Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: IYecZRQqksEkkVmdyufVepqLmpeRtQy6MyNUtfUwfe8=
Subject key identifier: 18:3F:4C:A6:1D:CA:BF:FA:89:11:28:C3:D3:95:71:1B:C1:DB:B3:10
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019682102C4BE43DEDE83F2D156F1F7C31FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 15:00:19 +0000
Manifest this update: Tue 29 Apr 2025 15:00:19 +0000
Manifest next update: Wed 30 Apr 2025 15:00:19 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: ZTr8Zfl4Mal2b+pirVlrzTE0csGLHDQqTlRWxntXloM=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:2c:4b:e4:3d:ed:e8:3f:2d:15:6f:1f:7c:31:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Apr 29 15:00:19 2025 GMT
Not After : Apr 30 15:00:19 2025 GMT
Subject: CN=183f4ca61dcabffa891128c3d395711bc1dbb310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:52:49:26:2a:bb:d7:68:8a:25:b5:96:49:
d9:62:bf:87:ba:7f:de:06:19:d7:66:cf:85:e4:04:
7a:30:06:9c:bf:be:d2:c5:ca:41:fd:dc:96:32:a0:
09:28:c8:3a:23:1e:95:de:0b:3c:5b:c3:ae:e9:a7:
13:c6:35:9e:3f:01:d2:2e:82:bb:7c:e9:65:d1:d1:
33:8f:ad:5e:7c:de:17:91:b9:d0:00:8f:27:f9:10:
a2:60:03:69:11:17:93:ac:c5:2c:e8:37:63:16:85:
99:77:4f:f0:71:a1:41:10:e4:a2:13:a3:55:df:e1:
b2:9f:6b:f2:f6:47:2b:7c:83:ed:ba:74:69:f9:8e:
c2:9a:10:97:8f:cc:26:b2:d8:4f:af:48:77:4d:0a:
23:a0:67:36:99:8d:5b:8b:88:79:7d:d9:60:d4:11:
b0:62:e9:ca:7c:ab:d4:3b:c5:9f:bd:99:76:74:36:
58:90:06:68:21:d0:f5:f9:68:f2:dc:b9:29:3a:a5:
4c:a0:ea:e9:23:ca:0f:59:7c:dd:ca:4a:9e:0c:24:
b5:cf:76:1a:94:54:ec:10:ab:9e:47:c7:e5:72:40:
4c:de:2b:e5:91:4d:ce:d0:1b:db:fe:19:e0:af:ee:
2e:c3:44:da:7d:5f:ed:32:f3:71:74:94:28:74:68:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:4C:A6:1D:CA:BF:FA:89:11:28:C3:D3:95:71:1B:C1:DB:B3:10
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9a:43:f3:06:e4:06:4e:6b:c4:71:bf:e4:26:85:4d:9a:a1:
00:9d:e0:90:90:d8:7d:96:76:86:aa:74:7a:52:19:ef:44:f2:
d4:e7:3c:36:4d:a4:55:57:9d:25:08:c3:98:9b:9e:ae:5a:49:
86:79:8a:5d:96:b1:9d:77:41:49:9b:e7:3b:f6:83:e9:23:9c:
8f:73:25:d9:ab:01:8a:0d:43:59:b0:1d:ca:0a:ce:99:74:a6:
96:c1:6b:5c:8e:b8:df:3d:73:eb:0e:bf:df:cc:8d:a3:9d:76:
73:1f:43:36:ce:7c:98:58:c2:38:d8:59:dd:43:1c:31:85:3d:
9b:2f:b9:4d:65:53:89:ca:2f:f3:48:58:e0:62:bd:01:0a:5f:
51:15:9a:86:26:e2:1a:ae:b3:16:8a:21:fd:d7:7e:1f:93:c3:
db:ad:70:ed:f3:0f:73:c0:d2:c6:a2:83:0a:bd:dd:fe:c5:8b:
0e:2c:ea:53:d5:31:d2:37:fc:8f:d6:66:cb:1b:c0:9b:4e:3f:
24:fe:bf:51:1d:a6:1b:7a:38:6c:bf:0c:0f:56:98:4a:cc:a1:
eb:2a:2b:01:3e:c4:d2:85:df:f0:f1:24:b3:79:0d:0e:ae:26:
b0:0c:20:22:b0:af:51:25:00:b9:c0:23:5b:b6:44:f2:f2:fc:
ae:8f:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:59:03 2025 by rpki-client