Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: VBMkuWvqSJtvsPLLH5mz//EVIsHDTCxDnwpXbWUNQWc=
Subject key identifier: 69:3A:8B:9C:59:97:D1:F4:8A:7B:14:72:47:8A:2E:15:63:4D:D8:B8
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 0196C45E304EA0AFE3B6CE8A2EB9DD8F18D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1560
Signing time: Mon 12 May 2025 12:00:29 +0000
Manifest this update: Mon 12 May 2025 12:00:29 +0000
Manifest next update: Tue 13 May 2025 12:00:29 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: RaiQVQ2vgDpy05mYdCtRfEDyLcMFm8JpsMAgxUwCnHU=)
2: 2Ksn55yLgCkUTD5aLOt0Y8z_PQA.roa (hash: YGbzAqhxgCQickL+xdM1b5h2KIGE4igLXR/EObDj07M=)
3: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
4: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
6: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:30:4e:a0:af:e3:b6:ce:8a:2e:b9:dd:8f:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: May 12 12:00:29 2025 GMT
Not After : May 13 12:00:29 2025 GMT
Subject: CN=693a8b9c5997d1f48a7b1472478a2e15634dd8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:01:e8:75:dc:38:a3:07:66:0a:8a:52:eb:
b7:1c:5b:64:3f:1c:80:74:f4:c6:82:2c:2b:ee:92:
3d:78:79:8e:a9:90:ee:73:d5:01:aa:e1:9d:e5:76:
27:75:b5:bb:7e:33:76:d1:f2:bb:48:d4:dd:13:42:
91:fb:f9:48:9b:8d:57:6b:96:e5:d6:46:aa:52:b2:
d2:01:54:f9:d3:ae:66:56:ea:ce:61:ef:65:07:84:
42:21:94:25:50:00:f4:61:89:79:2e:27:77:89:db:
a4:05:8e:09:42:fb:72:4e:78:66:e1:2e:84:8a:6f:
da:e4:41:1b:ee:2f:b2:b4:a4:1c:ec:09:ce:50:8f:
67:0e:41:4c:07:96:f5:4a:6e:02:2b:70:a0:8a:36:
17:8b:79:ff:27:18:80:14:0b:f9:1f:56:bc:d5:78:
a0:12:3e:57:a0:8f:d7:3f:c2:09:e7:16:27:87:94:
3f:47:82:7a:10:11:7e:52:94:ae:41:f5:75:52:0c:
fb:ee:b0:22:6d:a1:e1:4e:ec:54:61:77:2f:83:59:
57:e9:32:53:a8:5e:2e:9f:fb:fe:ad:ae:56:01:f4:
bd:a8:25:5b:cd:d0:ab:54:65:ca:2f:96:9f:a5:dc:
41:60:d2:ed:59:d2:e9:b5:00:5c:8d:4b:e9:94:d2:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:8B:9C:59:97:D1:F4:8A:7B:14:72:47:8A:2E:15:63:4D:D8:B8
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:10:c4:e8:54:11:5c:19:48:8b:01:00:11:11:61:a4:9b:
e8:4b:ea:91:57:f0:bb:ea:e0:28:48:7c:75:6f:27:63:be:2f:
75:db:a8:37:34:b5:a5:a7:3b:23:6a:82:e2:d9:b5:b3:a3:48:
4e:c1:97:ee:b4:41:d1:e8:84:32:1b:3c:e9:ee:06:65:ab:26:
19:3d:d0:44:95:04:e7:87:46:0d:ac:d5:9f:94:a5:ca:09:ed:
8c:2c:95:81:da:7c:a6:94:ed:b6:7b:74:3d:ca:ef:d8:88:3f:
b9:bc:83:cc:53:d7:46:eb:5f:44:1f:af:bc:1f:d1:3c:48:c6:
ab:3d:3e:cb:e1:76:1c:40:bf:b9:0d:68:72:b0:0a:44:db:45:
8a:07:23:3b:03:42:89:ca:5d:77:9d:d3:78:d4:10:37:9f:13:
1b:a2:0b:d5:36:b3:bf:7e:d6:fd:4d:72:49:65:6f:23:15:b0:
ec:56:81:89:63:ce:4b:29:ab:73:d7:b3:10:7c:4b:05:9e:ae:
03:e0:57:8e:e8:3a:f3:a7:5c:e4:22:64:6a:6e:75:ec:a2:19:
6f:5a:9c:4e:47:b9:fd:be:d3:47:f8:fc:72:1f:d1:20:20:98:
1b:4b:72:46:47:c6:1a:cd:5c:94:96:be:fe:f6:3c:cf:8d:7f:
3f:b8:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:19:44 2025 by rpki-client