Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: kPV7N8bv0gwQMav9PMK4AILII9XBTNWGi1jwTq6L6ak=
Subject key identifier: BA:7F:AE:5E:25:87:93:D8:A7:75:B9:B1:B1:F9:A0:46:8B:EF:45:51
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 0196BDB77D21C62FAE6BF5997933AB04416A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 19
Signing time: Sun 11 May 2025 05:00:41 +0000
Manifest this update: Sun 11 May 2025 05:00:41 +0000
Manifest next update: Mon 12 May 2025 05:00:41 +0000
Files and hashes: 1: WJ8mDGp2R9SerzYw88vehn3HSik.roa (hash: h5SXKLsi4QXI6eIjbslnIuS0eoxKGY5pZRrkhG82mKM=)
2: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: a1TW34H28F6xSA1+9CFmKk5WRY9DZeJXgVn5JFB1dHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:7d:21:c6:2f:ae:6b:f5:99:79:33:ab:04:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: May 11 05:00:41 2025 GMT
Not After : May 12 05:00:41 2025 GMT
Subject: CN=ba7fae5e258793d8a775b9b1b1f9a0468bef4551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:77:4f:40:a2:85:06:7d:fb:47:55:ea:8b:
34:04:a7:81:8c:de:a1:18:b5:30:fa:21:0b:ac:e2:
cd:49:71:27:66:1a:ae:32:fe:03:93:27:e9:0d:c0:
06:e9:e1:f3:27:f5:bf:47:d8:27:2c:bf:78:12:1f:
4d:ad:95:d4:c9:ed:13:36:9f:bf:9d:61:10:0e:e2:
2a:c7:bf:f8:c9:f5:8e:6b:b6:17:63:6d:97:77:53:
c7:bf:48:af:1e:1e:fa:9a:be:22:8d:2d:7c:2c:21:
e8:f6:d0:9e:ba:3d:5c:56:19:7f:4f:25:38:d3:2a:
41:db:ee:cf:b1:7b:e8:34:c7:9c:75:39:12:41:22:
30:95:ed:8e:6c:b1:6f:2f:d9:18:7e:65:66:2a:ba:
f8:b5:84:f4:3f:bd:39:b1:ab:8b:85:52:30:23:97:
5a:f4:86:47:60:a0:f8:71:9f:b4:7a:38:43:a4:dc:
2b:64:b6:18:de:1d:dc:91:f4:ea:63:7a:11:9c:db:
03:a8:a8:52:88:43:c6:2e:93:09:c0:90:cd:ac:e0:
49:a3:0a:b3:41:5f:e5:2d:ef:84:41:0b:f7:9b:c2:
30:33:0e:a9:79:d2:88:f8:93:3e:e9:f5:9c:c4:66:
f7:78:b3:77:db:b5:bc:10:63:43:3c:5c:98:49:e1:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:AE:5E:25:87:93:D8:A7:75:B9:B1:B1:F9:A0:46:8B:EF:45:51
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c8:f5:e1:61:33:b2:51:e3:f6:02:5f:d0:10:61:a3:ab:e6:
be:3b:e5:4d:f0:d1:cf:b2:ae:d0:c6:d3:fb:a7:7a:f7:db:0c:
1b:d5:3c:34:6c:80:da:06:71:6b:47:62:74:88:0f:ea:14:92:
59:a7:3a:85:1f:5d:06:44:0c:73:8b:fc:02:5b:03:ae:8f:60:
7b:1a:74:34:22:6d:58:ef:73:5a:c4:8c:8e:6b:f3:1d:5b:27:
04:7a:9a:23:6f:39:cd:b1:67:b1:18:f6:aa:fa:88:b7:80:05:
34:73:20:cf:31:51:b2:7b:a2:f2:cf:99:5c:00:cf:dd:8b:2b:
3a:01:a1:2e:8b:11:16:23:ce:3f:c6:65:4b:00:f4:25:eb:4f:
e5:27:2c:3c:75:28:c8:4a:dc:d7:7b:39:ee:21:18:b8:9f:0a:
50:7b:36:89:a5:df:04:d4:dd:ae:46:4e:95:1f:45:ec:35:90:
be:37:97:2c:c6:04:7a:ae:e7:2a:28:98:25:b7:dd:cb:2f:44:
48:77:94:86:b9:7c:6e:67:62:3e:1f:c2:5b:50:bf:ed:ca:97:
b7:56:27:f6:63:fb:d7:a6:03:b4:bb:f4:0f:48:db:0f:7d:40:
96:7f:bb:e8:3f:34:5d:f0:5b:36:20:54:57:6c:6e:a3:0a:f6:
9f:99:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:04:55 2025 by rpki-client