Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: t/1tV3NGgAYJ6QheUayMa93Bwf8kW5UCPmzEG4qLU1U=
Subject key identifier: C0:1C:56:7A:56:70:DB:CF:60:6C:D1:20:45:63:B9:DE:9B:74:25:8B
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 0196C64CC4C2899A23267F160A6677D7B48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 0FFC
Signing time: Mon 12 May 2025 21:00:41 +0000
Manifest this update: Mon 12 May 2025 21:00:41 +0000
Manifest next update: Tue 13 May 2025 21:00:41 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: 0I3MBJ9coO+U5F6MPQPKqbC1nAKG+geDuV3sdtBqFVU=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:c4:c2:89:9a:23:26:7f:16:0a:66:77:d7:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: May 12 21:00:41 2025 GMT
Not After : May 13 21:00:41 2025 GMT
Subject: CN=c01c567a5670dbcf606cd1204563b9de9b74258b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:5e:0a:8c:65:ab:b7:3f:66:52:a9:41:9f:
e4:aa:da:9a:51:31:20:e1:f1:ed:6c:1d:85:93:8b:
b6:f6:90:40:a9:93:13:0a:26:f9:32:42:97:1c:bc:
d4:17:a1:63:aa:39:68:a2:64:b6:b1:48:ba:4c:7f:
9d:b2:aa:17:08:65:d9:96:cf:b5:9d:2d:cf:9d:b1:
e4:f3:cc:9d:99:c5:eb:ff:67:6e:a1:dc:b7:78:44:
b4:6a:c2:8d:78:36:a0:7e:39:4d:99:3b:7c:e4:f9:
e0:11:7e:0f:b9:71:7c:92:9c:16:93:ba:e8:73:bf:
3c:3f:59:e4:5e:c3:0d:fa:d9:77:d2:e1:c0:ab:86:
0b:db:49:61:83:7a:2f:92:e6:11:be:39:5f:d1:ce:
ce:25:9f:86:6c:66:9a:ac:95:75:da:b1:39:5a:ec:
0c:9b:ab:35:73:09:ec:33:42:39:05:6a:cf:13:b3:
32:0c:26:09:41:60:42:36:e8:45:42:5c:a4:94:e2:
9e:66:66:b2:51:8e:e9:f0:17:91:8a:3d:ed:dc:c2:
85:e5:0d:36:b8:9f:be:3c:77:0a:f2:a4:83:9f:1b:
bf:32:4a:8e:ec:3e:fe:7c:78:71:e3:51:fc:86:50:
ec:22:b6:ee:0a:fb:fc:be:b9:c2:a3:58:ee:76:f7:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:56:7A:56:70:DB:CF:60:6C:D1:20:45:63:B9:DE:9B:74:25:8B
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:20:19:da:3e:01:02:29:cb:48:91:38:e4:ad:4c:63:9c:
f0:6e:bd:9f:6b:5d:57:21:0e:77:e4:f8:3b:f8:8d:07:de:b9:
40:99:6b:b0:44:e3:f9:b2:d8:0b:00:e9:b3:30:cd:60:5e:49:
01:a7:fb:18:d1:7b:21:a8:18:4b:b7:60:c3:c9:f5:7a:14:63:
41:bf:83:10:01:fd:3c:f2:76:d6:80:ad:db:95:9d:c2:b9:96:
c1:16:c9:89:90:40:cf:61:55:e9:d0:9f:99:a4:f0:c3:e1:7c:
25:ee:f2:25:99:47:86:7e:c5:3a:0a:ea:ab:a7:01:7b:92:f0:
cd:30:f2:f6:7a:7c:a4:40:53:63:cf:32:b2:d8:68:02:76:78:
5e:1e:0e:e4:ce:a5:e4:00:c2:64:01:75:68:08:9d:31:11:2f:
0a:1c:2e:9b:5c:86:38:c9:fd:d0:ad:f2:fa:6c:72:64:ed:96:
8d:8b:f5:1a:16:a4:3f:1d:75:b1:8c:32:77:dc:71:a2:e1:7c:
84:23:d8:3a:77:e3:31:65:3b:f1:93:f0:3e:12:3f:78:67:74:
17:7c:ef:05:6a:c5:de:6e:93:e2:a8:ba:57:f6:8c:af:2d:5f:
8d:35:b9:e0:e2:75:46:60:8f:f9:13:b2:2f:f5:e1:6c:e4:ab:
64:af:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:58:10 2025 by rpki-client