Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: VymdWmoTPcUW4WR2lb802h8XtVo1WfOtxATdTjgFGNM=
Subject key identifier: 58:55:6D:B2:6E:DB:0E:0D:5C:96:50:48:56:F8:BA:F6:08:E0:D7:07
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 019681D975D52FF8726640A64A1B5F99CEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 151B
Signing time: Tue 29 Apr 2025 14:00:34 +0000
Manifest this update: Tue 29 Apr 2025 14:00:34 +0000
Manifest next update: Wed 30 Apr 2025 14:00:34 +0000
Files and hashes: 1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: wmEOPQRzjYfSP0JZ9jxhqNRTLArSz2E3u4BrwdSwN04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:75:d5:2f:f8:72:66:40:a6:4a:1b:5f:99:ce:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Apr 29 14:00:34 2025 GMT
Not After : Apr 30 14:00:34 2025 GMT
Subject: CN=58556db26edb0e0d5c96504856f8baf608e0d707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:e0:fe:e6:d5:34:9c:b4:8c:2b:f7:11:92:
d1:d3:cd:c9:e5:54:b4:bb:d9:a4:f6:95:b6:3a:6f:
12:d4:cd:92:99:ae:02:7d:53:72:6d:7b:13:78:24:
d7:bc:08:b8:8f:bb:09:66:f9:99:e5:eb:37:d1:e0:
a8:fa:b8:04:09:cb:1c:fe:b6:10:47:e2:8d:ff:f4:
91:c3:00:1b:4d:af:ce:9f:89:b6:65:23:e4:15:91:
3c:1f:47:05:33:ba:55:92:b9:c2:77:42:bb:5e:a6:
e9:79:a2:f9:60:08:a4:bf:b0:49:ec:7e:b9:28:66:
c8:5a:1d:2a:ff:5c:0c:41:cd:02:32:66:8c:41:7d:
16:95:e1:29:f2:ed:c8:d0:4a:a7:93:74:69:a3:1b:
55:c1:cd:64:37:6d:23:2c:f5:b3:c7:f0:4a:08:34:
ff:0a:41:89:e9:dd:2b:08:a0:77:90:e4:50:c8:ee:
ac:88:19:fd:2f:44:ec:4f:58:e1:c9:3b:26:09:5b:
33:13:eb:28:49:5c:d8:8b:2a:95:65:73:09:f5:b3:
7d:de:90:22:31:64:5c:26:c3:97:fa:21:0a:eb:30:
cf:ea:cd:1a:91:01:40:8a:cc:8f:46:70:f3:34:bd:
ae:2c:6b:30:2f:f1:64:b4:79:ee:61:5a:df:c2:dd:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:6D:B2:6E:DB:0E:0D:5C:96:50:48:56:F8:BA:F6:08:E0:D7:07
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1d:25:93:26:c7:6c:40:f1:ed:bf:df:b3:a4:fc:29:58:51:
6c:f1:e3:0b:04:7c:78:70:fa:19:55:d4:4c:f4:3c:12:d7:21:
fe:21:49:3e:db:f5:3e:17:50:2b:74:ce:29:dc:60:a5:60:93:
7b:4d:9f:34:28:cc:3c:8a:34:af:f9:6a:e8:06:8a:6c:30:19:
21:64:71:8f:84:c2:13:8b:5f:b0:40:3b:29:c4:ee:4c:eb:83:
74:d0:a0:d6:23:b3:05:d8:26:23:53:be:18:49:41:8a:99:77:
f2:f1:0e:03:a5:72:66:c2:80:af:af:72:df:cd:16:0d:ea:f2:
b3:9f:47:ae:a7:a4:d6:ac:1a:cd:0b:8f:40:5e:34:50:52:01:
9a:a9:83:e7:cd:95:49:59:6c:da:b8:c5:6a:92:0c:95:f9:be:
72:de:71:7f:13:23:2d:72:c6:9b:7f:a1:dd:d4:19:2f:75:b0:
33:57:a7:64:f4:e0:47:2c:40:49:fa:02:d3:43:03:66:ce:a3:
3e:3d:9d:36:c4:be:09:8c:10:2c:46:a4:03:bb:3f:15:bd:b7:
e7:22:9a:9e:e0:ed:74:27:bb:8b:7e:be:44:c6:35:a6:0d:a0:
1c:7d:ee:e1:51:37:a0:e8:0e:1a:d5:5f:3d:45:c3:69:84:c0:
67:95:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:14:29 2025 by rpki-client