Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier: QUPiv6seUvcoPcss5ARX9ak/GKsKb9Y+NpQIABNGF8w=
Subject key identifier: 6E:35:A2:BA:9A:2C:28:BC:6D:A8:C6:1F:39:5E:07:32:12:C1:FD:9C
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 01969F7666E5BB6524653A679C09E8479837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number: 0A7F
Signing time: Mon 05 May 2025 08:00:58 +0000
Manifest this update: Mon 05 May 2025 08:00:58 +0000
Manifest next update: Tue 06 May 2025 08:00:58 +0000
Files and hashes: 1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=)
2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: 6hVxEfDe/Qlo6XazDhXPOxWQBKOGy4EYHyv/s9YwzKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:66:e5:bb:65:24:65:3a:67:9c:09:e8:47:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: May 5 08:00:58 2025 GMT
Not After : May 6 08:00:58 2025 GMT
Subject: CN=6e35a2ba9a2c28bc6da8c61f395e073212c1fd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:c2:f6:d2:00:9b:e3:17:61:a0:45:a8:a9:
8e:eb:f3:54:94:78:2a:fd:d9:6c:eb:0e:cb:cc:ec:
69:6e:6c:12:97:81:27:06:d5:8a:8d:2d:25:f8:c9:
94:1f:39:c5:55:0f:49:a7:82:73:26:86:44:3b:1a:
c6:13:56:95:fb:13:95:48:0b:db:4c:bc:3c:ff:c2:
47:40:fb:56:75:79:38:31:a5:77:f1:9d:f4:f7:a5:
96:27:cf:f7:08:f0:b5:6d:e1:fc:e6:25:53:97:b2:
29:20:82:f4:cd:18:ed:bb:e2:0d:c3:6a:07:71:64:
95:be:9f:84:1b:98:b2:b7:89:21:57:d4:88:5b:5d:
66:90:fd:85:37:86:e3:13:ba:08:25:b7:84:42:7e:
d2:dc:0e:ba:d1:13:98:0b:81:12:6f:46:aa:70:ee:
74:c9:36:a6:c9:08:98:06:b2:25:0e:45:1c:02:3b:
7b:8e:b7:ae:50:9c:b6:a3:e6:cf:57:eb:a3:47:b0:
9e:11:d4:ff:7a:cf:34:71:24:f0:91:8c:f7:d1:9b:
e6:63:83:57:1f:df:d1:0e:0e:94:3f:b4:fc:22:b3:
53:58:82:e4:e4:41:b0:78:db:16:d4:0b:48:74:74:
88:cb:7a:a9:18:fe:02:92:e0:bf:28:d1:e6:ec:d6:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:A2:BA:9A:2C:28:BC:6D:A8:C6:1F:39:5E:07:32:12:C1:FD:9C
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:52:dd:33:5f:ed:fd:e2:5c:f5:b4:31:ad:49:bf:93:1a:d3:
f0:22:29:04:ab:fc:ee:79:ae:d8:cf:e1:87:e3:c7:2c:dc:25:
e9:da:b8:0c:ec:f3:05:6b:90:a8:13:23:2e:91:c8:37:09:6d:
74:c4:9e:f1:77:dd:27:3f:53:72:3e:66:a4:ac:f1:d3:e0:d3:
be:ff:11:8e:ce:4d:a2:fc:57:1d:09:ff:6d:46:68:d6:f0:0c:
2c:b9:77:c9:d5:11:ca:90:8c:39:96:c6:9b:8b:76:3e:0a:70:
87:bb:3f:b7:48:44:1c:8c:03:de:45:3a:94:c4:f4:b1:22:ef:
e5:1d:90:03:4e:87:04:74:d5:bc:90:c7:a8:23:47:56:31:55:
f5:a0:85:a8:d9:18:b4:b1:24:c1:f4:b5:0e:86:ad:65:15:a4:
53:9c:22:65:81:dd:7c:9a:c5:0d:70:8b:de:0b:32:c4:fb:48:
52:8b:d1:36:5d:f1:43:7f:b5:29:6c:7b:4c:8f:ff:85:e5:97:
44:0b:ad:16:6a:a6:fa:e7:94:3c:56:94:02:37:2a:2e:02:d6:
65:78:9c:d7:5e:9d:3d:86:7a:06:e6:10:04:bc:86:9a:9c:a5:
3e:b4:86:22:f1:c6:08:0e:a5:c5:50:e4:a1:12:3d:d8:b3:3d:
4d:36:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:29:47 2025 by rpki-client