Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: WlQSZZ1EsGGcq2EsP7PaDqiE8c0OproJ5DgIUb3oUsU=
Subject key identifier: E9:50:7D:03:81:77:5D:6E:D1:90:80:74:64:0F:B4:6B:0A:3B:47:26
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019691F13792AA5ED9B8A1DA7443045734D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 17:00:26 +0000
Manifest this update: Fri 02 May 2025 17:00:26 +0000
Manifest next update: Sat 03 May 2025 17:00:26 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: MN1afBHRD0ZkZ1UAWyMuGyakCe0adNIMAWRiFBWjqYY=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:37:92:aa:5e:d9:b8:a1:da:74:43:04:57:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: May 2 17:00:26 2025 GMT
Not After : May 3 17:00:26 2025 GMT
Subject: CN=e9507d0381775d6ed1908074640fb46b0a3b4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:c1:cc:35:ee:1e:72:01:22:47:61:dc:a2:
1f:b2:b3:50:82:50:23:a2:78:da:6a:84:da:18:2a:
a2:20:30:a7:86:70:50:2c:f7:f2:a0:03:e9:ff:a4:
e6:d2:7d:4f:2a:f7:e7:df:f5:9d:77:5a:eb:2e:b3:
88:6b:79:e7:f2:d0:8f:b2:6b:f2:1a:7b:45:f8:9d:
b2:92:33:36:2e:9f:07:5c:e9:14:4c:96:2c:06:14:
88:a4:f5:db:53:6b:0e:77:79:6a:1b:8f:31:81:53:
03:47:35:4c:46:83:24:0b:6c:2e:28:e1:40:d6:c4:
a8:81:b2:f4:4e:a6:8f:71:93:e2:54:af:66:33:1d:
11:5c:38:40:93:1c:c8:d4:1b:2a:d4:96:7b:d9:14:
90:a9:f6:de:67:30:9a:f1:2b:ef:bd:1c:a7:28:e2:
d5:77:51:6c:13:10:a3:30:ee:09:5b:6a:58:67:03:
24:3c:42:f4:47:27:05:b4:eb:48:de:68:73:68:b5:
92:ed:56:81:d1:4f:87:27:9b:98:c2:63:45:df:f7:
9a:83:8b:19:84:60:1b:bd:45:1b:b4:0c:09:dd:d5:
5b:fa:f7:fc:0a:90:2f:69:5c:e6:cc:23:e4:bd:d0:
d1:e9:71:76:a6:71:b2:cd:2a:a2:f5:22:f0:48:27:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:50:7D:03:81:77:5D:6E:D1:90:80:74:64:0F:B4:6B:0A:3B:47:26
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5f:80:85:d9:ed:7e:cd:7e:1e:13:74:72:e8:20:8e:35:24:
91:84:7f:ae:4d:1b:4f:29:21:db:60:7a:52:44:99:e1:5a:86:
a2:65:ed:95:fb:8c:bf:f8:c1:5e:6a:63:e8:f9:b8:4f:a9:30:
b6:2c:f6:ab:6f:39:27:6a:61:ff:7a:a0:d9:9d:f0:61:55:8b:
36:1a:2e:c7:05:89:3c:04:53:65:7e:8a:98:4f:40:f5:03:00:
a5:58:ac:21:d3:82:8d:61:e3:15:2a:8e:a2:f5:0e:75:0b:11:
27:18:31:99:94:dd:27:cc:a7:9b:69:f0:39:59:2f:f4:e5:93:
42:b8:e5:1c:c3:eb:12:24:d8:38:a6:98:3c:78:7e:ba:b4:1a:
f0:69:ef:0d:c2:d2:e2:97:79:56:8f:3f:5d:9b:a1:95:21:96:
8a:77:9d:96:b3:67:23:0e:67:cf:d2:2a:30:25:0b:6e:40:af:
23:b9:97:47:f3:98:01:6a:bf:1f:49:7f:a3:d0:4f:2e:50:85:
f8:a4:fe:81:a7:cb:0f:7d:9b:9e:55:3d:b3:b1:b5:f1:8f:b7:
4a:1a:92:4d:43:a0:24:61:de:b7:d2:40:ea:2a:b6:4b:d1:07:
98:9c:5b:58:e9:b7:07:3a:41:4b:2b:44:1b:74:3e:43:91:79:
80:1b:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:24:42 2025 by rpki-client