Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: ZzhbNBIRNmK4xBBTkMEn/WbbqSX6s1Jtk5jjCOCq83E=
Subject key identifier: 10:3D:5F:FC:FE:10:36:C7:9F:CA:E0:18:20:A4:BF:E2:73:C7:3B:03
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 01969E2C67742E3823EFC6BA2198EB1D592C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 046F
Signing time: Mon 05 May 2025 02:00:32 +0000
Manifest this update: Mon 05 May 2025 02:00:32 +0000
Manifest next update: Tue 06 May 2025 02:00:32 +0000
Files and hashes: 1: CZfj574ArDtJlgW2YQicypkXsXg.roa (hash: N05YSWHFpJvI1wd5d/zN3+j2iXKRF4AnTjnzlab5tTQ=)
2: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
3: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: PiRYkbPDZEz9qk08oCiz4NpYZUd87fsZ/j56T39R+xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:67:74:2e:38:23:ef:c6:ba:21:98:eb:1d:59:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: May 5 02:00:32 2025 GMT
Not After : May 6 02:00:32 2025 GMT
Subject: CN=103d5ffcfe1036c79fcae01820a4bfe273c73b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:4a:87:e4:c8:aa:e1:1e:97:87:bd:09:fe:
3d:6b:8d:96:4e:3d:3c:f5:b3:d0:ba:b2:71:79:b2:
78:6c:64:80:74:42:d2:00:e0:3a:e5:32:ff:5f:da:
38:c7:0b:c8:cd:0f:c1:65:6e:92:5a:10:63:20:a6:
c3:9f:97:eb:0e:15:be:9b:65:fe:36:d5:db:35:be:
d7:da:42:5d:5f:89:ed:4a:0e:1d:57:7b:51:fb:46:
40:3b:eb:c7:51:57:d4:ea:65:28:d6:d2:f4:1c:46:
e8:50:96:bd:c3:ae:d1:a9:03:d8:b2:de:ea:36:d1:
03:1a:af:4f:39:76:63:e3:7d:aa:6e:b0:a5:e4:5f:
84:06:28:b6:02:fd:55:5a:bf:d3:a5:5f:fc:fa:d9:
7f:43:de:8e:78:2d:42:1f:d6:08:4f:87:ed:b5:e3:
23:c9:2b:55:99:b9:af:35:51:6d:4e:27:89:85:7f:
41:de:62:15:74:53:d0:b1:5d:fa:17:c4:89:3b:50:
d4:7c:0b:f4:91:97:2d:6d:ea:8b:94:ff:ed:76:86:
b9:f7:8f:fb:d7:c0:86:3c:6f:64:40:50:d7:75:4a:
8a:05:b8:f9:77:c8:0d:df:d4:81:98:1e:3d:3a:7c:
49:bb:32:05:72:84:19:a0:b7:7c:d7:51:20:e6:e2:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:5F:FC:FE:10:36:C7:9F:CA:E0:18:20:A4:BF:E2:73:C7:3B:03
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:76:50:5b:ee:bc:c6:84:a7:37:6d:3f:49:ff:e5:76:83:
18:4b:b0:4d:e2:3c:4b:e2:26:f0:1d:59:3d:fa:f8:3a:ff:d0:
02:51:1e:e3:9d:c6:e3:6e:ee:c0:55:c1:87:84:af:ff:2f:b7:
a2:f1:6b:89:70:0c:57:e2:d5:45:cc:da:12:a7:db:50:15:33:
58:1d:4e:2c:24:6b:88:38:7f:0a:5d:2d:5a:ec:37:74:4c:bf:
00:cd:bd:bb:9c:a4:09:0c:d4:48:a0:e4:a1:dd:aa:ae:a6:d0:
4b:b8:94:c4:58:b4:9d:cf:34:f4:bc:91:f2:99:4d:48:1c:16:
21:0a:24:6f:84:2c:3b:de:79:75:60:ad:82:89:ea:2d:7e:2e:
c0:51:c2:34:8a:65:fa:7f:18:ce:fb:19:d5:01:77:7c:23:96:
36:63:a4:b5:10:5f:fa:2f:bd:ab:bc:bc:03:48:3e:d8:81:34:
07:0f:d4:50:31:54:a9:6a:5a:34:7c:be:df:d6:fc:b6:8f:f6:
af:4d:52:b9:2f:9d:af:f9:39:53:f0:33:62:96:2b:b7:f2:24:
26:82:c7:a4:b3:ac:1c:8e:ef:af:ad:75:2b:0a:30:76:56:06:
db:d7:fa:dc:6b:9a:f1:ad:46:7f:88:ee:4b:64:c8:d2:ac:e5:
77:2d:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:25:54 2025 by rpki-client