Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: kk6AFChPjguJS1kzEiO12X+wC2bqGOOvvjvmT+gOM14=
Subject key identifier: D8:12:B6:4F:06:61:5C:2D:78:94:0F:0A:7F:0C:7F:3B:E9:44:D6:40
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 0196778CA36F26B79C300F29F5F4734B9BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 14:00:27 +0000
Manifest this update: Sun 27 Apr 2025 14:00:27 +0000
Manifest next update: Mon 28 Apr 2025 14:00:27 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: R+4A65vgHccJ6j3hSZXocBI64KsPRwxjLpUc1c1wQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:a3:6f:26:b7:9c:30:0f:29:f5:f4:73:4b:9b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Apr 27 14:00:27 2025 GMT
Not After : Apr 28 14:00:27 2025 GMT
Subject: CN=d812b64f06615c2d78940f0a7f0c7f3be944d640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:be:49:f5:1f:0b:ea:9f:bf:7a:ce:3f:62:
ed:ff:55:bd:62:2d:2e:05:20:71:a0:a7:f8:c0:0e:
28:8c:c7:35:d4:b3:aa:eb:c8:21:f7:d0:4c:25:1c:
4b:06:be:9c:ad:11:88:9c:f7:a8:ec:bf:73:9c:e9:
f3:46:4d:c0:d5:2b:5a:d9:47:4c:c3:4b:8d:b4:c7:
20:4a:e2:73:cf:67:aa:ee:45:58:e5:19:48:2a:ba:
82:17:c1:47:82:48:c5:d9:de:06:f5:a7:a2:70:05:
1c:5f:dc:90:41:3f:d5:bf:8d:63:a9:fb:75:0c:5c:
09:76:aa:f8:c1:8b:64:ce:29:15:d0:1f:77:a0:b3:
28:68:ac:00:45:0f:b1:fb:48:11:98:6f:e9:15:57:
45:36:70:0f:7c:44:44:cc:ab:78:51:11:6c:f8:be:
8f:d8:b2:4a:39:94:b6:27:3b:d6:a5:18:b2:98:26:
ff:de:33:03:ba:8c:4b:86:3c:6e:31:47:0a:d3:5e:
b3:26:97:5e:18:1b:bd:85:e8:a7:8e:05:11:19:d3:
35:08:7f:26:11:5a:e9:7a:46:0c:92:37:07:3a:09:
53:15:62:b9:36:90:fa:b1:f6:11:1e:d8:cd:ec:90:
c4:f2:76:2f:68:7a:94:1c:2e:d9:4b:2c:2e:6a:69:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:B6:4F:06:61:5C:2D:78:94:0F:0A:7F:0C:7F:3B:E9:44:D6:40
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:30:b9:b1:6f:62:8b:aa:8f:17:7d:77:c7:04:76:c9:87:c3:
d9:e8:c3:70:92:34:62:1c:b4:46:1e:24:99:d3:bb:4b:d1:4a:
60:9b:e7:95:5b:e7:02:f1:6c:50:7b:de:70:6e:f4:55:34:a2:
ad:6c:86:d4:18:28:0a:27:a7:6c:ca:6d:60:36:35:7c:a8:38:
ec:85:b2:e5:a2:6c:c6:2c:d3:3e:e6:75:78:dc:e4:37:46:b6:
03:32:d6:c1:63:72:92:29:a1:63:a5:b9:3d:47:3c:f2:b2:de:
d6:50:e9:4b:1f:80:11:99:87:7e:67:f1:f7:45:b6:0f:fd:0d:
3d:d2:3d:23:94:98:48:ae:a0:c1:7d:3a:51:35:72:82:39:4a:
e7:7a:9e:d0:40:23:0e:2c:65:c4:bb:85:ff:e8:c3:f0:34:ab:
d2:f8:d4:b5:a8:e2:69:f9:46:3a:7f:85:ec:ef:a0:44:b5:b8:
20:03:c8:f0:1a:91:cb:7c:30:b9:db:04:da:15:37:9f:ea:48:
85:2d:41:c3:6c:70:c3:f7:7d:b5:be:98:d9:73:3e:41:43:b1:
2b:9d:d7:f4:5c:20:e5:58:a2:80:17:84:05:99:95:ab:90:26:
71:bc:e4:8f:a8:c3:34:33:ee:95:d7:e9:43:27:52:6b:cf:8e:
5b:b5:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:03:09 2025 by rpki-client