Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: FzF11CQ/82AQJaLni9dbuHlJV1rJjowc+jq2KllNYAU=
Subject key identifier: 30:E2:D7:83:2A:D6:BD:8F:27:1B:9F:68:4D:8C:16:3A:0A:BD:25:63
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 019690A7D8DDFA960A3670C3FC30B153AACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1264
Signing time: Fri 02 May 2025 11:00:41 +0000
Manifest this update: Fri 02 May 2025 11:00:41 +0000
Manifest next update: Sat 03 May 2025 11:00:41 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: dA5GFiNHx/VnylUYPewdniHoPIk0ElC9oDmyI5VV8JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:d8:dd:fa:96:0a:36:70:c3:fc:30:b1:53:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: May 2 11:00:41 2025 GMT
Not After : May 3 11:00:41 2025 GMT
Subject: CN=30e2d7832ad6bd8f271b9f684d8c163a0abd2563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:6a:e0:80:2d:c4:5e:0c:4b:1a:77:e7:53:
5e:81:bf:c1:d2:31:09:a0:a6:64:06:0f:76:cd:89:
f5:6d:37:f4:1c:1a:ac:b8:28:2e:5a:19:38:78:f9:
62:22:4b:f2:14:f2:87:f9:fb:23:ff:30:2c:ae:b4:
86:43:fd:b9:96:da:c2:30:b2:c6:5f:a7:a9:75:06:
d1:3f:34:fa:1a:8c:ff:0f:83:54:5a:4c:be:ad:99:
a9:28:11:ed:aa:e3:6d:6f:94:fc:19:15:b2:d2:d9:
a2:a3:4c:17:35:c4:0e:d4:f1:26:94:5a:f4:80:90:
49:8b:70:60:f1:3a:49:8c:51:5b:93:2b:5e:a5:91:
d8:fd:92:d5:d2:7a:25:3c:15:31:23:5f:04:2e:34:
c7:05:71:b2:e9:44:38:07:3e:7f:05:04:a4:61:ef:
23:39:c4:d5:15:45:9d:da:ef:24:da:f8:c8:49:ae:
21:4f:27:e7:dc:74:dd:d3:3d:28:86:00:83:15:5c:
e0:f9:d2:a5:d9:4e:a8:4e:8a:06:0a:36:91:26:0a:
a7:ac:41:4e:d8:66:31:74:e6:5c:02:d2:56:f6:a2:
2c:c1:49:be:7a:3b:a0:eb:fa:18:69:cd:96:bb:21:
61:84:32:f6:0f:3a:04:1f:da:24:52:75:24:8b:19:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:D7:83:2A:D6:BD:8F:27:1B:9F:68:4D:8C:16:3A:0A:BD:25:63
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:68:79:f0:c5:cf:a1:55:24:c8:b3:d1:dc:d5:3a:8b:75:1a:
ab:80:f8:86:63:ff:3d:18:1a:85:fe:b0:b9:06:ad:d1:ef:d6:
fb:ab:5d:eb:5b:1f:8c:b5:c2:fb:31:d7:04:df:f9:c4:ab:7d:
6c:1e:6e:7b:c2:c5:07:f2:72:06:79:ba:19:be:3c:88:59:aa:
9f:13:9b:c0:61:31:3d:12:0e:9e:2c:26:bc:27:d6:6a:42:56:
69:96:48:63:a1:d5:01:8c:5a:b1:fd:6b:62:a5:8c:95:87:e9:
4d:e6:1f:5e:8f:e2:a5:aa:0f:4e:43:26:8c:d8:2f:a3:18:31:
b1:fd:fe:c5:fd:9b:c4:a9:23:19:2f:ca:8b:71:83:8f:18:34:
e3:93:d1:d0:2a:d5:8c:56:0c:75:a4:63:5f:4b:98:7c:11:4c:
2c:71:86:94:7d:a8:6a:b9:6b:0d:b0:4b:ff:d2:df:06:7b:5d:
e7:4a:dc:a5:22:f7:69:65:04:0a:5e:e7:4d:98:50:17:0b:2e:
57:68:5b:03:08:07:e2:bf:ee:69:a2:f8:d0:a9:9e:ef:b8:00:
8f:a6:df:04:3d:41:14:74:0c:93:44:bf:61:01:08:5f:15:d7:
86:26:ef:d7:46:bf:89:21:26:35:b1:5e:20:2c:32:a1:14:76:
48:fe:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:26:09 2025 by rpki-client