Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: 7UuW3fhuyh7dfdL9V6JVCkeOAt8V6rYNxzacFjbuP3E=
Subject key identifier: A7:8E:FB:C0:0F:AA:B0:B9:0A:24:EC:86:15:51:81:F4:69:5A:9D:0F
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01967266565D7636E4E333A68AA6F7A11DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 14:00:31 +0000
Manifest this update: Sat 26 Apr 2025 14:00:31 +0000
Manifest next update: Sun 27 Apr 2025 14:00:31 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: Qo/8eRwGKX4t2nmcWvoZEU12sh7UW4U//QKszC+6F3Y=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:56:5d:76:36:e4:e3:33:a6:8a:a6:f7:a1:1d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Apr 26 14:00:31 2025 GMT
Not After : Apr 27 14:00:31 2025 GMT
Subject: CN=a78efbc00faab0b90a24ec86155181f4695a9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:d6:b2:0d:d4:08:1c:fd:ca:e8:05:07:7c:
8d:04:59:5e:fb:fa:55:93:bd:73:60:0d:b7:6d:65:
83:12:88:97:15:d3:8d:e6:31:9f:79:f6:e4:2c:68:
ab:b2:73:dd:0a:b4:c0:f3:17:27:77:91:11:99:4d:
87:e2:fa:52:ed:8e:2a:21:f7:91:9e:e2:c4:77:a8:
17:da:1d:36:03:74:13:b5:96:a2:e5:79:a4:3e:43:
36:f6:36:b6:d8:b8:57:b9:f4:95:55:76:f4:20:0e:
e7:84:35:9e:90:7c:e7:53:c8:67:2f:27:34:f5:9e:
6b:be:e5:c9:17:70:e0:fd:74:31:d7:1f:fe:a6:10:
42:8a:7f:d9:51:f2:03:58:bd:02:ee:5e:c4:66:d1:
3b:55:f7:50:0e:b8:6d:6b:99:e1:ac:8a:a9:31:7e:
2e:14:87:8a:f5:6a:7b:46:b7:ca:bd:2e:86:a8:54:
23:11:73:ea:0a:98:59:73:1b:3a:13:63:14:b4:4e:
87:cc:52:58:e3:e9:10:96:ee:a2:c7:54:ca:af:67:
9b:6a:b1:e1:71:12:17:dd:a4:9f:9a:36:48:78:fe:
b0:5d:e3:34:74:7a:6c:35:a8:39:c3:89:72:83:4a:
4e:b3:b0:0b:01:0c:5b:59:a7:53:d2:ab:db:77:0e:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:FB:C0:0F:AA:B0:B9:0A:24:EC:86:15:51:81:F4:69:5A:9D:0F
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:01:f8:43:f0:ff:fc:e4:e2:6c:ca:ed:17:08:c9:b5:03:
c8:15:2b:41:0d:ca:ad:52:14:5b:ac:3d:ac:c1:de:89:d7:fc:
5c:b1:37:d8:a6:b2:40:ea:dc:b5:20:23:70:08:1b:b3:fb:80:
86:39:c0:e2:81:d0:9d:ae:92:a2:f4:39:30:32:ee:9f:ff:b3:
4d:28:13:0e:b1:a7:76:42:97:96:e4:c9:e2:cf:51:2f:91:ce:
72:b6:27:7d:3f:52:f1:d6:e0:55:2a:4c:5d:50:95:07:b4:31:
d0:ca:72:5d:60:18:ce:21:26:99:38:c6:0b:a5:50:5f:36:5b:
b8:04:bf:5c:4a:a7:d4:8c:4d:7d:b3:37:cb:f3:44:3d:3e:e1:
54:46:c7:09:fd:05:d1:67:d6:09:47:22:06:1e:44:f4:75:6e:
f0:cc:bb:b3:f7:27:da:8d:85:3a:c2:b2:61:9b:48:03:e7:53:
ae:e2:3d:57:30:47:bd:2f:a8:6d:5a:2c:7d:46:f1:73:4d:92:
61:84:9e:b2:1c:86:e6:e1:5e:4e:37:53:75:c5:bd:94:d1:73:
54:e1:40:2b:0d:05:d3:80:e2:72:4e:57:60:90:86:01:b5:20:
97:d8:16:34:49:e7:f4:6d:ec:52:52:87:04:78:48:b4:9b:f4:
0d:9d:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:29:22 2025 by rpki-client