Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: 5IPl9UCsBAf/X4GoaY3mRSXJhiW1aY25VCUZp+I4W0M=
Subject key identifier: B0:12:67:9C:91:F3:65:96:AB:DC:84:94:60:D6:75:BB:C9:B2:E1:7A
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 0196B8C7A33C3BBE669E2D11D63CD7953961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 11E8
Signing time: Sat 10 May 2025 06:00:13 +0000
Manifest this update: Sat 10 May 2025 06:00:13 +0000
Manifest next update: Sun 11 May 2025 06:00:13 +0000
Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=)
2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: 9W7BubaS6POiJedkkOePrB4Uh2yygezpAZEH1+K/IA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:a3:3c:3b:be:66:9e:2d:11:d6:3c:d7:95:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: May 10 06:00:13 2025 GMT
Not After : May 11 06:00:13 2025 GMT
Subject: CN=b012679c91f36596abdc849460d675bbc9b2e17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:7e:3f:79:dc:b0:c6:3f:27:a6:4d:ca:13:
51:8b:60:56:f3:b3:1c:ad:45:42:c9:c4:22:60:74:
7e:2e:49:11:92:3f:e9:4e:c4:c2:b4:8d:41:66:ac:
00:e7:88:db:35:80:e9:06:cc:0d:dd:7c:f2:08:c9:
81:8c:04:68:ce:a2:c4:d8:76:5d:dd:e1:46:f2:06:
57:fc:64:e0:96:70:6c:4e:92:86:9c:95:66:fc:d8:
83:b0:81:df:37:fe:9e:f4:62:42:84:79:22:58:e5:
d8:c0:c6:c2:25:12:e9:62:ed:b8:97:8e:10:6d:84:
62:35:16:f2:16:0c:85:7f:88:6d:f5:92:0d:1c:c1:
17:6b:8d:5a:52:02:5e:f5:19:5c:d6:df:d7:8e:93:
6c:bc:b0:a0:0c:ec:be:91:aa:81:df:c4:a6:aa:06:
4d:17:06:41:83:c4:09:3f:aa:2c:4c:41:f9:bb:2d:
d1:57:d3:b9:32:32:c7:3d:44:4b:c9:1f:78:1c:2d:
9c:de:fe:4a:e7:9a:84:2e:74:8b:d9:7b:6d:36:15:
20:af:75:a9:86:77:a3:9b:7a:5a:0c:8a:5f:c8:f6:
c7:51:1e:57:93:a0:ff:27:30:4a:7f:88:7f:42:3b:
f0:29:25:38:96:f2:bc:22:0f:90:ab:fd:8a:02:4f:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:67:9C:91:F3:65:96:AB:DC:84:94:60:D6:75:BB:C9:B2:E1:7A
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8a:81:dc:6e:31:25:2c:b5:f0:85:99:57:d8:69:a0:55:8a:
7c:b0:af:25:98:c1:33:e6:47:b4:e4:71:28:db:14:34:ac:e4:
21:72:87:54:ea:62:c1:42:23:03:d8:74:b0:ab:3d:b8:20:29:
9c:3b:57:c7:37:c0:d7:8d:77:a5:16:8c:cf:23:1b:80:9f:67:
8a:32:a4:28:5c:b8:46:1b:7d:ff:4c:67:b3:05:6d:ff:03:bb:
65:77:56:fc:ea:b1:e8:07:2b:20:a7:ad:e3:67:64:34:43:c9:
13:91:1d:e7:ef:17:2a:ac:16:64:b8:54:9d:64:e8:ee:25:9d:
9c:10:89:4d:b4:3e:30:7d:a5:3f:43:a2:74:bf:f2:90:fb:5c:
0e:94:6c:03:66:d8:1e:cc:5d:52:68:a8:36:90:67:18:9b:71:
5c:54:3d:4e:50:63:44:5e:59:93:a1:ee:36:39:65:de:bd:eb:
7e:41:9d:de:f1:24:bc:f4:cf:d5:ab:a5:03:ba:3b:6b:e6:e1:
0b:0d:8d:80:18:fe:b5:13:36:c3:09:80:6d:4c:b6:ce:49:cb:
4d:71:bf:78:2d:db:3c:bb:d1:7e:5b:5a:d8:17:17:37:93:1d:
4a:4c:f1:a2:67:66:2f:ae:bd:11:21:be:18:d5:2a:7a:4b:0c:
1c:c6:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:49 2025 by rpki-client