Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: 0V63OB/BoJusQGlpxESjSR+vyjF/YouaXx9aoTrzwUI=
Subject key identifier: 0F:5F:FF:7C:35:E8:0D:24:79:F9:0E:CF:D6:A1:78:31:60:6C:B9:1E
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01967F0F864F6927C4A6AC2BC1870F9A95D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 01:00:45 +0000
Manifest this update: Tue 29 Apr 2025 01:00:45 +0000
Manifest next update: Wed 30 Apr 2025 01:00:45 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: JQkLjrqIP2kf2+0WQHtsdN+QnfR5NlWbEw1O3mrD3x8=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:86:4f:69:27:c4:a6:ac:2b:c1:87:0f:9a:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Apr 29 01:00:45 2025 GMT
Not After : Apr 30 01:00:45 2025 GMT
Subject: CN=0f5fff7c35e80d2479f90ecfd6a17831606cb91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:a1:ff:8d:a4:45:24:c0:b1:53:c8:ff:9c:
d0:85:0b:4a:bd:19:91:aa:41:f3:a2:52:f7:b9:03:
0c:12:01:db:dd:12:24:f4:d4:2b:a5:39:93:fc:e8:
9d:fb:0d:5e:40:80:d0:bb:92:f4:01:78:ef:ce:8b:
0f:78:65:c1:1d:d8:b2:8d:44:e1:e0:05:41:97:75:
4d:9d:a1:05:ad:67:b5:65:c0:58:fe:65:83:11:2a:
21:2d:5e:90:3e:d9:b7:ec:19:aa:ff:3b:ba:21:4e:
32:b8:bc:2a:fa:98:cf:06:8c:c6:65:54:c8:ee:95:
04:ff:57:3b:1b:23:ce:bc:fc:4f:43:de:0b:d8:f9:
eb:0a:21:21:92:93:8b:f1:60:9c:15:44:74:bc:17:
69:76:83:69:7d:d9:da:62:be:0c:f2:ac:a0:be:38:
cd:63:99:71:79:b0:16:93:31:0f:f9:32:15:17:45:
34:cf:d8:c6:50:8a:08:9a:85:c7:87:53:16:00:72:
c2:63:80:07:95:18:3a:10:53:c9:52:c3:59:51:9d:
08:dd:21:2b:0c:e1:ab:2a:1c:70:52:8b:c0:95:a5:
cb:6b:91:31:9f:4a:0a:be:15:9a:2e:3c:56:8f:12:
64:d4:2a:74:cf:9f:9b:d2:c6:ca:a6:19:ce:eb:38:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:FF:7C:35:E8:0D:24:79:F9:0E:CF:D6:A1:78:31:60:6C:B9:1E
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:e6:48:03:33:ae:84:d7:81:62:24:ce:38:af:86:78:b5:
53:31:6d:91:17:aa:37:4d:2b:86:b7:33:75:cc:b9:e9:2d:b4:
7f:74:a0:f7:51:a6:72:fe:23:e0:7a:94:b0:73:4c:45:92:95:
4a:aa:34:91:a7:a3:b8:7f:59:66:d9:6b:18:57:0d:51:de:01:
07:94:f8:43:fb:83:fb:73:e6:56:6e:6b:e5:d8:80:ca:d0:e6:
6d:ee:78:4b:e0:86:99:ad:e9:74:fa:66:32:48:8e:11:11:1c:
2e:42:d5:32:07:4c:25:7b:f6:3e:f3:b4:33:1d:b6:88:39:0f:
7a:0b:b4:19:e3:9d:77:3d:10:4b:02:4b:17:3a:42:d6:0f:c8:
a0:63:3d:52:8f:56:fa:fa:d1:32:59:30:b3:3e:66:e7:4f:4f:
d8:ef:e5:8f:74:1d:92:d3:30:7a:e1:ba:25:49:2f:bd:0f:9b:
21:3f:ce:de:ab:80:b4:44:61:3f:a4:6b:fd:2e:1b:7a:58:21:
17:9a:1a:58:14:ab:24:c9:b8:f8:3d:ea:19:ab:5b:83:21:07:
37:d8:36:60:dd:be:06:90:a1:15:28:41:7b:9e:86:5a:c5:1a:
ba:43:72:b0:67:f0:ce:cb:36:cf:76:af:01:ca:4f:e9:e2:08:
b5:6b:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:44 2025 by rpki-client