Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: RjYAYxLTWK+5mFoM9cK47vsjLqTggc8IxQXJZmB2Yaw=
Subject key identifier: 48:92:EF:17:05:73:E5:44:EF:47:0E:84:D5:21:46:AB:41:BF:F5:89
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0196B9A489716F039FB68F492BB2F185ABD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0D8C
Signing time: Sat 10 May 2025 10:01:30 +0000
Manifest this update: Sat 10 May 2025 10:01:30 +0000
Manifest next update: Sun 11 May 2025 10:01:30 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: LloZwusUaTWlXi2pv7Xr7e6wBYmkVPIWLZSMp8MBfMc=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:89:71:6f:03:9f:b6:8f:49:2b:b2:f1:85:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: May 10 10:01:30 2025 GMT
Not After : May 11 10:01:30 2025 GMT
Subject: CN=4892ef170573e544ef470e84d52146ab41bff589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:2d:6e:ba:c3:db:65:36:3c:94:34:ff:69:
fc:27:08:0a:8f:7b:4b:ed:f4:70:27:ca:81:45:88:
35:0e:a9:56:93:5a:57:4e:8d:2d:dc:7a:5b:22:d8:
6c:43:6c:ce:9a:15:0e:fd:d2:9d:f6:75:04:e7:50:
85:2d:f5:b8:e8:44:7e:1b:4e:0b:76:a4:5e:ad:a0:
93:6a:34:62:6c:af:dc:b4:f8:bc:2b:a5:a3:35:89:
31:2d:e3:f9:f3:de:35:72:3a:2c:f7:66:ba:e3:68:
0d:7b:81:17:da:ba:28:44:00:c3:8a:bb:81:76:be:
67:f7:52:f5:87:ac:bc:4c:74:9d:af:ce:85:84:1f:
c2:ef:4a:19:c8:c9:c2:e7:f1:69:6a:5e:43:a4:0f:
f5:b1:29:5e:7b:64:5f:cf:10:f5:de:b0:c9:1a:b3:
26:0a:37:40:2f:02:82:a0:cb:7a:f4:ba:1f:aa:b1:
1a:a8:8a:ce:44:3c:b1:89:b3:8a:3e:9a:ff:5a:a1:
d1:3a:47:37:6c:0b:5c:0b:f7:6a:70:a9:44:2c:cc:
d2:51:fa:7f:1a:1b:68:d5:9d:b8:6b:b9:3f:d7:d8:
8c:76:d8:b3:42:42:47:4b:55:9d:8a:05:c0:92:06:
89:37:40:e7:aa:3b:bc:cd:da:a2:f9:87:e6:e8:c4:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:EF:17:05:73:E5:44:EF:47:0E:84:D5:21:46:AB:41:BF:F5:89
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f4:46:0b:75:0d:83:f7:1d:a8:ae:c4:0b:4c:f6:e8:c2:b7:
9b:4e:05:8e:3d:0b:0a:ea:96:c7:aa:59:13:e0:99:59:ba:03:
aa:f5:2c:6f:e3:aa:9c:24:9b:d8:76:e0:dd:d2:02:de:c8:bc:
3f:75:cd:77:15:79:8e:56:31:fe:92:45:c0:0c:76:24:06:c3:
5c:1e:71:f2:d5:ff:16:36:bb:ac:1b:a4:a6:02:37:8b:6f:15:
98:7e:f8:74:32:0c:c7:b2:a1:58:23:61:51:21:92:60:24:ae:
d5:07:ef:2c:87:90:56:54:98:4d:df:04:8d:bb:08:20:e5:31:
57:a1:aa:ff:f3:10:ee:6f:58:f1:53:3a:b0:97:ef:01:81:cc:
7f:e1:ba:e0:43:c7:23:9e:c2:57:a1:37:c8:86:6b:85:95:aa:
11:a3:66:51:a5:49:3c:9b:0c:db:ac:70:bc:72:fd:63:28:44:
c7:97:b3:c0:34:f4:89:2e:41:ac:8e:cf:69:a4:14:9f:d5:1e:
1b:67:25:fe:6c:2d:f3:20:39:62:d3:fe:cf:ea:c4:03:50:2c:
74:9c:72:b3:6b:e2:00:3d:2d:5d:72:25:98:9f:6d:8e:3e:65:
70:78:40:19:cb:70:d2:10:13:69:fc:68:5e:14:5c:e4:f4:bc:
6d:d1:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:51:50 2025 by rpki-client