Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: WZ3HcdxMKbQYSlkFNeIXJT88hDplk2rUCxDvBd2mw/8=
Subject key identifier: 70:36:AE:BB:A5:89:28:76:72:E1:2A:1E:0A:26:CE:8E:2C:44:BF:52
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 0196BF6EB1CAE4D51D79E3A0F7419F2901EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 095A
Signing time: Sun 11 May 2025 13:00:24 +0000
Manifest this update: Sun 11 May 2025 13:00:24 +0000
Manifest next update: Mon 12 May 2025 13:00:24 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: 2aY4B4gebvjukLoEGhQPveiFTg1rqtagCYund3BcNPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:b1:ca:e4:d5:1d:79:e3:a0:f7:41:9f:29:01:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: May 11 13:00:24 2025 GMT
Not After : May 12 13:00:24 2025 GMT
Subject: CN=7036aebba589287672e12a1e0a26ce8e2c44bf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:2b:d3:36:78:19:10:2c:72:94:08:7c:63:
85:f2:eb:cd:72:be:28:c9:44:e7:ba:08:8e:53:63:
be:5d:65:01:6c:9d:79:64:46:db:30:24:f8:af:72:
dc:ac:a3:cf:c3:cd:43:17:cc:bc:87:5d:20:15:4b:
25:04:7d:b5:96:bd:cd:04:60:9f:ae:13:0e:32:74:
46:1c:17:06:a6:aa:5b:8a:58:72:18:47:23:19:fb:
b3:a3:4d:1c:51:5e:c3:84:87:de:5f:dd:2e:f6:f6:
c4:75:e5:50:f9:6e:50:4c:25:ac:f1:4d:76:a5:f5:
61:e8:ae:c5:4e:80:53:2b:bd:60:66:cf:90:90:a0:
61:21:eb:b9:37:63:53:9d:f0:cb:37:41:a7:be:43:
f0:a6:0e:af:e1:73:b0:db:eb:0a:03:0c:84:9b:4d:
2a:eb:de:8b:b3:e9:08:4d:ae:ed:69:e6:de:01:2d:
2f:d9:94:ce:b8:8c:d1:11:45:ac:58:2a:3e:06:f0:
da:2b:68:1b:52:ce:3d:77:51:3f:14:85:e3:36:4f:
81:33:fd:ee:c8:ba:2b:c9:f5:3f:9b:1e:ad:6a:90:
8e:dc:86:b0:45:d7:e5:28:18:20:b7:23:4e:1a:d4:
28:58:21:7d:e4:21:ee:7b:4d:88:8f:39:db:34:57:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:AE:BB:A5:89:28:76:72:E1:2A:1E:0A:26:CE:8E:2C:44:BF:52
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9e:fb:72:11:fd:c7:4f:11:15:f5:a1:ad:43:dc:62:90:d4:
90:5d:fa:14:2f:56:93:e5:2c:58:da:d4:e9:67:2e:df:8e:24:
11:03:06:d6:f3:ea:5f:d4:2c:cf:97:c2:98:df:6e:fb:50:5a:
b3:cf:9e:6b:45:e8:19:53:6e:49:a8:c1:66:37:4b:00:28:24:
b3:ad:0d:7d:85:23:02:65:d2:f8:82:07:53:8c:d9:0e:6c:ea:
bf:98:a1:8a:35:9a:11:db:26:63:46:c2:64:fa:e0:aa:0b:b2:
40:de:22:80:fe:4c:5a:ad:9e:0f:5c:ab:9b:70:7e:a6:8d:21:
73:3a:03:79:4f:d5:b0:8c:b6:b2:f0:d0:56:68:76:ac:4e:f1:
cd:68:d2:5d:1b:2a:64:72:0f:31:d4:11:ca:af:1d:cd:02:bf:
9c:8a:f3:6f:ea:7e:44:0d:a0:2b:e0:2e:a2:fe:2e:a8:b8:e5:
96:32:ad:c5:4e:6d:b3:85:f6:72:95:7b:c2:29:4f:67:65:fc:
5b:76:62:f2:88:13:04:e3:1d:76:0f:ea:5b:c1:18:06:b7:12:
16:8d:0b:c7:4d:30:08:20:81:56:23:1c:32:33:e4:76:4a:56:
0c:7d:d3:f6:ce:70:4c:26:0a:15:8e:6d:44:ee:4a:b0:79:20:
14:83:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:28:49 2025 by rpki-client