Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: Ye6oxmbvh8HOj5mowV6vgZrzd2ehIiRE9PZRGmhDQwY=
Subject key identifier: 7F:15:0F:ED:8B:50:09:8D:71:0A:1F:05:9D:7E:A7:79:F5:41:AD:27
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 019678685D87FE293E6852534E236BF7ECD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 18:00:27 +0000
Manifest this update: Sun 27 Apr 2025 18:00:27 +0000
Manifest next update: Mon 28 Apr 2025 18:00:27 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: WfoML3xq29dqK/wNnxSxdc8614sH4nrl6SKX8x2s6G4=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:5d:87:fe:29:3e:68:52:53:4e:23:6b:f7:ec:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Apr 27 18:00:27 2025 GMT
Not After : Apr 28 18:00:27 2025 GMT
Subject: CN=7f150fed8b50098d710a1f059d7ea779f541ad27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:7e:0c:07:bf:20:0d:c9:96:83:ff:2e:94:
22:28:fd:5c:74:a4:a5:19:d3:61:46:9d:3f:90:88:
1c:16:09:fd:2e:24:62:c3:06:7d:0d:3d:ec:1c:f3:
4f:63:d1:6d:0d:c5:20:2f:a9:cc:25:b2:15:bf:b5:
5e:6c:88:36:fa:53:fa:d1:ff:20:c0:1c:dc:31:07:
66:b0:be:69:14:bf:c2:62:6c:ee:4a:90:60:24:49:
9f:95:df:e6:25:4e:4a:5c:9d:93:24:55:15:01:8a:
02:f0:17:f9:9b:95:34:87:a2:11:c4:a5:eb:b2:9b:
31:08:8a:f4:9d:e7:19:d9:b6:01:b8:5c:cb:09:58:
d7:60:a0:e8:6d:ea:41:4b:c2:c6:7f:5b:6e:53:50:
0e:d8:9c:c4:d5:5e:46:7c:ff:6f:7d:c3:aa:35:63:
11:21:e0:7c:01:f2:f8:22:76:b3:d1:c2:eb:8b:90:
8e:b3:15:fc:27:0b:d8:69:39:13:e3:09:c3:3c:30:
64:7f:68:61:5c:27:37:8e:b7:29:85:ee:c0:46:aa:
bc:2a:09:97:c3:ed:36:ff:85:68:47:9a:f2:19:0a:
ea:10:f8:22:66:b2:84:86:c1:88:7e:36:4d:d5:c4:
e9:52:ae:f9:70:36:3b:25:a7:81:54:1e:15:59:cf:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:0F:ED:8B:50:09:8D:71:0A:1F:05:9D:7E:A7:79:F5:41:AD:27
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:ed:e0:e7:5e:1d:74:57:f9:85:31:0e:5e:07:65:7c:36:
2e:26:96:f8:a4:5e:90:48:58:b0:94:26:93:61:46:1a:a6:90:
17:62:25:05:ec:7e:46:2f:b2:4d:98:97:6c:93:cd:83:c0:8b:
2b:6e:1f:b1:cc:61:22:40:e6:e5:e9:13:af:72:87:99:ef:cc:
61:73:b0:a1:e2:b6:8b:71:d7:73:e5:7e:4d:8d:bf:dd:fb:8b:
9c:f8:27:6f:86:bc:2f:c6:de:54:c2:09:49:31:7e:35:c5:e4:
c7:9f:e0:0f:da:56:f8:8f:8a:c2:4e:2c:1c:d5:f6:fa:5d:f0:
0c:80:6f:94:68:71:fc:0e:83:e6:68:61:4f:65:09:6c:31:c5:
18:67:cc:85:db:4e:21:e1:d6:b1:83:5a:20:5a:ed:ca:00:c2:
b2:f8:06:b6:f1:6e:a1:36:a4:40:7a:b7:e1:d7:0e:d7:ed:3f:
b3:09:a6:8e:eb:1c:a0:18:d9:3f:be:e3:bd:e6:ac:a8:9c:44:
3a:cd:99:f7:93:83:32:1f:49:9a:dd:44:de:6e:21:04:93:b2:
65:35:64:40:a1:7e:1f:96:ff:f0:d0:55:85:6e:42:da:74:7a:
30:24:20:16:19:ad:fd:d0:1b:47:4b:0c:5d:a2:21:c1:d6:81:
18:8d:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:57 2025 by rpki-client