
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier: rRGnPKg8u/54WUFYNmHX6QaZWiSH/t5tzgX6Lua3Q8I=
Subject key identifier: 95:C4:53:E6:96:87:17:DF:27:ED:C2:6E:74:45:D6:64:CE:A9:1E:72
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 019676B0F549D95019318DFFF58E7782ED97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number: 1523
Signing time: Sun 27 Apr 2025 10:00:30 +0000
Manifest this update: Sun 27 Apr 2025 10:00:30 +0000
Manifest next update: Mon 28 Apr 2025 10:00:30 +0000
Files and hashes: 1: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=)
2: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: 7C5tlzzHdfdXmx5ugz1YnydRGF5zN42n1dEIlsWVzcI=)
3: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=)
4: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=)
5: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=)
6: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:f5:49:d9:50:19:31:8d:ff:f5:8e:77:82:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Apr 27 10:00:30 2025 GMT
Not After : Apr 28 10:00:30 2025 GMT
Subject: CN=95c453e6968717df27edc26e7445d664cea91e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:65:1f:59:81:09:a8:9d:39:ab:5b:3a:d3:
37:cd:74:ff:e3:29:aa:04:69:23:8a:b8:b1:04:b6:
cf:a0:5d:ce:3a:44:cf:89:af:36:e8:2e:82:88:7e:
e4:2c:23:db:be:3f:81:2a:d9:ce:21:3f:d2:ea:6e:
c7:06:ef:5d:64:b6:d9:9f:e7:7e:97:0b:54:57:80:
b0:f9:ea:21:6d:55:9a:4e:06:f1:7a:68:05:67:65:
6d:c2:4a:53:22:0e:3a:d6:7d:41:8d:24:57:dc:dd:
fd:76:da:ce:d2:e1:57:da:23:64:6f:95:2d:c6:02:
8d:c2:c8:31:5e:51:22:d2:71:1d:18:bc:6d:be:c2:
7b:c0:cc:9f:a9:e6:de:0f:5f:df:b3:12:1b:87:73:
2e:52:23:85:07:00:8d:ab:bc:2e:99:20:e9:69:bf:
3a:6d:21:ae:5c:b0:0b:a3:7f:fe:19:52:5c:ed:d2:
09:5a:28:d7:43:25:e2:97:5b:a5:df:de:1e:75:8e:
04:1f:b8:a9:6a:51:88:89:53:25:02:a3:6e:47:66:
05:9a:87:2c:94:25:07:af:6f:d9:a1:5d:7a:00:54:
25:54:fe:a6:c9:90:9f:61:ce:6f:21:5c:24:33:97:
b5:4e:27:38:54:47:41:34:01:f1:2c:3a:17:74:6c:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:53:E6:96:87:17:DF:27:ED:C2:6E:74:45:D6:64:CE:A9:1E:72
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:fd:f4:3e:6d:e7:51:17:49:13:b0:27:c5:c0:7e:aa:5e:
77:e0:45:46:5f:f3:5b:27:69:fb:3b:a2:0f:01:f4:7c:84:6a:
b5:9a:eb:c1:c6:ba:30:4e:19:e1:ba:80:a5:37:b0:bd:2f:ae:
42:68:18:ef:d5:5d:ff:89:c5:77:34:ec:d5:ff:ae:59:32:1b:
aa:b1:7a:f6:4f:77:32:91:e2:dd:7c:72:e3:3a:17:44:7f:a9:
1d:f3:75:4b:74:ab:2a:51:f0:d0:ba:15:bb:29:6c:dd:90:e9:
9b:3b:ba:fd:be:04:5c:80:1f:a1:41:48:d1:94:24:d5:80:6e:
f9:69:88:42:41:96:4f:00:a3:c4:ac:69:3f:59:12:f6:2a:2b:
96:d5:25:24:9a:be:fe:79:e3:d7:5e:ec:ed:13:86:fb:ee:3c:
44:b1:a1:9d:ac:63:65:af:40:0f:bb:2b:c5:39:e9:1e:de:a4:
9a:5b:91:41:c0:5a:8f:51:2c:c7:81:4c:95:ea:ba:5d:70:80:
70:5c:b4:3b:fb:b0:1d:14:cf:7f:e8:5f:6c:ee:1c:67:ab:85:
12:96:0e:30:4f:56:99:22:8f:47:77:aa:69:75:b0:72:4f:aa:
96:a3:e0:58:f9:7b:42:8c:c3:7e:60:a7:d8:e7:cd:1f:f4:ca:
22:2c:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:21:19 2025 by rpki-client