Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: cMQbohCCyWWtcV/rErVaIWLSzCO9egMovqs3xNI5SbY=
Subject key identifier: 2D:0C:95:E8:A6:52:F4:6B:84:3E:77:52:E3:A5:38:DD:29:04:8C:63
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 0196CB72BF15C6076A62DD032465E126C17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 0FCB
Signing time: Tue 13 May 2025 21:00:16 +0000
Manifest this update: Tue 13 May 2025 21:00:16 +0000
Manifest next update: Wed 14 May 2025 21:00:16 +0000
Files and hashes: 1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: 56iC1xFtBU1hd4rI2A4Dndra+R+sxXT1RqX3gO56Xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:bf:15:c6:07:6a:62:dd:03:24:65:e1:26:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: May 13 21:00:16 2025 GMT
Not After : May 14 21:00:16 2025 GMT
Subject: CN=2d0c95e8a652f46b843e7752e3a538dd29048c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:ce:91:e2:69:80:6d:ce:e1:43:d3:5e:3e:
e7:90:ff:d0:ec:28:e7:fc:52:b8:25:d6:b1:cf:01:
69:60:28:78:41:af:0a:74:b4:ef:f6:3c:87:14:8b:
6a:e6:98:83:c3:76:37:e1:71:29:36:b0:2e:4d:d6:
a4:3c:16:ae:9e:a4:e8:eb:95:62:6f:b2:3b:67:e7:
cd:b2:8a:a8:bd:94:df:8c:aa:91:aa:f4:02:76:50:
ec:5c:00:12:09:c7:e1:71:3b:bb:fd:20:b0:cd:8b:
78:33:71:3d:b0:9b:33:64:f1:e1:cd:3e:f9:9f:8d:
36:d2:98:ab:4a:bc:bb:28:42:81:c4:45:ce:0e:ea:
9e:74:08:51:0e:5e:fd:d6:91:14:38:2c:fb:76:18:
aa:ed:68:0d:00:fe:6b:d5:84:6f:56:fb:80:de:87:
c3:7d:9a:27:47:42:22:f0:88:d1:77:f1:23:db:05:
34:88:14:9b:f7:d8:55:43:35:d6:0c:63:00:75:e5:
35:3c:f5:5a:53:4b:88:64:36:51:04:d0:4e:aa:69:
63:e8:b0:62:2e:31:10:73:07:94:d9:0b:99:bb:11:
0b:0b:c0:aa:51:4e:69:fb:83:47:8b:1e:c2:d7:a4:
79:8a:04:b7:07:d0:b6:36:ba:69:10:fd:f5:57:a3:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:95:E8:A6:52:F4:6B:84:3E:77:52:E3:A5:38:DD:29:04:8C:63
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:bf:18:5c:46:0a:ee:93:b4:12:c1:cc:61:48:86:ea:25:
18:26:ad:2a:5a:9e:58:77:ec:45:7a:0e:d9:d3:bc:90:7a:03:
07:20:3a:a1:96:a4:fa:f5:52:01:e9:3c:45:b8:9a:ea:b1:4a:
25:b0:cc:45:49:9b:0f:70:b1:27:dd:d0:2c:99:1f:6e:96:2e:
f6:04:ff:75:d1:02:94:69:8b:71:94:58:b1:57:61:a1:10:1e:
5a:1f:f0:47:2c:ba:97:9d:3d:5e:9d:72:75:9f:d4:b5:c2:f6:
97:ad:82:6f:f5:15:92:f4:d1:f0:0e:b6:20:a8:3e:7d:de:52:
ce:cc:34:1a:b6:2d:6c:05:2b:e7:fe:4a:be:0e:44:57:7a:f6:
97:ca:24:40:04:27:3a:38:d7:85:ca:7f:fa:fc:0f:bc:81:98:
88:fd:ff:ca:88:cf:f3:c3:e4:76:67:d1:32:08:89:66:19:f2:
f5:83:c3:db:c3:37:8c:bb:2b:65:c7:58:d2:fb:5b:e3:5c:32:
79:0c:36:e2:c0:c1:5a:f7:c8:3d:b2:14:9b:ea:75:c7:c4:b6:
52:cb:43:b9:b7:9e:68:f4:dd:2f:19:fa:ae:16:35:cc:57:73:
13:49:7e:8d:0c:33:95:06:58:46:a8:c1:df:70:d1:1f:46:25:
05:ee:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:07:58 2025 by rpki-client