Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: fHyKsj4867+N2ILh1viqFbwCWTXer0pk80oDNUP0u5s=
Subject key identifier: C9:70:44:53:52:9F:F5:26:7A:75:1E:75:30:10:D4:E9:DE:44:6B:7B
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 0196760BF5393804FDE68B9672A5CA2962A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:00:17 +0000
Manifest this update: Sun 27 Apr 2025 07:00:17 +0000
Manifest next update: Mon 28 Apr 2025 07:00:17 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: cfIO491/Yuzwo2gWyUlFtk2SoZVmHzdaDfK3pqY64O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f5:39:38:04:fd:e6:8b:96:72:a5:ca:29:62:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Apr 27 07:00:17 2025 GMT
Not After : Apr 28 07:00:17 2025 GMT
Subject: CN=c9704453529ff5267a751e753010d4e9de446b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:6f:08:c8:48:e0:8b:5a:7d:da:95:0f:bf:
11:52:ee:9c:84:7e:95:f1:cc:e3:f9:ad:f4:4f:4f:
3e:ba:f0:13:4c:54:20:f4:37:42:f3:74:49:ea:2c:
95:40:9c:bd:93:60:d4:b2:a5:93:91:43:0a:88:85:
2a:83:e4:0e:83:76:a5:77:70:ce:c9:35:af:ca:7f:
d3:e3:81:24:54:49:59:fd:3d:ec:64:b1:d4:fc:0d:
5a:5f:e5:28:ff:a0:33:43:7a:f3:54:d8:04:a4:9f:
c5:6d:78:2f:88:c7:65:0f:ed:56:5c:ae:f0:13:74:
ec:84:2b:e0:a7:83:2f:ae:7b:9a:cd:31:f5:0e:95:
8c:f7:40:f0:18:54:be:26:af:46:ce:20:57:ef:fb:
d5:1f:0d:2a:fc:5e:b3:3b:1d:42:9d:9a:4e:16:28:
a1:d1:4d:85:dc:67:0e:1b:9c:67:3b:12:9e:2f:54:
12:a5:60:72:9a:74:b1:59:a3:2b:3d:4d:b3:98:92:
98:8b:22:a0:56:f5:ad:0d:6b:a9:64:bd:4a:9c:e3:
8d:f4:ef:c6:61:de:91:0a:54:60:e6:7c:91:e7:61:
24:f7:1e:ba:56:38:46:78:25:9c:0d:dc:a4:98:3d:
f1:70:e8:8f:ff:ff:c3:46:f5:8c:25:09:bf:41:a2:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:44:53:52:9F:F5:26:7A:75:1E:75:30:10:D4:E9:DE:44:6B:7B
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:31:a9:ea:01:a3:b3:1f:ca:f8:92:10:bf:79:26:bd:73:a1:
68:53:6c:d8:ff:d5:ec:34:51:05:31:f7:5f:e6:46:60:61:1e:
ad:45:72:01:3a:ee:c0:ae:8f:9d:51:b9:7a:9e:9a:8d:e2:b9:
22:f2:c6:e7:50:4f:25:f5:36:3e:96:03:88:c2:f8:d4:41:9c:
99:90:27:2b:ce:22:ab:7a:27:fb:18:62:2f:b0:14:ed:19:33:
a5:3d:6d:e8:df:2a:b7:79:7f:24:55:42:22:98:c3:3f:85:91:
cd:bc:01:1d:1a:ca:a1:ce:1e:86:c8:75:14:e6:d2:15:fd:46:
ca:b4:c3:b5:91:51:28:5f:a5:b7:6e:a0:de:01:de:1f:1f:66:
a7:ce:6c:29:1a:bc:a7:78:b3:6d:b9:5c:b7:17:c1:01:74:e1:
36:c2:ae:27:86:84:c7:b6:ba:57:f3:a1:63:85:92:68:8b:fa:
5f:8b:02:87:50:26:10:7c:ac:9b:cf:c8:7a:39:5e:5d:39:d4:
6d:9f:5f:29:0a:7a:91:88:6c:f9:5d:97:a5:f5:be:77:9e:79:
93:eb:38:b4:80:77:b7:de:6d:35:64:97:54:46:ea:e3:c1:fd:
b2:c2:9c:78:ab:66:36:76:5a:fe:cd:78:5f:fe:6a:06:ff:3d:
ae:a7:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:50 2025 by rpki-client