
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: Gwd7aqOI9CUU9hi/SA5D5C1kVlZD76kcljBhuDehFN8=
Subject key identifier: CC:80:CF:20:7A:D5:0F:8B:98:92:77:FE:BA:56:6C:01:A9:55:06:93
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0196753049B2180F735EAD8AE0CFAA7D7FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 03:00:20 +0000
Manifest this update: Sun 27 Apr 2025 03:00:20 +0000
Manifest next update: Mon 28 Apr 2025 03:00:20 +0000
Files and hashes: 1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: LAL+gF+ojsThKTwTv0ZfMqJQcQs4uPZ16zOFiN2NM0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:49:b2:18:0f:73:5e:ad:8a:e0:cf:aa:7d:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Apr 27 03:00:20 2025 GMT
Not After : Apr 28 03:00:20 2025 GMT
Subject: CN=cc80cf207ad50f8b989277feba566c01a9550693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:dd:47:50:04:47:d8:de:4f:c8:86:83:db:
03:c1:f5:f3:31:e7:b1:02:d9:b8:44:12:73:b7:19:
20:c7:5b:da:17:af:b7:5e:ad:fe:a6:1d:17:62:2e:
4d:43:f3:6f:04:f1:05:3a:30:57:a4:c4:54:6c:3b:
c0:fd:48:5a:de:91:47:e0:6d:96:d8:68:96:ea:50:
d6:9b:e2:b3:88:57:67:54:9c:68:8f:78:52:39:0f:
1c:cc:47:3d:e6:5f:c6:67:32:fb:55:a6:e5:80:76:
4a:94:bb:32:0c:55:f8:51:1b:76:c8:e6:50:1d:e0:
2e:13:4a:15:56:ce:43:41:9f:0a:34:9e:66:46:79:
26:dc:cc:97:71:de:ee:9b:c5:df:cc:3c:47:84:0c:
0c:f3:eb:9b:94:90:11:87:5c:ca:9b:3f:b1:16:df:
d8:63:aa:76:57:bd:6f:09:fa:28:12:49:6a:fc:62:
66:0c:da:36:e7:92:43:76:5c:15:b6:ad:ce:62:78:
73:bb:a2:0f:39:2e:66:eb:ec:c6:7c:12:de:bd:6c:
fc:c0:d0:af:67:bb:dd:bb:bf:c5:97:87:8c:ca:5f:
41:d8:8d:f6:da:41:56:49:d2:cf:d3:94:51:5c:90:
db:27:14:3a:e8:c9:f7:9d:0a:7d:16:4b:2d:50:67:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:CF:20:7A:D5:0F:8B:98:92:77:FE:BA:56:6C:01:A9:55:06:93
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:db:11:ba:e4:8e:43:0f:ae:75:cd:10:89:98:cf:be:d3:31:
ef:18:62:6f:47:c3:a5:8f:7b:26:4d:ae:e4:e3:97:a0:04:01:
49:f4:fc:bd:69:70:1b:83:3e:a3:43:e1:3d:27:67:10:18:5e:
64:1a:ce:da:c6:12:7a:35:ee:98:eb:1d:bb:a0:b1:ea:cc:7d:
05:aa:ab:d1:ed:a1:37:ad:f4:63:53:dc:3b:bb:5e:ab:90:b0:
39:51:c7:99:82:55:b0:c5:78:f6:81:1c:b9:5c:4e:77:25:31:
63:eb:13:3b:c9:9a:f0:1e:3b:c9:fa:f3:c3:b1:ad:cb:ac:ca:
82:c4:c1:e8:49:0b:21:4f:70:4a:f9:d4:ef:5a:b7:01:6c:a3:
e9:99:d6:28:20:15:e4:9c:53:03:25:de:44:37:d0:4d:ec:9d:
7f:c4:63:6a:2a:15:53:b7:67:3c:4a:9e:36:9e:21:58:f3:09:
1d:f7:c3:5d:49:a8:d3:36:fa:cb:af:b0:f9:5b:cf:72:ea:10:
74:7a:63:36:02:5d:64:15:48:40:35:c7:bc:60:44:7d:9c:98:
ad:25:97:0b:11:b8:81:25:ad:80:92:0c:c8:1f:d4:03:ac:97:
65:5f:4a:21:5f:c1:d0:a4:8f:b7:14:7d:fd:e4:16:93:a4:8f:
89:94:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:58 2025 by rpki-client