Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: d3LuyYqsN5V54fUppt5T2zfzAwHqnoD+bXQsmS8RnpM=
Subject key identifier: 59:BF:7E:37:68:81:3A:F5:4B:F0:34:4F:49:32:42:63:A8:07:81:F7
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0196BCA4C8789C0A10618F91E30A1B8EEAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 125B
Signing time: Sun 11 May 2025 00:00:37 +0000
Manifest this update: Sun 11 May 2025 00:00:37 +0000
Manifest next update: Mon 12 May 2025 00:00:37 +0000
Files and hashes: 1: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: crOMKCAskxk4aj9VUqGssyye+S1SfrilQj8RURysJWw=)
2: faR7v_a9Va3-r60WSU_WaTJtc24.roa (hash: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=)
3: wZytHkz1eTrO_daNgd0l88TpMno.roa (hash: aO2EKOjOiT6GiecSdUo1ipV7w9UfmDYsqeI6Hxz5eZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:c8:78:9c:0a:10:61:8f:91:e3:0a:1b:8e:ea:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: May 11 00:00:37 2025 GMT
Not After : May 12 00:00:37 2025 GMT
Subject: CN=59bf7e3768813af54bf0344f49324263a80781f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:11:ae:f6:00:24:23:4d:64:ab:15:6e:82:
51:aa:23:e5:06:3f:7f:a2:cc:e8:ca:4f:a3:fc:ee:
80:ae:60:eb:88:be:b7:33:b8:a6:9e:2e:91:d0:6b:
47:b3:07:f5:9e:91:24:60:83:18:32:2b:bd:fd:a5:
ef:35:be:4d:81:6c:3c:c9:de:86:4a:7c:89:61:5a:
47:06:fa:5c:de:74:a6:5a:ff:4b:f4:8f:3a:40:80:
40:13:94:84:03:f1:db:80:86:5b:0f:c4:92:56:2f:
51:11:22:d8:23:41:ae:6e:f0:df:5f:03:4c:5c:81:
df:f5:53:95:95:cf:9a:03:34:73:46:f4:5e:aa:e0:
5c:1d:32:18:28:38:64:92:28:8c:10:5a:ce:93:cc:
52:64:c5:e2:5e:bd:9f:ca:00:8a:f7:2b:39:31:60:
ea:c8:2d:a5:49:6a:24:73:d3:d7:1b:c9:2e:52:d5:
70:de:65:a4:4b:60:d2:be:ab:0d:1f:49:ce:7c:81:
99:ce:58:b3:82:bd:35:47:7e:d5:cb:a7:be:72:82:
8d:81:db:ea:a9:31:0b:7a:e8:2b:2a:7f:14:b3:3c:
b9:4b:40:70:50:9c:0b:9e:ed:fd:b3:cb:80:11:1c:
6e:85:75:79:e9:11:49:bc:2b:fb:4b:a7:93:84:ef:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:7E:37:68:81:3A:F5:4B:F0:34:4F:49:32:42:63:A8:07:81:F7
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:00:82:a7:61:27:3f:bd:4c:28:0f:5d:c3:4c:c2:df:58:
2a:18:f3:3b:77:e5:19:f7:0e:31:91:fd:91:81:54:c8:2a:f3:
f2:80:30:94:e9:2c:e4:38:2a:ef:07:70:c3:c9:e7:1f:74:2c:
d5:11:67:d5:e6:af:67:bc:b9:b3:55:93:44:34:fe:b5:6c:1d:
4c:24:2e:36:77:71:9c:60:8f:20:fd:e1:c2:b4:82:8d:c6:a9:
a1:da:0e:86:ed:50:a5:96:ef:31:c2:16:94:80:1d:ec:9c:74:
c8:53:df:94:ed:94:b4:ae:40:89:d9:b6:a0:f7:57:57:a1:41:
48:1e:75:2f:a5:2b:36:94:30:f8:4a:3f:73:75:f6:e5:f0:f3:
e6:a8:1b:2d:4e:ef:43:11:83:38:0e:8f:c8:3e:4d:76:75:8f:
17:61:f5:f1:e8:40:37:10:40:cf:02:7f:a6:b5:35:ea:31:8b:
6d:5c:cf:b3:1e:c4:e5:e7:ff:f8:22:aa:f7:d0:9b:9d:48:bd:
95:0a:d6:08:d7:ec:d5:5b:5a:1a:fe:ae:49:06:bb:65:dc:22:
39:d2:2f:86:c8:d4:af:83:ae:30:b3:49:b3:2e:e7:43:92:37:
44:49:c4:55:c0:0c:1e:6c:36:56:57:2a:69:4e:8f:29:9a:ff:
af:d2:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:28 2025 by rpki-client