Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: LLrcg+pcjvGZkihauLyLKpd5JvCUyrTIWwbE6Ykj8s4=
Subject key identifier: 98:CC:BC:CE:3F:50:29:89:03:A5:20:59:6E:AA:03:21:BF:C1:A9:BD
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 0196B032EF6C68AEDA30442A331A4F8A2E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 020E
Signing time: Thu 08 May 2025 14:00:50 +0000
Manifest this update: Thu 08 May 2025 14:00:50 +0000
Manifest next update: Fri 09 May 2025 14:00:50 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: BZU6oOBVUSHQg5x8Yybk46om7h8TF38CnUslm7G6/bE=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:ef:6c:68:ae:da:30:44:2a:33:1a:4f:8a:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: May 8 14:00:50 2025 GMT
Not After : May 9 14:00:50 2025 GMT
Subject: CN=98ccbcce3f50298903a520596eaa0321bfc1a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:2e:ea:5d:16:08:b9:4a:66:87:72:5d:f7:
b8:f2:c7:30:15:14:78:2f:b2:c5:18:5f:30:66:9c:
a5:eb:06:d6:31:f4:7d:2d:06:3d:c1:8a:41:f0:b8:
29:4c:2b:26:e8:2b:9b:e0:52:7e:d3:8c:e1:74:3c:
74:cc:1b:b8:61:e6:dd:10:59:fd:5f:0a:4c:88:75:
2d:26:76:a1:5c:9d:a3:be:b8:e3:31:d8:f0:bf:b3:
84:da:be:25:ca:75:6f:14:0d:14:e0:0c:93:7c:2a:
08:46:7a:c1:55:41:74:6a:60:bd:88:b6:dc:bb:79:
36:b5:fd:6e:24:48:85:a3:2b:20:76:4d:f2:5d:c0:
f0:17:09:a1:72:c0:d4:ef:11:61:d6:9b:80:5f:ed:
13:dc:31:e5:c4:69:2f:b9:c3:14:aa:05:8f:c3:89:
f4:50:b1:29:8d:ac:fa:b5:2d:96:f6:d5:c7:b1:93:
5f:9f:52:01:ec:b0:0f:54:9e:9f:52:95:3b:95:c5:
f4:82:b2:1a:c1:a1:ef:21:c3:3a:b3:14:d9:50:7e:
28:e0:0c:a9:48:05:5e:77:8a:6d:d9:fe:8b:e3:cc:
91:22:0d:c1:cc:a3:e9:c5:5d:b5:76:fd:8d:2e:52:
23:0b:cf:0f:85:be:f8:d9:1f:48:7c:8e:43:f1:c0:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:BC:CE:3F:50:29:89:03:A5:20:59:6E:AA:03:21:BF:C1:A9:BD
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:01:ca:9c:e5:c3:b0:ca:56:c3:2c:65:32:16:6c:de:ef:5b:
86:54:ac:d7:6d:61:dc:ad:78:a3:76:24:52:3f:07:36:12:38:
7c:71:dd:ad:1d:1a:69:0a:cf:26:16:4e:80:72:98:e3:75:79:
90:f9:38:25:36:73:81:4a:fa:96:64:64:20:36:6e:c3:8f:cb:
8e:f9:70:a9:54:1d:67:3b:9e:82:d4:7d:8e:53:d9:e0:f3:a1:
80:e5:60:c5:fb:5d:06:71:2e:df:70:e3:ab:47:82:e0:20:14:
f0:29:50:b8:1b:56:cf:e8:ff:64:f1:04:88:04:da:9a:cc:99:
83:21:0b:8c:f2:b2:2d:cc:a5:d6:ff:eb:f0:70:82:bb:fe:54:
b6:5b:da:ac:11:1f:c5:12:0f:3c:a9:f8:66:d9:07:05:48:56:
ba:b0:49:e0:e4:f3:df:08:74:11:bb:0f:03:49:40:ce:3e:0a:
f6:d3:20:fb:32:45:d7:a2:9a:d2:cb:d1:14:ba:a6:7f:42:80:
10:6b:ad:0f:f0:bf:2b:95:97:3d:15:2c:93:e0:eb:bd:e0:49:
05:3d:59:0b:72:a6:4e:bd:d4:35:c0:c2:60:88:34:2f:27:b2:
86:94:6c:e7:22:05:ca:d0:b2:e0:77:87:46:47:55:97:e5:f5:
1d:9b:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:00:55 2025 by rpki-client