Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: Sn9sXyzjY0eknaOQh5qxW6jmTDuViAof3N0TlofjwFY=
Subject key identifier: 1A:C0:71:08:C5:BE:80:9A:BA:7E:BC:F9:AC:13:0E:24:0E:6C:1C:05
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019681A2A6F140F7D5832BA845A1922509A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 13:00:42 +0000
Manifest this update: Tue 29 Apr 2025 13:00:42 +0000
Manifest next update: Wed 30 Apr 2025 13:00:42 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: T9dq9EXU/hgAXdXgDisF2WA/cdQL438pxQEhaLfc5lw=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:a6:f1:40:f7:d5:83:2b:a8:45:a1:92:25:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Apr 29 13:00:42 2025 GMT
Not After : Apr 30 13:00:42 2025 GMT
Subject: CN=1ac07108c5be809aba7ebcf9ac130e240e6c1c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:a6:2d:94:3a:f3:46:66:74:81:b8:4c:3e:
2c:f6:1e:e4:35:b5:7f:af:55:83:b0:cb:7a:62:50:
85:0e:5f:59:2a:81:3f:5c:16:04:8b:03:a0:98:06:
af:14:35:38:20:7c:81:0c:04:2c:48:11:7f:e6:9c:
fa:70:3e:c5:70:0e:3c:dc:bb:c0:a9:3b:4b:97:b3:
e3:35:56:70:40:99:dd:f9:59:35:3f:e6:51:bb:b1:
f2:92:5e:48:85:49:92:6f:d6:75:dc:93:cb:96:dc:
6f:a9:25:9b:0b:9c:65:53:f1:0c:ad:88:36:7d:51:
7f:00:32:60:da:0e:ba:2a:ca:62:d7:ff:bc:65:ae:
b4:71:8c:e5:73:89:0f:56:1d:41:f3:c6:64:21:52:
8a:e7:97:bc:1f:53:7c:d3:48:a1:2d:bd:95:ac:ed:
00:57:27:22:1b:78:03:00:74:54:45:a8:bb:c4:91:
ed:40:4e:12:9e:09:f8:e0:93:44:4c:90:38:f1:3c:
26:88:3a:53:53:90:d2:49:61:3e:cf:c7:ba:cb:0c:
ae:ee:1c:55:6d:54:4b:e2:d2:92:f1:24:31:6e:3a:
20:16:5b:e2:39:93:8f:9a:72:67:07:53:70:2e:bc:
07:70:40:05:a0:1d:5e:d2:a5:a9:7c:85:62:b1:d3:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C0:71:08:C5:BE:80:9A:BA:7E:BC:F9:AC:13:0E:24:0E:6C:1C:05
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2a:13:ce:6e:c7:62:1a:dd:f1:a3:17:60:35:f0:1c:0c:80:
4c:b1:7c:1c:fd:e4:66:ce:46:fd:62:83:04:fb:42:17:30:7e:
c6:b0:7d:7c:b4:24:66:d9:f2:5e:c5:1b:ca:3f:aa:af:fa:9d:
0b:e6:8a:8e:69:1c:c8:8b:b4:7f:2c:a1:a6:a0:59:c7:6c:d8:
fb:d7:64:1d:11:d4:f8:2b:8c:4e:95:35:17:92:c8:f5:5b:d7:
47:74:7e:2b:36:a5:64:26:b8:58:36:ae:71:f8:35:6f:34:d8:
05:b5:1b:48:f1:b8:cf:9b:8f:c5:47:50:7e:90:2f:46:53:50:
b8:cf:55:a3:ec:c3:7c:1e:12:25:67:d1:22:6e:12:b6:cf:d4:
30:d9:ec:3d:dd:e1:0a:c0:b3:c0:fc:74:0a:51:62:c5:f3:db:
30:ae:fb:cc:aa:6c:57:29:bd:4a:ee:b4:92:2f:00:95:e0:15:
6a:6f:da:c2:a3:79:99:9b:8b:d6:27:e7:b0:dc:9c:2d:dc:de:
a1:e4:89:0e:32:87:66:c7:94:c5:93:2d:36:66:99:0e:91:63:
1b:2a:05:20:40:18:7a:57:09:1b:78:d7:c2:4b:8e:6c:16:82:
4d:5c:7a:36:17:80:19:b9:8e:77:d8:9f:61:31:03:17:01:eb:
83:12:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:08 2025 by rpki-client