Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File: YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier: rF6U2OWNgC0yVS7KnZkpqPziizZ/2Mvjy3OQ7YCxgjM=
Subject key identifier: 65:D5:20:C9:82:25:6D:25:B2:0C:68:BA:FF:5E:64:D1:56:D9:98:AF
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 0196A9C2FE482B7FA3563E326C42FEE38857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number: 038A
Signing time: Wed 07 May 2025 08:00:50 +0000
Manifest this update: Wed 07 May 2025 08:00:50 +0000
Manifest next update: Thu 08 May 2025 08:00:50 +0000
Files and hashes: 1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: madSVtQxTXs67rCkGsBtmDvJwzF+hcC1o4UZ7crotWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:fe:48:2b:7f:a3:56:3e:32:6c:42:fe:e3:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: May 7 08:00:50 2025 GMT
Not After : May 8 08:00:50 2025 GMT
Subject: CN=65d520c982256d25b20c68baff5e64d156d998af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:f3:28:46:94:c5:1c:54:95:94:d3:6d:e0:
2d:89:aa:ef:12:03:c8:e3:38:ad:5f:b0:56:2f:0e:
b5:22:46:c6:e2:f0:85:31:00:66:eb:8e:c9:09:f3:
9c:33:10:0f:6a:21:63:26:8b:2b:e8:19:d9:da:1a:
8f:4c:3e:a1:f9:a5:a1:1c:58:a2:2e:78:99:a5:fb:
e2:b2:31:5d:d1:97:f8:95:65:43:08:3e:c6:8b:e1:
93:69:66:44:cb:6f:a7:03:b8:6a:e8:e5:92:e4:3d:
21:ee:c3:36:66:4a:10:7f:f0:08:61:45:1d:1e:83:
d4:5b:d4:a7:85:91:cf:ff:7d:f6:ef:f8:c5:7f:df:
cb:5e:f6:c1:14:e1:b9:a6:e0:01:22:2d:49:31:45:
49:6f:1e:96:b0:18:4d:f1:b3:2c:a1:69:dc:8a:56:
cd:23:71:9f:27:fd:15:8a:91:c2:63:b0:a2:17:a3:
bf:53:cc:06:43:92:4d:88:ad:6f:51:83:9f:7e:f4:
42:3d:32:60:53:a0:45:37:a7:78:5c:23:d8:7d:29:
70:eb:c4:b7:a5:d0:32:b6:cf:98:f8:5c:db:53:62:
2b:b2:d3:8f:09:80:ca:31:60:e3:0e:8c:68:48:70:
f2:56:db:89:26:c4:e7:6e:25:fb:1c:0c:e9:d4:59:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:20:C9:82:25:6D:25:B2:0C:68:BA:FF:5E:64:D1:56:D9:98:AF
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c2:77:40:0f:9e:c2:c1:d6:45:65:23:a7:91:d1:2a:80:04:
54:bf:df:56:21:90:fe:b8:dc:2e:09:d1:1d:ba:6d:2d:70:86:
ab:53:a9:a9:1d:b0:bd:17:c7:20:ca:31:fb:1a:7c:68:8b:35:
1a:9d:c2:c4:1b:e4:12:7c:44:64:87:05:3d:63:4b:50:92:dd:
a2:89:a4:b8:70:c3:ef:b4:13:ab:d6:2c:1a:47:44:f0:3a:4f:
29:87:48:40:98:ee:50:77:19:23:5d:5e:88:a0:3c:5c:3e:0a:
a2:32:67:59:58:5b:44:b4:46:b2:e5:4f:41:05:4a:b2:de:4a:
db:9a:a8:a5:e7:89:37:16:8c:33:5d:c7:77:e6:6c:48:3d:2c:
91:99:37:9b:1b:f2:1c:b0:1a:10:82:99:3a:af:57:02:60:d4:
83:8d:96:81:4a:b3:12:e1:15:79:c8:dc:2a:e7:d7:15:5b:52:
7f:a5:5d:af:2d:92:7c:09:e0:4a:e5:5a:1e:f5:6f:fa:37:69:
8a:05:60:69:de:2a:19:30:fd:d5:4c:67:2f:3f:dd:77:6b:88:
b6:6f:95:8d:3f:8d:0c:e6:0f:2d:b8:b2:00:38:f4:71:26:39:
ad:af:5e:6c:c6:1e:4b:f0:ce:b6:99:d3:28:fc:00:74:1f:1c:
b7:80:b1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:34:38 2025 by rpki-client