:23:a1:e4:b7:
9b:41:45:07:68:8b:89:42:5a:79:f8:6c:51:d2:0d:
8e:5e:85:d6:3c:04:9a:b8:13:a1:2a:1e:e3:81:0a:
c4:fc:4f:89:84:58:0d:c7:bc:f5:ce:9a:25:73:0e:
26:87:30:4d:b5:3e:01:16:75:0e:41:21:11:6e:85:
ea:26:ef:db:48:8f:51:9c:e3:a3:74:06:88:e0:83:
84:bd:14:0c:de:53:ff:9b:25:56:6b:3c:28:81:d2:
68:62:d8:a9:1f:a2:07:52:2a:ba:40:fe:a3:a9:d0:
36:ab:f1:d2:39:da:d1:23:7a:76:32:8c:55:8e:e1:
62:dd:3e:6c:d5:4a:fc:3c:58:1c:af:32:73:ec:f2:
69:0b:be:93:a3:e9:8b:bd:a2:cf:40:c5:5b:a1:2c:
77:8c:49:5a:56:e0:64:12:1b:ee:7f:5f:94:3d:d4:
e5:75:49:57:30:41:f8:a3:e1:13:24:79:31:3c:cc:
dd:b7:6e:34:31:b1:d9:04:a2:04:c1:ea:5e:6f:22:
4d:59:aa:40:d8:29:cd:85:ca:e6:40:d1:23:16:75:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:4C:6C:EE:A8:E0:45:85:C3:33:A3:DF:28:A7:15:A3:CF:D7:FE
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:ac:26:a0:28:6c:72:79:cd:f1:21:30:5e:7b:cb:f9:57:
b0:2d:e2:92:91:da:7a:3e:06:14:be:8f:98:6a:54:77:8e:79:
d1:e4:21:1c:92:08:25:ed:e1:d0:e2:6b:fc:46:4b:da:fc:7e:
90:ff:3f:38:2f:0b:5c:17:1c:4c:07:bd:55:7f:82:56:e0:3c:
de:b8:cd:c3:6e:bd:17:c5:55:ce:c9:dd:3f:8c:24:27:3b:4c:
9c:26:b7:f9:99:8d:9e:22:e7:c2:cf:89:c8:e0:3b:dd:b2:e7:
c1:26:08:ee:ab:13:bf:ce:15:e9:f1:3c:50:cf:d4:29:5e:a8:
e9:af:2c:4e:a7:37:2c:72:e4:b2:0f:3d:6a:1b:a6:0e:f6:cb:
9e:dd:4a:ff:32:51:1d:74:b7:bc:87:4c:44:8b:d1:df:f7:ee:
f0:26:7d:fe:bf:0a:09:2e:81:cd:0f:76:e8:d8:94:71:ed:bc:
ed:cf:40:d6:9f:c1:52:73:81:ee:a7:a3:29:35:01:41:f9:f8:
34:0a:ce:14:63:7c:54:a6:6d:05:fa:24:5b:f3:f9:1c:60:b1:
3d:2d:93:88:cf:b6:6a:64:e5:f6:88:85:c3:3c:f9:b3:22:47:
a0:47:9d:76:ac:df:2c:0a:91:cb:55:68:ff:71:71:3a:90:f1:
a9:37:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:12:47 2025 by rpki-client