Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: N4J5d1JtWu1F2xFGgoB08foeKseq13UoQPcyMBcxmCw=
Subject key identifier: E2:A1:06:BE:F3:15:4A:E6:81:D9:8F:0D:AB:4C:7E:E8:1C:73:F1:C4
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 0196A5418EF9A059CC0AF7629241D081DA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 11:00:59 +0000
Manifest this update: Tue 06 May 2025 11:00:59 +0000
Manifest next update: Wed 07 May 2025 11:00:59 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: 09yGzKnxfmWVCsxA57ykfHmAnEDJxw3GGphGL81N8mE=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:8e:f9:a0:59:cc:0a:f7:62:92:41:d0:81:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: May 6 11:00:59 2025 GMT
Not After : May 7 11:00:59 2025 GMT
Subject: CN=e2a106bef3154ae681d98f0dab4c7ee81c73f1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:ee:ce:c4:a2:48:f4:25:fb:e2:58:2c:98:
1e:5e:7b:49:e5:c6:e5:68:db:8e:bd:60:0b:0c:62:
d6:d4:b5:7c:a2:c9:59:93:94:a1:a0:2a:f2:8b:b0:
93:d7:a1:67:40:fa:68:d9:da:a7:31:ec:cb:46:1d:
4a:e6:33:77:1b:12:1e:8c:5d:4e:da:bd:1c:ff:ec:
88:57:a6:1a:da:96:23:4e:c3:3f:9e:01:eb:5c:7b:
65:e4:cc:9b:92:7a:e9:d6:b0:fb:bb:10:02:3a:b9:
21:53:e6:02:35:cf:4f:b0:f2:67:1b:ac:e5:b5:44:
0d:90:6e:1c:db:9f:d5:fa:c7:bc:66:44:92:af:a0:
1b:5f:e6:fe:a7:d6:16:a4:c5:f3:9f:9a:36:c9:f1:
ae:b1:60:cf:ba:a3:ad:27:03:53:f2:3c:86:77:c8:
d2:60:08:de:ce:5e:5b:1e:a3:85:6c:dc:22:f4:cf:
38:13:37:68:b0:90:1a:a1:6c:62:cf:99:23:73:d8:
1b:b7:9f:5a:15:c2:54:da:69:f1:65:4d:d4:90:4c:
9e:ed:75:a3:92:01:81:15:0e:9c:dc:b5:aa:23:50:
e2:2d:7f:34:89:e6:db:5d:f3:b4:ef:dc:ff:c5:c8:
e5:0a:3c:e7:33:f3:24:8e:15:f1:18:80:bf:0b:16:
35:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:06:BE:F3:15:4A:E6:81:D9:8F:0D:AB:4C:7E:E8:1C:73:F1:C4
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:41:76:f8:9a:57:fc:70:81:ba:64:cb:8c:df:e5:27:40:
43:fa:34:5b:b2:38:59:2a:db:fa:42:11:3e:ff:c0:19:b0:6d:
06:43:8c:4c:a5:4c:19:6b:63:ec:1a:95:bb:10:83:b2:2e:47:
2d:a2:f8:94:95:2f:2c:23:69:02:80:ad:e6:e0:2f:6a:d4:f0:
97:99:bc:ea:4f:8b:b6:72:02:33:0f:38:05:9a:19:85:7f:2a:
74:15:a8:06:00:49:2d:81:03:c9:73:0b:91:77:43:3a:aa:d8:
15:cd:6d:85:03:99:98:36:9f:13:b1:ae:ae:66:d3:ed:d9:88:
02:b6:ee:24:88:be:12:bf:c7:d7:b9:3d:f7:0e:b6:eb:f9:ed:
f7:af:e2:0a:9b:27:6b:7b:c8:c2:51:88:5b:11:93:6b:e3:90:
14:27:45:48:f6:d3:0c:9b:fa:f8:29:62:75:5c:41:52:90:12:
9a:1a:27:d0:b4:bd:c7:5d:7f:22:0f:09:3a:b8:be:27:26:83:
e3:38:df:de:72:b4:f3:cf:00:1c:76:84:99:5b:73:a5:d8:66:
ad:01:e2:09:62:b3:38:07:1b:2d:06:d8:64:6f:4e:d8:1f:2c:
46:5f:db:e1:0c:9e:c6:94:b5:f5:40:2c:4a:3d:84:be:69:57:
46:c4:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:34:10 2025 by rpki-client