Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: hHQFacksWOcd/VJtvkdEl3MYO9vFsaqsxiWH76wohSg=
Subject key identifier: D3:70:BD:6B:02:4E:2B:51:BC:42:BF:4A:E2:1A:72:3D:94:B9:27:4F
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 0196A954D751D2534B0EB17106E03256C21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 048B
Signing time: Wed 07 May 2025 06:00:31 +0000
Manifest this update: Wed 07 May 2025 06:00:31 +0000
Manifest next update: Thu 08 May 2025 06:00:31 +0000
Files and hashes: 1: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: FPJhP5VetZQsO9ZYm+GGL8ZXdWGz4GE5/HQz1FBq1Rs=)
2: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:d7:51:d2:53:4b:0e:b1:71:06:e0:32:56:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: May 7 06:00:31 2025 GMT
Not After : May 8 06:00:31 2025 GMT
Subject: CN=d370bd6b024e2b51bc42bf4ae21a723d94b9274f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:a3:5a:60:fe:c2:b2:b5:f3:a7:68:b6:70:
ef:3d:c8:d3:7e:9a:b9:1f:89:60:12:83:28:4c:a3:
83:e1:46:49:fd:ef:e1:a0:83:3e:98:82:b7:b0:1f:
52:9f:7e:6d:eb:16:17:a3:d3:c0:39:54:b1:2c:79:
83:de:bd:64:5b:9a:1d:9c:9c:c1:05:c4:5c:8d:7c:
c1:ee:d6:14:66:4f:0d:cd:1f:3d:cc:99:2f:3d:42:
96:db:3e:61:02:01:2a:1c:c9:08:bc:44:b2:af:31:
8b:ff:d7:0e:f6:77:b5:16:dc:7e:59:9d:e6:8b:4e:
06:39:db:e6:3f:7f:26:81:42:09:4f:8d:9e:63:d7:
cf:60:81:2a:ed:2b:e5:62:49:8d:aa:02:08:e6:9f:
d8:b3:ae:90:e3:85:f6:ac:86:2c:9e:94:a6:0a:b6:
22:92:a7:71:04:0b:89:bc:41:fe:73:0e:ec:1a:cf:
6e:ca:97:15:05:65:21:27:19:25:b7:c3:2b:f3:fc:
b2:06:48:37:80:33:bc:32:bb:b2:44:40:90:9a:ac:
ea:45:2c:8b:ce:f1:76:c0:f5:6f:4b:55:e0:e1:c9:
1a:57:5a:65:68:3e:13:4f:51:b8:89:74:d7:97:ab:
17:4d:28:07:1c:6c:4c:ff:c1:22:70:7c:d4:2c:6d:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:BD:6B:02:4E:2B:51:BC:42:BF:4A:E2:1A:72:3D:94:B9:27:4F
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3d:6a:8d:19:c1:8d:e7:f3:6a:c8:b3:62:09:19:5c:39:1b:
3a:8f:5e:20:09:f8:f7:67:7a:c5:53:a8:0c:e4:0d:e3:79:50:
25:8a:08:54:9a:ee:24:85:7d:cb:7b:a7:5d:d8:92:59:47:78:
d3:49:cd:1e:02:d9:bf:2e:8d:38:9e:85:21:5a:f1:09:39:c0:
0f:a3:3b:c2:8d:e9:90:af:9e:3f:95:85:50:bc:6a:9b:a1:bb:
7b:b1:c1:e1:2a:67:ee:2b:7c:ff:8c:eb:4d:67:ee:84:a3:d3:
ed:f4:cf:19:fd:05:2e:ee:35:b4:9d:7d:9d:49:45:a8:c5:fe:
b6:36:71:73:c8:cb:b6:52:07:9f:22:09:ce:fc:19:c2:dc:c4:
88:90:ab:df:8d:7e:b4:6c:b5:23:3b:5e:51:82:bf:1c:9c:ab:
9d:9f:1d:27:f5:be:7c:47:56:54:ae:ad:7a:89:2e:4b:20:22:
0e:7b:ba:03:b1:12:03:58:bc:89:87:e3:eb:55:d1:82:d2:b7:
ce:c6:8d:ef:20:74:df:ff:c0:b4:1e:27:38:7f:36:23:f3:b3:
5f:e3:4f:7f:1c:08:46:fa:37:9f:97:93:08:fd:09:1c:a8:b3:
62:60:4c:cb:38:d3:2d:fa:d5:4d:c0:d4:55:7e:ba:70:f5:f1:
ed:ed:ea:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:30:48 2025 by rpki-client