Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File: YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier: x0EJ75RMUbvCsB6sItn0ctLZPDLwDHDRt3sLLvU6vgw=
Subject key identifier: 5E:0F:73:0F:FD:D5:64:07:2B:9E:2E:A4:CB:22:7B:AC:B7:7C:F5:F2
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer: /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial: 0196BE932D2D19F022E158CC7038876B850C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number: 03A9
Signing time: Sun 11 May 2025 09:00:38 +0000
Manifest this update: Sun 11 May 2025 09:00:38 +0000
Manifest next update: Mon 12 May 2025 09:00:38 +0000
Files and hashes: 1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=)
2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: BpkgZ00FXPExv690fXYkXGKnhzYOv9hnbdK/wjwuhVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:2d:2d:19:f0:22:e1:58:cc:70:38:87:6b:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Validity
Not Before: May 11 09:00:38 2025 GMT
Not After : May 12 09:00:38 2025 GMT
Subject: CN=5e0f730ffdd564072b9e2ea4cb227bacb77cf5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:6c:3c:79:3d:f0:81:81:6c:c8:35:ae:3a:
43:ee:35:ce:ba:6e:b2:6e:f4:87:e0:67:d0:b6:73:
c2:3f:96:36:d6:04:e9:cb:e2:67:81:f1:e7:f6:b3:
6a:68:85:3f:7f:f3:ff:10:dc:04:4e:39:91:33:c4:
4a:20:b0:d5:23:98:68:53:ac:51:bb:2e:d9:d2:12:
5b:18:d9:90:b7:9a:e9:46:a0:60:3d:08:2d:76:6e:
52:a5:6a:81:6c:c4:ad:d2:a0:97:62:d5:cf:50:24:
df:e1:00:c5:35:2b:78:d3:06:a4:d1:5a:e8:76:29:
66:3a:ca:d4:56:9e:d1:0e:37:d1:88:19:15:f6:4f:
b0:ec:78:c4:92:a2:63:ec:b3:e3:f9:f4:63:a7:4b:
da:49:a1:5a:0f:f9:f5:fa:13:c7:22:94:8d:eb:78:
9e:ef:d9:2e:01:25:cf:c0:ea:8d:c0:1b:4d:35:92:
0e:c6:4f:6b:81:0e:3b:47:39:c0:c5:2d:6e:a9:04:
aa:6b:8e:c6:a4:6b:05:4d:3a:a2:8c:23:b0:6b:9d:
45:23:9f:55:6e:d1:3b:2f:f9:7f:b3:72:22:46:13:
0d:e2:e4:46:9f:e0:c7:2c:43:bc:29:b4:a2:d0:e7:
80:a7:de:99:3b:84:da:10:63:69:0f:d6:e8:b7:d2:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:73:0F:FD:D5:64:07:2B:9E:2E:A4:CB:22:7B:AC:B7:7C:F5:F2
X509v3 Authority Key Identifier:
keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a9:55:c9:94:a0:4d:bf:6a:3c:a8:ed:a7:8e:0d:ca:36:19:
6a:08:ec:c4:bb:c0:08:f9:a6:c8:99:0a:60:06:0b:f5:ae:57:
78:7d:20:65:97:1d:a7:ec:29:7f:0f:0f:3b:b5:4b:45:6a:56:
e7:b3:84:75:c1:27:1e:90:81:7e:4f:0a:70:a4:e2:5d:fe:36:
ee:4e:0c:76:1c:64:1e:58:dd:2c:ac:f6:cb:83:bc:97:c9:a8:
6b:6a:73:de:10:ce:f4:40:52:d0:e6:2a:07:b1:c2:c7:78:e6:
13:9c:32:3f:68:5c:fb:5b:85:c3:e0:98:ff:59:23:25:5e:39:
c5:3a:f5:56:90:3f:8a:4b:4a:ce:57:0e:a1:50:79:ae:ec:53:
be:bd:cb:94:b0:44:b1:00:29:99:73:96:48:16:55:79:30:7d:
cf:4d:c7:d7:fc:53:c4:88:d5:03:d1:ae:09:53:3a:2b:1b:c4:
6b:f8:d4:31:99:24:90:96:99:9a:97:c3:90:ad:2c:fb:7c:50:
25:5c:53:46:6d:13:d9:6b:2a:71:07:6d:99:0a:e6:c3:68:02:
bb:76:ad:a1:72:19:05:1b:fe:ed:29:2c:ba:73:c4:50:e2:3f:
69:10:a0:5b:d3:09:c6:f0:a4:5e:21:98:b1:a3:c7:ef:47:ae:
08:22:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:38 2025 by rpki-client