Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: oJFDdl9Nky7oXbxSlVoHkNOJlWaG1YHDgkx0jAqSvkA=
Subject key identifier: 8E:78:FD:19:02:0E:C5:AC:FE:D7:E7:47:90:AF:28:64:B7:56:8E:6E
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 01968D38893BF8A101FA05DB34F95C04CBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 151D
Signing time: Thu 01 May 2025 19:00:14 +0000
Manifest this update: Thu 01 May 2025 19:00:14 +0000
Manifest next update: Fri 02 May 2025 19:00:14 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: wgJE//dzzi6B6wYIMPP5ohdlGbeufX9Zh27uDMr0DGc=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:38:89:3b:f8:a1:01:fa:05:db:34:f9:5c:04:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: May 1 19:00:14 2025 GMT
Not After : May 2 19:00:14 2025 GMT
Subject: CN=8e78fd19020ec5acfed7e74790af2864b7568e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:c9:49:38:b0:7f:d9:9a:e6:72:c6:68:20:
38:d5:9d:0b:20:98:13:79:71:b6:34:67:c8:ad:0c:
b9:80:01:a5:63:81:5e:23:39:21:54:0d:24:0d:6d:
03:d4:cf:49:43:90:f5:34:6f:cf:3f:6e:c0:b0:16:
3e:82:41:33:07:b8:4f:3d:8e:bd:55:45:9f:7c:e9:
f7:87:3f:66:b2:a5:e9:f4:e2:70:41:f8:e4:7d:29:
17:12:93:f6:6e:e6:75:a7:23:ca:0c:8b:68:34:1f:
cd:bd:96:60:54:b2:99:c0:25:7a:87:31:5a:95:c2:
3f:2d:b2:4f:21:90:f1:da:0f:26:0a:86:82:cb:93:
fc:29:62:8f:fc:76:08:f6:3c:49:eb:db:83:be:86:
e4:d9:d2:e4:79:9d:6d:88:08:ab:67:21:6c:91:65:
56:90:86:1b:43:93:da:9b:c9:28:73:93:16:81:98:
e8:4a:c4:a0:10:ac:14:e9:28:d9:1a:93:e0:b2:e6:
a4:df:48:a0:65:ec:02:7c:6f:08:fc:2c:0f:4e:7f:
16:c5:3d:af:90:0f:78:d2:d7:9c:d3:86:9c:10:64:
a6:f7:ef:79:b2:58:61:bd:1b:89:8d:cf:ef:7e:4a:
3b:36:eb:24:15:f7:db:8b:ec:75:53:4c:59:c8:49:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:FD:19:02:0E:C5:AC:FE:D7:E7:47:90:AF:28:64:B7:56:8E:6E
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:31:2e:fa:bb:a4:e2:99:23:8a:f1:b9:11:f5:63:1b:07:56:
48:5b:d7:76:cf:02:22:e3:97:f1:46:ea:2c:5a:2d:d7:3c:0c:
d4:90:96:ea:15:fd:98:ad:55:b3:3e:80:ec:ea:34:df:bd:12:
9c:fb:a6:fa:3b:a7:a4:40:19:65:26:82:ae:1f:b1:be:3c:74:
e0:1b:39:06:80:78:79:8a:09:70:73:03:b7:a7:88:5d:a9:9f:
1a:06:68:9e:82:5e:ea:a4:de:3e:66:24:e3:e0:a0:bc:b7:7f:
ae:3a:20:08:c3:74:79:b8:12:df:b9:06:f9:06:3a:90:8a:fc:
3f:98:29:a7:51:c8:6c:3c:e6:44:79:89:75:97:dc:6e:d9:1d:
14:49:1a:08:39:5c:22:7d:45:8e:e5:15:ae:22:46:d7:02:a9:
5f:be:ea:d9:1a:44:a6:f2:dc:8c:45:4b:b8:fa:a3:7a:2c:74:
6a:35:cc:bb:cd:8d:b2:6f:aa:9a:81:12:f9:58:3e:a3:75:99:
51:a7:99:09:b4:a8:f9:81:ce:bc:ea:15:66:26:a0:2e:0c:63:
b8:b1:a6:30:c2:7d:ca:d7:bc:00:34:23:f6:d1:3b:58:e6:56:
ec:8b:1e:86:82:2a:61:c8:7c:70:1b:03:39:9c:b0:40:93:c7:
9f:f7:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:52:40 2025 by rpki-client