Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: Uc0v+Hpb3/30LGe0Wa9tVjR8qOFHBwddQsehThnx3Ks=
Subject key identifier: FF:78:37:CA:1C:F7:D2:64:A4:73:FE:F8:3B:29:E0:D2:FC:34:B4:DD
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 0196778D143CCA7EEA65EBC76231F505F75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 14:00:56 +0000
Manifest this update: Sun 27 Apr 2025 14:00:56 +0000
Manifest next update: Mon 28 Apr 2025 14:00:56 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: yOZap4zxmYkfi2ZwXDUnbmSkSbNeSlUxtK/K7V4zjE0=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:14:3c:ca:7e:ea:65:eb:c7:62:31:f5:05:f7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Apr 27 14:00:56 2025 GMT
Not After : Apr 28 14:00:56 2025 GMT
Subject: CN=ff7837ca1cf7d264a473fef83b29e0d2fc34b4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:c5:43:51:0b:af:6d:70:a0:2c:4d:0a:f2:
00:9f:36:7d:5b:cf:59:3e:8f:c5:0e:c3:03:08:04:
3d:82:29:24:49:20:4e:85:31:97:d4:8b:05:39:52:
eb:8a:e9:17:f4:53:a3:73:73:fc:eb:ff:f0:fe:39:
1d:9a:36:20:0a:78:0e:f1:ee:ca:86:64:9c:bc:37:
52:c7:2c:7d:d5:86:64:8e:53:e2:42:68:e8:62:10:
20:7a:8f:58:1f:b5:87:19:9f:02:9e:f1:c1:27:ee:
82:d1:6e:c5:fa:69:6c:27:a0:0c:71:f4:ab:18:fb:
6f:90:0b:b9:6c:56:be:b5:ce:bb:b3:90:47:5c:51:
c3:0c:10:0c:9c:7c:dd:9a:f8:6a:8c:68:8c:f7:bc:
0c:cb:df:1c:02:0b:75:33:ad:a9:d1:7f:4d:80:0d:
67:06:05:33:99:9f:f5:39:9e:a5:30:d2:8f:c4:fc:
44:77:7e:e6:46:73:3a:9f:a1:c7:2a:70:b2:8f:d0:
6a:26:70:97:a2:d5:e2:a8:00:c5:4d:f9:17:c7:ac:
55:24:3c:7b:02:89:d9:7d:44:1a:de:96:6e:5b:6c:
4e:fb:2a:aa:7a:09:ec:b2:38:1e:76:2a:2d:72:d0:
56:48:e9:07:1a:62:d1:99:ec:52:36:c8:d2:ae:fc:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:37:CA:1C:F7:D2:64:A4:73:FE:F8:3B:29:E0:D2:FC:34:B4:DD
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c1:ef:ff:56:cf:d6:b8:0c:6d:4a:65:5d:16:a2:a9:9d:65:
7e:34:72:44:68:2b:d4:06:56:28:9a:3b:58:00:c0:87:c8:31:
97:f3:e3:bf:22:ec:ca:00:64:6c:dc:7f:89:ae:27:0d:c6:b3:
37:a5:f8:f6:a8:73:2a:0b:05:03:34:57:ed:78:78:c0:a4:50:
ac:13:05:a5:8a:69:57:8f:23:32:ff:eb:61:4c:97:e9:ae:33:
8f:ac:c5:9f:dd:d0:19:45:ec:0c:04:95:f3:46:5f:50:28:c5:
7c:95:f2:a6:c8:70:69:5f:87:7a:23:42:43:1d:04:35:8d:ee:
da:cb:64:79:91:8c:9f:2e:96:fc:ba:53:21:d2:66:b6:19:ea:
dc:01:04:20:af:aa:e7:dd:f4:cb:96:5e:30:87:8f:1a:12:6a:
4e:87:f7:3a:e6:38:cb:01:c8:17:e7:41:36:76:d2:a4:e1:ec:
9b:3c:96:b5:c8:aa:72:bd:02:20:4b:0f:d4:fe:4c:b4:7f:c6:
13:ed:f4:02:79:54:e5:43:db:e6:53:0a:1c:9e:68:c6:21:1a:
28:86:ee:85:e4:29:d8:03:e1:55:0f:b3:6f:cc:78:9b:58:1b:
32:e4:d4:3d:58:f8:a2:5f:0c:8f:ca:a8:55:8e:39:4b:22:04:
9b:ac:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:07:48 2025 by rpki-client