Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier: ngjrjxyw+9Mqyt8Cib2IxKhSXAm1aDx6lmjIXoEnIQk=
Subject key identifier: 3D:A5:6B:76:3B:91:65:26:DA:AB:6D:C0:44:CD:BA:28:F0:09:D9:F3
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 0196C3B962903BBE401E216AE1CA0B77B45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number: 0976
Signing time: Mon 12 May 2025 09:00:28 +0000
Manifest this update: Mon 12 May 2025 09:00:28 +0000
Manifest next update: Tue 13 May 2025 09:00:28 +0000
Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: BK1tYHR0jRHru2ApkU3j3qJNrWkEvleAMjyMMDBWHBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:62:90:3b:be:40:1e:21:6a:e1:ca:0b:77:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: May 12 09:00:28 2025 GMT
Not After : May 13 09:00:28 2025 GMT
Subject: CN=3da56b763b916526daab6dc044cdba28f009d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:c1:37:40:a7:8f:f6:b7:8f:e9:17:e0:93:
43:3d:de:ba:12:6f:bb:fe:0f:af:4a:ac:e3:ea:0c:
80:2f:22:a5:3a:61:e9:f2:d4:80:e6:63:e6:38:b3:
1b:77:00:60:04:77:ce:52:8e:96:9d:52:ac:5e:69:
76:e1:23:16:5a:f0:a3:09:09:d2:11:88:1e:f2:bd:
d2:c8:81:e6:bd:48:44:5f:0e:49:c2:73:10:18:14:
87:15:de:b4:89:a1:df:01:d3:bb:4c:1b:f6:f7:00:
8f:cb:4d:9d:61:96:8d:50:34:34:8f:5b:83:3f:7e:
39:87:29:72:fa:33:69:ca:8d:59:a2:b0:93:81:04:
01:21:1c:4d:d5:5e:29:e3:5a:f0:f9:68:76:23:d4:
38:52:4f:4b:9b:34:b9:0d:3a:53:b0:19:6f:f1:a5:
6a:da:79:83:ce:cf:8f:9b:ab:7a:8e:da:8e:e0:a5:
eb:1f:a5:4e:87:1a:80:3c:17:5f:2c:70:5b:74:36:
e1:1a:19:0a:6b:6c:26:21:77:4f:4c:ea:a8:4f:5e:
01:56:19:7f:cd:7e:a0:17:0c:96:89:ad:f9:60:19:
a8:6d:e3:52:cc:cd:06:2c:13:26:95:f4:89:c3:7a:
59:01:d6:d2:ef:1e:46:ed:9d:7c:75:a8:94:40:4b:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:6B:76:3B:91:65:26:DA:AB:6D:C0:44:CD:BA:28:F0:09:D9:F3
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ea:87:a3:41:9b:ce:48:c3:39:9a:a7:32:48:4b:a3:f1:e0:
9b:8e:61:31:bf:4c:32:89:9e:44:0f:6f:30:8f:33:eb:15:8f:
33:e8:45:57:9a:2e:ab:cc:ca:19:fb:ab:df:8d:38:f0:d6:de:
2e:5a:2b:b5:f7:2d:ff:6b:7e:32:2d:a9:28:d4:aa:5e:5c:e9:
b4:16:b1:7d:81:0c:81:0d:10:27:4d:56:4d:49:8f:da:3e:f9:
77:82:c0:cd:7c:db:32:24:cf:51:c8:86:25:cf:12:c9:53:fd:
95:35:ef:85:bd:d4:ac:88:7b:51:b9:ef:28:62:e5:28:d2:ac:
54:f7:46:d8:31:ad:69:a2:df:fa:e1:53:31:76:df:44:99:f2:
01:1e:1c:6e:9b:a7:ef:83:d2:02:9e:fe:94:fb:c1:35:6e:a4:
73:7e:5a:da:17:3c:96:15:48:7e:c3:d0:a6:4f:7a:b9:58:88:
ff:c4:d0:02:f7:f9:6c:fe:02:e1:a9:f1:3a:0b:26:5a:e8:84:
cb:2f:e7:5f:9c:1b:63:c9:d4:4c:4e:01:29:a6:0b:66:74:de:
51:46:4e:70:b8:32:08:79:fd:78:70:88:3a:80:c2:1d:6e:49:
99:04:8c:5b:36:f6:4a:1b:98:5c:d8:58:3b:e9:30:75:ec:c8:
d5:f3:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:28 2025 by rpki-client