Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: Hgkvofc3uUmJ1IY7xfTfHl4f7DH3skfTeEoayVqJK1s=
Subject key identifier: D5:DD:63:9F:CD:DB:31:F4:29:2E:29:FE:61:55:6A:6A:C8:56:19:66
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019677FB33E2EE447FEB6367479CFF8F1B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 16:01:13 +0000
Manifest this update: Sun 27 Apr 2025 16:01:13 +0000
Manifest next update: Mon 28 Apr 2025 16:01:13 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: En//60kCEUE5Jgr4T03+HSQZ3EYIMHdTMZalJ9oYCPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:33:e2:ee:44:7f:eb:63:67:47:9c:ff:8f:1b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Apr 27 16:01:13 2025 GMT
Not After : Apr 28 16:01:13 2025 GMT
Subject: CN=d5dd639fcddb31f4292e29fe61556a6ac8561966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:56:1b:a5:7e:47:f7:6f:43:9b:c5:d7:8a:
60:a2:90:ca:a8:dd:f5:2f:34:da:bd:8d:f9:44:36:
0e:f8:e5:78:09:4b:68:11:17:4f:79:f1:6d:da:94:
cc:b6:e4:16:d2:3b:6c:73:3b:7b:fa:50:88:2c:06:
0c:86:48:99:3c:64:4a:9d:49:d9:8f:b2:47:0e:9a:
21:6d:5f:b1:df:c2:f6:3e:ff:31:ef:d8:82:e6:4d:
3b:e7:e9:73:14:a8:a0:83:f1:f0:85:78:c3:54:8b:
e4:2b:2c:b0:18:a8:64:b7:ef:d2:ac:c7:15:9f:b3:
bb:77:b0:7d:0c:2e:4d:59:50:2d:72:4d:3f:5a:a0:
a2:5c:43:bc:af:aa:da:58:6a:da:a2:49:3a:65:6e:
40:6a:96:53:18:57:f8:82:6e:02:45:83:ed:1c:2b:
6b:43:be:de:ae:cb:f6:ae:6e:5e:81:65:37:15:33:
33:75:51:7c:81:65:8b:87:4a:19:b8:e5:50:08:de:
43:48:10:b6:10:5d:ab:40:c2:d4:58:35:2c:5a:a5:
54:cc:ab:cd:d4:5e:5a:cb:f4:18:88:8f:f9:e1:c6:
4c:2b:7f:ce:08:38:84:ad:2e:ee:48:f4:f7:49:12:
5b:13:4e:f6:a3:b5:4c:5f:0c:1c:09:ac:b2:44:8d:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:63:9F:CD:DB:31:F4:29:2E:29:FE:61:55:6A:6A:C8:56:19:66
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ed:f9:2b:05:13:e5:03:03:67:d0:cf:ed:da:08:94:bd:5f:
bf:62:e3:3a:d2:fc:53:a9:45:1d:35:2f:c2:c1:a6:3b:ba:28:
84:d2:a8:f6:4b:24:1a:63:73:a7:b4:6b:e5:6b:b6:f3:64:63:
91:8f:80:98:7a:76:87:56:3d:d8:f2:c1:93:5a:fe:29:ab:91:
12:4b:dc:58:42:5f:3a:08:41:4c:92:93:26:57:10:ac:d6:cf:
e9:ec:3c:c6:81:29:ec:04:60:b4:90:8d:d7:68:cc:eb:54:39:
54:6b:5a:7d:12:41:b4:7c:03:06:bc:63:99:59:a7:0c:1a:25:
69:9e:eb:b0:03:01:9c:cc:55:ab:27:2f:d1:2f:a8:51:71:39:
0b:4f:d0:f0:41:61:91:de:78:2e:d6:b9:76:52:ca:68:a6:f0:
41:4b:66:ce:58:96:97:f0:5f:7f:96:d3:7d:33:90:29:77:52:
ab:11:a9:36:c5:00:10:8f:c7:88:7c:fd:83:3e:b5:0d:ce:c4:
89:e1:f5:42:bb:d6:e9:dd:f2:71:7a:e0:ce:6e:d9:e7:2d:de:
b4:9d:39:46:99:d4:92:b9:8c:22:56:ab:7a:e2:55:b0:f9:10:
f0:88:6a:1b:93:24:40:15:1c:3e:07:73:4b:42:38:da:b1:34:
bb:84:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:18:31 2025 by rpki-client