Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: RG0EfJXYPbBZdKuOUQu1oReyKmFvmus1cG2OTjWq+3g=
Subject key identifier: 10:9F:43:87:F4:E5:4B:A0:A0:31:F2:83:90:62:DB:89:59:F1:31:CA
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019672D40B83F69D2EC1836E8A21F0FE2759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 1278
Signing time: Sat 26 Apr 2025 16:00:21 +0000
Manifest this update: Sat 26 Apr 2025 16:00:21 +0000
Manifest next update: Sun 27 Apr 2025 16:00:21 +0000
Files and hashes: 1: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (hash: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: +vCvkkyCFQFfty4cELLeLVY2SZ/3GrDsaaJew6rANGY=)
3: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
4: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
5: WezcbaDCWCglJVxlkqENoVQ5GlY.roa (hash: kXoxzzMiFtQKZOeEaMcNXCC2S+tWWgxtkN6qKdf+Gxc=)
6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:0b:83:f6:9d:2e:c1:83:6e:8a:21:f0:fe:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Apr 26 16:00:21 2025 GMT
Not After : Apr 27 16:00:21 2025 GMT
Subject: CN=109f4387f4e54ba0a031f2839062db8959f131ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:c3:91:fd:aa:bc:12:b9:98:99:c5:c6:50:
74:4a:8a:cb:66:d3:76:e5:54:f1:12:4a:08:35:8b:
39:41:e2:7e:84:ae:d3:c5:09:28:22:01:b8:3b:ec:
a0:4d:ef:28:5f:78:39:a9:2b:7c:16:6d:d4:c1:29:
46:20:24:1d:3a:ec:1f:f1:da:11:82:8f:29:24:68:
c0:f4:3e:04:1e:51:d5:56:be:1e:9e:8b:a2:61:2b:
0b:9d:b3:99:fd:38:11:a1:51:a9:35:ac:e6:65:31:
cd:66:c7:fc:b9:57:bb:5e:d7:b1:b5:23:9a:0f:49:
98:a6:2e:3e:ec:24:9f:0e:2e:2f:9e:50:81:cb:ae:
73:83:e8:f0:c3:e2:95:6d:fb:43:a2:25:4d:fa:dc:
76:03:3f:70:b5:76:bb:28:69:ad:16:de:de:6e:c2:
a2:e0:58:1a:fd:90:ca:2c:3e:20:33:81:37:6e:ca:
e3:7c:bc:a6:26:ad:b4:b7:c2:cf:85:f4:c0:85:b3:
33:81:4b:72:45:c8:46:5d:77:10:b1:fc:2e:0f:32:
5f:ae:ab:85:6f:cd:09:1b:9f:0e:ff:3e:63:49:5a:
98:e4:7f:0d:57:52:8d:d9:9f:df:de:4a:5f:aa:1d:
75:8a:26:4b:8b:c2:f4:e6:39:f6:5f:65:26:e6:d9:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:43:87:F4:E5:4B:A0:A0:31:F2:83:90:62:DB:89:59:F1:31:CA
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:90:bc:3d:bf:19:21:11:43:d0:eb:eb:b2:ab:ae:47:87:bd:
f5:87:09:df:d5:a4:97:fc:75:bc:57:95:f7:ac:5c:a2:3e:bc:
a0:a7:67:47:29:42:a4:d8:d9:24:a6:c6:4c:76:eb:2e:b5:65:
7d:2a:d6:98:63:57:ab:d3:53:18:e5:af:b7:94:81:9d:87:08:
62:d3:3e:10:81:9f:a8:e7:15:93:e4:7f:83:64:4b:96:5e:15:
22:55:ba:d8:2e:f2:59:98:9b:fe:46:d2:4a:b0:61:0b:48:0a:
6d:fa:59:ac:e6:66:c1:e5:23:61:fa:d5:5a:05:eb:64:7b:d9:
2d:63:dd:fa:23:35:bf:3c:a1:bd:89:d7:8b:39:8f:47:92:78:
67:42:07:07:a1:ac:80:8b:ad:f0:b1:c4:60:f4:dd:90:39:4a:
a0:ba:3e:47:fc:08:f8:c7:a0:c0:5d:59:41:60:76:79:b5:54:
68:a8:d4:5f:0d:50:0c:54:ac:55:fb:8c:f1:e7:4f:c3:9e:2d:
48:46:3d:6d:46:9c:6b:d5:7d:5f:98:e3:00:7a:25:f5:1e:98:
e0:f7:29:66:b0:8c:93:33:13:08:be:8f:95:d3:1c:de:1c:02:
cc:f4:a7:cd:42:ba:7b:96:16:e1:70:0b:d7:3a:88:e6:36:c1:
4b:da:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:04:12 2025 by rpki-client