Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: +Dl+Jn2nOB45tfsjtcs4cNgIZqFIDPnGpMLr4FpUXbs=
Subject key identifier: 26:03:FD:9F:EE:B2:DA:8E:D0:D1:4F:54:E2:03:03:2C:9F:03:37:04
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0196759E558D0E5EB32ECFBCAB51240DB215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 1254
Signing time: Sun 27 Apr 2025 05:00:32 +0000
Manifest this update: Sun 27 Apr 2025 05:00:32 +0000
Manifest next update: Mon 28 Apr 2025 05:00:32 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: 8P/dQ9UTjjI6AZEv1zz2avd/h7gACwj36yOgdpcCoc8=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:55:8d:0e:5e:b3:2e:cf:bc:ab:51:24:0d:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Apr 27 05:00:32 2025 GMT
Not After : Apr 28 05:00:32 2025 GMT
Subject: CN=2603fd9feeb2da8ed0d14f54e203032c9f033704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:ae:d1:c6:ab:46:64:ab:c4:8e:b8:63:ab:
f6:ab:0c:d0:45:dd:82:6f:ad:be:e4:c4:f8:f7:86:
b1:70:a2:27:d1:89:7b:b6:4c:ec:ca:5d:5b:a4:5e:
37:2b:4f:12:2a:86:7a:cf:19:a5:dc:40:35:4b:65:
30:d1:c9:0b:40:b1:e2:3e:58:86:64:eb:04:52:26:
a2:a9:4f:14:74:54:70:a8:5a:a9:98:6f:91:8b:5c:
57:09:13:cc:91:6f:b2:ae:13:88:34:7d:68:b9:dd:
30:fb:0f:40:9c:68:81:8a:63:fb:ea:d8:18:78:32:
c9:32:77:74:50:b1:56:d8:b7:8f:5c:e0:d2:da:30:
29:e9:c2:c2:48:76:71:b5:76:aa:0c:ee:8d:02:1a:
76:16:f3:3f:54:c7:ec:32:1c:c4:7c:74:b3:b6:59:
ed:7d:1c:dd:c4:08:ab:c1:1e:34:eb:95:70:7e:36:
15:78:64:81:ff:dd:7b:7c:ab:ca:23:86:b6:e4:5a:
f0:61:5c:4d:6e:00:18:7c:a9:a8:2c:9b:f9:27:40:
6f:87:34:87:25:aa:cb:53:f7:69:d1:95:a1:0b:67:
b7:08:3c:67:7a:40:d1:f3:22:4e:94:07:03:aa:47:
6d:54:fc:dc:24:f1:22:16:bf:77:c0:9b:cf:38:27:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:FD:9F:EE:B2:DA:8E:D0:D1:4F:54:E2:03:03:2C:9F:03:37:04
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:34:b7:3a:5f:18:ea:0f:a4:2b:59:d5:fe:d2:85:9b:f4:
a6:5e:35:9a:0b:b6:3f:be:2d:f6:17:a0:d9:a6:91:0c:07:a1:
21:e0:6b:c8:a2:e6:ba:d3:67:f8:2b:dd:06:46:72:8a:76:d2:
6d:60:bd:38:75:52:8c:3f:9b:a9:ef:74:18:a5:cb:1c:82:4a:
ba:49:6c:55:9b:4a:1e:e2:24:36:07:c8:90:57:cd:d5:ec:3c:
08:dd:02:7a:3f:a4:55:96:3e:02:b2:6f:89:a6:58:01:1d:9f:
1d:1c:03:dc:1d:34:72:b4:05:5c:0b:f5:f7:92:63:3c:b3:60:
6c:06:fd:56:3e:46:47:a8:7f:27:28:5a:01:8e:45:f3:34:fa:
1d:cd:03:37:21:fd:a3:38:77:0b:2f:d3:6e:cb:5a:e5:b4:e9:
1c:09:a8:89:86:02:f2:04:a8:07:c9:6b:10:55:55:3b:4a:5a:
dd:8f:80:ec:03:9c:dd:47:3e:0e:92:29:fd:04:7e:6e:96:f2:
a6:53:d4:d0:9f:1f:1c:47:db:21:7f:4b:c4:25:d9:19:45:fa:
70:7d:0d:87:5e:98:26:ec:3c:78:d7:05:6c:f0:24:f6:69:db:
b5:55:10:f8:27:90:d7:8d:ec:37:b9:4d:42:f0:22:99:b0:e5:
51:b5:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:22 2025 by rpki-client