Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: YVsFew5UBqrc/NwBCw90FPkEWUYeossXnqajhHQna5g=
Subject key identifier: 9A:87:90:25:08:C2:2F:E5:20:19:85:2A:09:F4:B4:6F:16:FB:F4:02
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0196764327FDF36737B0D5224284F4B6678F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1190
Signing time: Sun 27 Apr 2025 08:00:34 +0000
Manifest this update: Sun 27 Apr 2025 08:00:34 +0000
Manifest next update: Mon 28 Apr 2025 08:00:34 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: 4cJ4P+SmJbKP9oXZUM0xnZ2VFnSs4vmOJE2lY31OCnI=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:27:fd:f3:67:37:b0:d5:22:42:84:f4:b6:67:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Apr 27 08:00:34 2025 GMT
Not After : Apr 28 08:00:34 2025 GMT
Subject: CN=9a87902508c22fe52019852a09f4b46f16fbf402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:1a:d2:65:22:65:44:1d:9a:a2:03:c5:76:
8f:5c:5f:02:0c:d8:9e:3d:1b:ad:c2:96:e7:eb:4d:
39:8b:93:ec:08:0e:e2:51:c6:4c:45:af:6b:9a:c6:
e3:4a:d8:2f:22:98:b3:1a:43:e4:3e:b2:e4:09:88:
a0:78:20:f8:f2:b6:6c:82:5a:44:ba:4f:e7:c3:62:
5c:8a:95:f9:36:45:e9:f1:2f:e4:7e:f3:54:9f:62:
39:7d:1f:47:de:4f:10:1d:af:04:b1:04:94:54:ea:
f9:85:04:89:6b:fa:97:79:60:2a:30:58:01:53:29:
99:96:30:91:c1:76:0b:d1:0a:3c:c4:d2:a7:6d:cb:
8a:fc:0c:65:0d:9b:07:8e:18:34:fb:07:aa:96:14:
6a:9d:80:e6:56:cd:ea:55:83:29:1a:93:cf:89:0a:
97:25:a8:39:a7:da:d3:2a:70:18:e8:ea:97:bf:32:
e7:ab:6e:4b:ee:65:94:4d:c6:0b:d0:41:14:da:0b:
81:01:8e:24:9c:cd:00:e4:d6:20:87:e6:65:3e:fa:
bc:88:16:db:36:6c:c4:71:ad:5e:9e:61:e6:e4:78:
61:da:3e:d5:51:50:20:17:7a:05:fe:c4:99:f2:83:
1d:ee:7c:54:af:be:3a:cc:49:6a:98:76:c1:08:cb:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:90:25:08:C2:2F:E5:20:19:85:2A:09:F4:B4:6F:16:FB:F4:02
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:c0:12:ad:c1:ee:ad:d9:d7:06:99:f6:77:fc:6f:b4:19:
34:39:65:78:d4:85:0d:5d:57:4a:bd:50:34:72:29:40:f8:01:
8a:fb:1e:d4:17:01:c8:41:6e:f7:6a:41:4c:cd:ab:25:88:0b:
11:25:5c:ac:f8:81:09:b3:15:e6:62:fb:dc:64:98:42:e1:94:
5a:28:65:6f:db:38:5b:f3:6e:66:9b:f8:75:a0:c9:8c:d2:80:
aa:e5:ea:f4:9b:50:99:59:10:db:e4:e7:e0:fa:a3:9e:fb:63:
11:d6:ff:9f:e5:19:81:c9:59:27:dc:86:b0:14:a1:05:28:d6:
f1:9b:a7:d0:16:37:be:05:57:c2:04:1f:af:ce:be:94:a2:c0:
ca:88:ea:b1:7e:37:2a:15:7f:d4:b8:1d:00:61:de:a9:7f:d8:
08:95:2f:8f:74:8d:8f:bb:97:b8:17:7e:a1:ee:04:59:69:04:
2c:21:67:00:97:88:a8:84:5f:ad:c7:47:c2:01:af:e1:b4:f3:
7c:d3:e5:d7:cd:d7:3a:ee:62:01:a3:93:f9:6b:b4:cf:ee:a8:
45:f7:1d:b1:26:59:26:fc:cd:f5:64:72:1a:92:28:e8:d2:67:
da:ed:c7:81:29:67:47:cc:bd:4b:d5:63:58:75:bc:d1:83:1b:
c2:32:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:23:46 2025 by rpki-client