Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: Qw5CyLN3AHU6OYO17tTZjQ0NkCrME9NkBtPMzUh9Rpw=
Subject key identifier: BA:F8:3C:D1:67:39:E4:B7:C3:94:46:9B:9F:2A:21:2D:6F:50:48:B3
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 01968247267E4D47B67376A0811D15C25DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 151B
Signing time: Tue 29 Apr 2025 16:00:23 +0000
Manifest this update: Tue 29 Apr 2025 16:00:23 +0000
Manifest next update: Wed 30 Apr 2025 16:00:23 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: aUeHd+pWtjsTgpdLC/WJbRNQXwWqjSB7Xz+U3aySXu4=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:26:7e:4d:47:b6:73:76:a0:81:1d:15:c2:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Apr 29 16:00:23 2025 GMT
Not After : Apr 30 16:00:23 2025 GMT
Subject: CN=baf83cd16739e4b7c394469b9f2a212d6f5048b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:b6:ae:2b:e2:61:82:e8:d7:c4:a1:73:5c:
b7:59:64:94:df:7f:be:f3:f8:ea:b8:9d:02:d8:0f:
23:0e:28:a5:9f:30:6a:fe:2d:d7:21:4a:a5:ae:85:
ee:d7:09:20:bf:ce:d7:da:ab:85:ae:f5:f3:f9:9e:
fd:b1:71:76:cd:99:4f:25:c8:67:81:60:31:a7:70:
ce:78:b9:de:97:c1:f4:9f:be:ee:23:bd:9d:f3:78:
59:ac:54:d3:e2:d3:c9:ba:e7:ed:7a:56:79:43:63:
b2:3b:89:27:65:75:47:88:f0:d3:5e:3f:11:cb:41:
63:29:11:28:e9:bf:19:3d:6f:25:73:80:a0:9b:de:
66:70:10:ff:c8:a6:20:a4:91:ea:be:f8:e7:c9:f5:
3a:a1:b8:b6:b6:d4:90:5f:d0:06:01:a6:3e:f2:09:
7a:ab:59:94:14:51:8f:1a:b4:f8:0d:4b:7e:9d:5a:
40:0b:79:4b:21:80:37:4c:ee:fd:dd:b4:0e:46:e1:
28:6a:cd:94:eb:21:4e:5a:17:06:2c:91:f9:ff:c5:
39:75:88:06:f7:5c:47:2c:6f:9c:b3:7b:cf:7b:8f:
a1:65:c1:5d:09:dc:67:99:d9:99:7e:78:96:f4:05:
70:d7:79:b5:d6:7f:76:7b:36:65:aa:f2:4b:d2:19:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:3C:D1:67:39:E4:B7:C3:94:46:9B:9F:2A:21:2D:6F:50:48:B3
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:78:03:9f:56:6b:26:68:a4:29:d9:2b:e2:ef:9c:69:bd:f9:
80:c0:01:cb:95:f5:4a:13:22:7b:c8:09:13:62:e0:a6:64:49:
80:d2:3f:c6:c8:39:50:60:c2:df:69:4b:ee:aa:80:23:a2:90:
8f:75:bf:41:9f:f7:08:ac:8a:44:a3:bd:19:ad:d2:86:6e:81:
72:ec:01:59:a6:8f:3e:68:3e:57:97:c8:10:2e:bd:fc:e5:76:
30:f9:31:25:fe:1b:9a:c0:e2:05:42:6a:e1:6f:3d:59:96:36:
34:7e:d9:37:51:00:68:12:2b:e3:9d:69:0a:6c:3d:bf:73:a5:
d9:00:f3:6a:6b:74:57:b9:c1:bc:18:ca:51:5e:55:97:e7:ad:
e9:ed:0c:c7:94:d0:f1:ad:9b:c5:cc:21:9e:d7:99:61:56:4c:
ee:93:fc:60:aa:69:af:7e:db:82:42:ad:f6:1d:6d:ec:d0:69:
ae:e2:01:fe:52:f4:19:4f:a3:9c:4f:2f:65:84:a6:6b:28:ac:
cc:81:e9:7f:64:75:b1:b3:e1:84:b1:cc:b3:5a:b4:3b:60:43:
c5:fb:f4:d4:b4:8c:c7:26:5d:20:e2:f4:eb:e3:48:09:01:fc:
f5:30:ea:bb:5d:18:57:23:19:00:3c:b6:f8:6a:dd:04:33:c8:
12:6f:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:02 2025 by rpki-client