Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: MgGGzzo65Xl/ZXig6iwBt0+tT5vE1tM1o8ywxWzFZPk=
Subject key identifier: 25:EF:4A:05:01:92:FC:B9:D2:EB:D6:BE:32:3D:60:56:77:F3:6C:66
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 01968390D0BBB5CB30FEEC5DA8BB89A66B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 22:00:28 +0000
Manifest this update: Tue 29 Apr 2025 22:00:28 +0000
Manifest next update: Wed 30 Apr 2025 22:00:28 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: n0lFSSZW1JQkyW6J4OON3ngkyeLC2vXkkKfInLaNuzk=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:d0:bb:b5:cb:30:fe:ec:5d:a8:bb:89:a6:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Apr 29 22:00:28 2025 GMT
Not After : Apr 30 22:00:28 2025 GMT
Subject: CN=25ef4a050192fcb9d2ebd6be323d605677f36c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:b4:aa:a9:a6:c1:5f:42:dd:5f:53:20:ca:
e5:2a:fd:ec:35:d4:ad:3b:a1:2f:6c:3b:92:98:1c:
f5:0b:66:8a:30:cc:ed:27:ac:96:2f:7d:31:e4:09:
66:f0:1a:06:39:4c:76:80:e7:fb:80:cf:6f:69:c7:
50:fb:1f:a1:cd:c9:87:e1:5a:8c:84:ec:c7:b2:25:
2f:e8:0e:7d:b9:29:1e:8a:63:b3:65:85:a7:26:a2:
51:0e:83:41:25:b4:36:57:0d:2d:c6:92:8b:f1:08:
59:c5:14:e3:75:61:e1:11:bd:80:dd:a3:81:c2:af:
cc:9a:48:79:83:f8:bd:42:70:26:e6:ce:f0:7a:9a:
ab:65:b6:6e:67:55:57:dc:5b:61:ac:cd:31:80:80:
71:9d:ff:63:76:b6:78:e6:59:d1:2e:ae:0f:fe:66:
9c:23:b3:31:18:2e:11:28:b9:42:56:f0:76:3d:35:
32:24:0e:30:9a:8c:02:13:67:f3:55:d3:c8:8a:25:
14:9f:35:9b:55:bf:77:1d:cf:e2:76:28:69:b6:3c:
f2:5b:c6:80:50:65:80:a6:4a:4f:6f:dd:f1:97:f9:
e2:ef:80:82:dd:38:a1:a3:70:61:b6:62:e5:71:3c:
52:30:c2:90:77:a0:12:eb:44:68:30:e1:e3:bd:c8:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:4A:05:01:92:FC:B9:D2:EB:D6:BE:32:3D:60:56:77:F3:6C:66
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bc:31:b4:bb:87:7f:d6:f8:d8:ce:be:6a:47:52:9e:cc:cc:
31:7e:05:5d:c7:44:86:bb:77:d2:19:52:58:3f:53:1e:f2:44:
f7:17:56:4b:ab:07:fe:3b:86:bd:fb:c6:df:6a:55:22:a9:6e:
2c:23:3f:f6:12:95:da:2b:ae:11:5c:a6:0c:35:b9:15:c7:8f:
3e:07:9e:93:97:de:49:33:38:e4:24:09:dd:1c:45:1d:80:39:
57:ef:f1:c3:40:14:40:a7:00:b3:76:ff:2d:fe:78:05:8d:27:
65:6a:3d:8c:5c:c1:01:25:78:63:f6:4c:c9:1f:31:f6:f9:7e:
1c:e3:d4:d7:7b:c6:27:9a:27:8a:9d:79:52:3c:c7:01:23:6d:
25:c5:92:73:05:3e:72:7f:72:f3:4d:c1:d4:42:f6:1d:a2:3a:
c5:ce:6a:35:d9:4e:7c:cd:6f:39:f8:ba:75:5f:12:57:90:2d:
28:3e:b6:62:cb:aa:39:82:c6:3e:81:fd:ca:47:7c:39:89:80:
74:47:8c:a2:02:2d:42:aa:a2:06:a1:7d:f2:66:2f:f1:68:63:
49:8b:8c:e0:22:52:d3:81:b3:3a:aa:eb:2b:ca:05:29:74:a0:
10:41:bc:ce:2c:4e:a8:40:45:6b:d4:a1:47:e2:68:68:40:4b:
80:fc:88:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkNC7tcsw/uxdqLuJpmuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjUwNDI5MjIwMDI4WhcNMjUwNDMwMjIwMDI4WjAzMTEwLwYDVQQD
EygyNWVmNGEwNTAxOTJmY2I5ZDJlYmQ2YmUzMjNkNjA1Njc3ZjM2YzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j+0qqmmwV9C3V9TIMrlKv3sNdSt
O6EvbDuSmBz1C2aKMMztJ6yWL30x5Alm8BoGOUx2gOf7gM9vacdQ+x+hzcmH4VqM
hOzHsiUv6A59uSkeimOzZYWnJqJRDoNBJbQ2Vw0txpKL8QhZxRTjdWHhEb2A3aOB
wq/Mmkh5g/i9QnAm5s7wepqrZbZuZ1VX3FthrM0xgIBxnf9jdrZ45lnRLq4P/mac
I7MxGC4RKLlCVvB2PTUyJA4wmowCE2fzVdPIiiUUnzWbVb93Hc/idihptjzyW8aA
UGWApkpPb93xl/ni74CC3Tiho3BhtmLlcTxSMMKQd6AS60RoMOHjvchDXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXvSgUBkvy50uvWvjI9YFZ382xmMB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbwxtLuH
f9b42M6+akdSnszMMX4FXcdEhrt30hlSWD9THvJE9xdWS6sH/juGvfvG32pVIqlu
LCM/9hKV2iuuEVymDDW5FcePPgeek5feSTM45CQJ3RxFHYA5V+/xw0AUQKcAs3b/
Lf54BY0nZWo9jFzBASV4Y/ZMyR8x9vl+HOPU13vGJ5onip15UjzHASNtJcWScwU+
cn9y803B1EL2HaI6xc5qNdlOfM1vOfi6dV8SV5AtKD62YsuqOYLGPoH9ykd8OYmA
dEeMogItQqqiBqF98mYv8WhjSYuM4CJS04GzOqrrK8oFKXSgEEG8zixOqEBFa9Sh
R+JoaEBLgPyI5A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:09:26 2025 by rpki-client