Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: qdyrZqsMOML8k2DtwVothGNsWFUHIV5esM1z80inUog=
Subject key identifier: C9:A0:B4:88:61:18:9C:FF:3A:B6:93:42:C7:B1:8A:1F:23:A3:D6:8E
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0196748B5DF0A6C0BD1FA4AD0AE900F1BB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 00:00:12 +0000
Manifest this update: Sun 27 Apr 2025 00:00:12 +0000
Manifest next update: Mon 28 Apr 2025 00:00:12 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: prZkW3uc6iK2UfWcqRlh3fD6mvnQezrz2OtsctR+Bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:5d:f0:a6:c0:bd:1f:a4:ad:0a:e9:00:f1:bb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Apr 27 00:00:12 2025 GMT
Not After : Apr 28 00:00:12 2025 GMT
Subject: CN=c9a0b48861189cff3ab69342c7b18a1f23a3d68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:1d:f5:6a:72:c2:c3:31:cd:f1:3a:95:4a:
e1:2a:45:68:b8:58:3a:9d:b9:f0:cb:07:d0:c7:63:
fc:8b:18:79:43:0b:ce:42:54:a8:8e:88:84:17:06:
7a:f5:c2:00:95:7b:aa:9e:ef:bf:b5:b1:e2:62:de:
ed:0b:fe:9a:be:7e:bc:3a:71:31:1d:c1:4e:39:2a:
c8:d9:2c:6c:fc:b8:bc:c1:b9:aa:17:93:ed:25:a8:
0e:09:e5:ac:cc:fd:60:3b:ab:d8:32:c7:a4:09:e8:
a9:0d:44:0a:2c:38:d4:85:8d:d1:02:88:e6:ee:70:
ab:4a:08:5d:97:95:f9:96:34:e0:5c:e6:07:c8:e5:
ab:7a:35:6c:95:40:ec:68:c1:78:ec:93:2a:74:4f:
35:23:a6:f6:25:63:8f:23:74:7b:96:f7:8c:ff:4b:
9c:79:a6:30:d8:d0:6c:10:ea:97:e8:f5:7d:49:33:
92:06:a9:93:78:cb:67:79:3b:a4:2c:05:83:cd:e0:
07:7b:bd:42:37:86:a9:4d:3e:85:e0:70:e8:15:b4:
b5:05:4e:49:30:6c:d0:fa:b0:db:b5:79:ec:36:5b:
5e:ac:c3:5e:78:1b:15:0f:d8:8d:f0:09:33:e4:a3:
94:05:b7:9c:bc:d6:c1:f8:55:5f:35:dd:2b:25:80:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:B4:88:61:18:9C:FF:3A:B6:93:42:C7:B1:8A:1F:23:A3:D6:8E
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:f3:84:7d:ce:0c:b4:87:4b:cc:10:3a:6a:f8:2e:82:58:
0f:ed:5f:b7:58:9c:d7:86:7b:78:79:d8:67:be:93:ef:f8:e5:
b7:3c:6e:d2:db:c7:88:dd:fb:d5:5a:72:d3:40:45:85:df:de:
d5:f7:1e:f4:aa:66:07:f9:67:c5:e3:b0:af:de:bb:05:e1:b3:
2a:91:4e:42:9d:b8:38:2b:92:ae:1a:d2:4c:21:77:68:9d:33:
d4:97:5b:85:48:f5:69:5b:21:d9:70:89:4c:26:c7:2c:84:2d:
96:4f:3b:0e:ac:4a:19:80:fb:be:83:03:76:51:d0:25:85:11:
ff:ea:89:d7:fd:a6:70:d6:8c:fc:87:49:70:f9:b4:81:c6:a2:
50:d2:1b:df:bc:7e:7e:88:47:a4:93:0d:9a:6f:13:1f:72:85:
0b:ea:2e:aa:26:75:58:71:2a:aa:19:df:4f:52:b9:e4:23:be:
6d:9e:70:e3:4d:49:d5:8d:57:78:73:a3:19:6e:91:cc:6f:ba:
10:e1:a5:d0:31:c2:4e:88:91:e1:55:99:a5:b5:1c:1b:c3:7a:
f9:9b:c8:18:7b:13:b1:ac:a9:47:4b:38:b0:90:2f:08:8f:59:
1d:76:f7:e4:71:03:5c:81:4b:1b:b4:86:ac:1c:fe:b9:86:db:
b7:ed:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:09:20 2025 by rpki-client