Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: LsJ/vFozgKHEDkVmSyqvj/TIjiYtOQslJYAn3+s/xbU=
Subject key identifier: 7F:B3:75:58:CA:0F:DC:3B:62:7B:13:68:47:2D:96:ED:4D:8E:7A:C3
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 0196B0695BB84EBBBCCE15D39D8D3587B59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 15:00:16 +0000
Manifest this update: Thu 08 May 2025 15:00:16 +0000
Manifest next update: Fri 09 May 2025 15:00:16 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: lAHxYkVu+eC7UqUPgShE2WWdbOZxxX22R8Cd0+0bqhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:5b:b8:4e:bb:bc:ce:15:d3:9d:8d:35:87:b5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: May 8 15:00:16 2025 GMT
Not After : May 9 15:00:16 2025 GMT
Subject: CN=7fb37558ca0fdc3b627b1368472d96ed4d8e7ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:cb:a8:77:5d:a2:b3:e7:c7:a3:da:90:38:
0b:0c:06:3d:19:a5:21:2a:38:cb:21:1b:08:07:76:
a9:e7:cd:5c:f4:53:08:d6:61:d8:7c:5f:27:f0:5c:
fe:af:90:77:b0:94:99:ae:ea:70:f5:cd:a3:28:b6:
11:f3:a4:d0:0c:66:41:8e:af:88:f0:ef:cf:5c:eb:
bd:e8:86:d7:ca:36:23:ab:67:ba:37:52:e6:48:1c:
8e:94:3f:e6:cb:8c:b3:b1:f2:30:71:55:5c:bb:15:
9f:b0:67:8e:d1:64:bb:c2:18:a5:38:3d:86:65:93:
04:59:d2:0e:b3:57:25:14:64:85:c6:5e:62:dc:c2:
8c:90:86:c7:ca:06:97:9e:9d:d8:f8:e2:c9:d7:45:
bf:a4:01:7c:54:76:1b:af:a1:b6:f4:18:d6:33:2c:
fa:ee:be:e4:4d:1a:03:7b:34:17:28:d5:d2:63:4e:
12:1a:07:3a:3b:fa:71:9a:f9:fc:4e:bb:7f:85:f1:
24:2c:ff:f9:73:94:4b:1a:7a:fe:4b:d8:fa:19:71:
28:68:ba:28:f3:09:82:98:be:46:05:2b:c4:d1:76:
6f:fb:cb:61:c6:40:d0:ba:ac:b9:f9:67:ce:f8:a7:
9e:42:3b:7f:ee:62:b2:d5:27:28:bc:bd:ae:eb:88:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:75:58:CA:0F:DC:3B:62:7B:13:68:47:2D:96:ED:4D:8E:7A:C3
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:15:90:5e:b5:6f:14:a8:7c:a6:a5:c6:d8:58:2b:f9:59:
06:14:82:11:87:0f:3f:34:3d:41:b5:21:fe:22:d5:01:92:53:
90:02:dd:c4:80:59:74:53:30:19:61:d3:79:2b:6b:0c:08:f9:
49:4c:34:5e:23:76:54:9a:1d:c7:53:7e:04:79:12:93:84:6c:
cf:e1:91:8d:b1:86:45:1e:6b:d2:3e:91:61:80:1e:c6:65:e6:
0b:15:9a:ef:1c:28:cb:86:89:72:64:4f:57:57:c0:0a:6a:5e:
36:d4:86:27:f3:cf:33:0e:9c:88:fc:ca:a1:28:57:56:27:9f:
00:fe:59:aa:db:c7:70:02:89:4e:8a:50:d6:65:6e:28:1d:80:
34:a5:68:21:f8:57:e2:7e:4c:ba:a3:02:95:ee:47:ff:9d:44:
b9:a7:b0:b8:44:01:32:97:f3:21:7d:4a:56:45:02:97:cc:88:
83:8a:70:59:0d:dc:c0:f3:53:99:9b:f3:88:06:f8:2c:49:72:
69:6b:f3:c7:91:1b:87:a5:e4:af:a6:59:f9:48:9e:cd:a1:c0:
46:d1:98:57:5f:87:27:76:24:e9:3e:bf:3a:d9:12:f5:2c:b6:
c7:e6:2c:d2:3f:5b:70:4f:1b:3c:a0:9e:1f:05:df:33:c3:d4:
7c:9f:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:59:11 2025 by rpki-client