Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File: YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier: wpGN/8eszVtZ/AtBRFcxhWaNkHVB0cLuyXwzsYFpNdc=
Subject key identifier: 74:89:A8:52:65:0F:42:B3:AF:21:19:C3:15:C2:84:4C:79:75:9E:B0
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 0196CCF3AECFE480DF960162EC1F43013068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number: 1541
Signing time: Wed 14 May 2025 04:00:44 +0000
Manifest this update: Wed 14 May 2025 04:00:44 +0000
Manifest next update: Thu 15 May 2025 04:00:44 +0000
Files and hashes: 1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: CcSpIFy9b4YQE1aplRC+fB7xVKJX1eF/PcHf9Eue5j4=)
3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:ae:cf:e4:80:df:96:01:62:ec:1f:43:01:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: May 14 04:00:44 2025 GMT
Not After : May 15 04:00:44 2025 GMT
Subject: CN=7489a852650f42b3af2119c315c2844c79759eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:bb:f6:58:56:0f:b5:73:af:d0:b0:93:b1:
62:53:29:2c:56:dd:08:01:2d:82:f2:ce:0b:53:39:
e9:e9:b4:15:03:f7:4e:35:2b:19:7f:45:77:2f:1d:
75:3d:5f:92:e2:60:10:3b:2c:01:11:5b:98:c0:5c:
a5:8e:a2:84:1d:c4:1f:c1:27:21:7d:4d:eb:30:4f:
36:42:6d:ae:2a:0a:4f:d1:75:65:74:3e:3a:94:b4:
4b:f4:fe:25:11:00:ba:ad:8b:58:ff:ad:f0:ca:78:
56:73:a5:99:a2:63:c8:39:a8:b1:ab:4e:ae:d4:42:
2c:be:36:40:a5:03:4e:86:64:07:52:3a:aa:2d:9c:
fc:f9:7c:47:0c:f1:f4:89:93:88:ff:b2:b2:74:5f:
f6:65:d0:01:5e:5c:d7:ae:38:f4:2e:d4:40:6c:d5:
d4:ea:77:03:10:1d:2e:7f:36:c3:f0:38:42:0c:ee:
db:44:d5:63:c5:eb:f1:5c:e7:f7:09:a7:18:54:a2:
5f:37:f6:a0:a1:e4:75:10:78:14:29:99:34:a0:e2:
56:8e:b8:37:e2:4c:8f:b7:c9:cf:5a:3f:b1:a0:14:
d6:80:77:8d:6a:4e:e2:6e:14:1b:05:76:80:da:f6:
c3:89:7c:40:f9:66:d0:8a:58:00:fa:a2:a7:74:8b:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:A8:52:65:0F:42:B3:AF:21:19:C3:15:C2:84:4C:79:75:9E:B0
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:67:a6:a2:c7:b6:43:6b:c5:a3:8e:1f:b7:b8:7e:74:8e:
6d:53:fb:f6:d7:62:c7:e0:bb:c6:84:1e:a6:d8:25:66:00:54:
d3:e0:78:17:4d:ce:79:01:35:98:51:b1:17:9b:fe:de:48:60:
d2:5a:f0:81:8a:3d:37:cc:fc:f8:8c:ec:15:80:4a:44:79:16:
67:5c:5d:37:ce:12:ac:74:ed:47:08:39:fe:87:ae:6b:43:17:
93:8d:7e:fb:f2:8d:9f:97:6b:53:7e:b7:68:17:48:80:a8:81:
0f:87:13:91:b0:77:54:11:9b:19:1a:21:13:24:52:6e:72:f8:
91:e0:89:f0:c9:54:18:b0:05:59:b4:ee:82:ac:dd:21:00:c4:
d9:69:c0:4a:fd:18:61:18:eb:30:72:81:2e:8d:c4:36:4e:e6:
49:d4:b9:ee:de:09:f0:72:92:3c:11:e3:73:4c:51:b2:95:e5:
d5:54:91:f5:00:10:e6:45:d2:a9:c5:68:06:a5:cc:0a:d5:cc:
00:b3:d8:fc:d0:92:57:af:c9:4d:3a:c4:e3:c0:15:08:4a:e9:
d6:9c:df:a3:95:bd:cd:f0:ac:f0:32:88:64:fd:d0:7a:1e:2d:
27:84:d8:8b:9b:71:c2:a3:c7:a6:fd:68:93:bd:9d:68:a6:4f:
d7:ee:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:14:52 2025 by rpki-client