Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: zmaf1y+8FtlbrI+lEm3PFjTQPndNkU7800rx3i78hkM=
Subject key identifier: 50:2C:3E:35:A0:F7:6F:65:2A:DB:77:7B:51:B2:A2:96:A9:2B:6B:3A
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 01969E9AF53599A9AE3D02F7AE2260BBBFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 04:01:17 +0000
Manifest this update: Mon 05 May 2025 04:01:17 +0000
Manifest next update: Tue 06 May 2025 04:01:17 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: wamChwQWWBXczUU3XBBdDoIuXZUqzxpVGIyvdeDM2lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:f5:35:99:a9:ae:3d:02:f7:ae:22:60:bb:bf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: May 5 04:01:17 2025 GMT
Not After : May 6 04:01:17 2025 GMT
Subject: CN=502c3e35a0f76f652adb777b51b2a296a92b6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:99:bb:0b:4e:38:e1:c8:3f:85:9d:16:6e:
5a:58:80:6a:a9:ef:ce:0c:ff:3c:2b:3c:52:ab:88:
18:23:0a:18:a7:f2:ba:a0:e5:73:37:4c:2f:01:bc:
a8:c8:db:7e:9c:40:65:a0:e2:5a:a1:d9:a1:44:f4:
e7:ad:9c:5b:8e:13:a4:13:a1:a3:d3:27:17:cf:46:
52:11:1c:b5:32:ad:bc:16:94:3f:58:fa:1f:13:17:
32:e9:f9:a4:2f:8b:5e:c3:b3:ff:da:61:10:2c:f8:
5e:55:60:f3:cf:e1:eb:39:01:a8:d5:14:d3:26:38:
59:0c:a4:05:26:d7:10:f7:3c:12:c3:9e:df:a4:18:
e7:e8:df:5a:42:26:9c:72:87:89:fc:8b:e7:ce:e5:
7d:04:27:80:e8:40:ab:6e:99:5b:85:2f:67:de:76:
b2:38:3d:9f:49:ec:58:8b:57:54:cf:51:f5:02:24:
94:8f:f9:4e:32:11:f9:f7:fb:a6:36:17:fa:8b:89:
09:da:d3:62:67:59:02:05:26:2f:d9:f5:b2:96:28:
6e:4d:68:53:8c:53:44:d2:16:2e:95:ed:1d:e3:da:
67:0e:a7:6d:44:18:51:b4:f9:99:26:6b:74:be:42:
b7:f5:8b:cc:ce:a2:e1:97:11:f4:d8:82:7c:f0:ea:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2C:3E:35:A0:F7:6F:65:2A:DB:77:7B:51:B2:A2:96:A9:2B:6B:3A
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c3:41:ac:45:d1:59:cf:27:92:6a:6c:db:33:af:38:1b:30:
7b:0a:af:40:97:2b:81:b1:91:1a:08:f1:10:8c:fb:39:31:b4:
ed:c6:96:e7:4b:cc:55:22:50:bd:df:6f:44:0d:17:a6:72:f1:
0f:ac:90:65:60:f2:0d:f5:b2:b8:05:af:42:33:82:9a:08:b0:
d3:82:37:2b:1e:d0:1b:75:a9:5f:6b:64:90:b2:45:7b:cc:0f:
f4:f7:e1:97:f1:50:87:f2:13:c0:33:81:d3:74:4c:90:a4:5f:
75:8a:b9:bd:ea:cc:a9:20:a3:67:15:ee:ed:17:8c:05:f7:d9:
7c:53:92:65:55:fd:e8:0f:db:7d:9a:6f:3e:45:ca:8a:ab:cc:
03:ea:21:df:96:35:c1:88:60:62:f3:02:75:79:53:1e:38:f5:
4a:b3:ed:38:dc:b6:88:35:af:f8:ed:a0:0a:7a:4a:7e:58:6b:
4d:f0:02:64:bf:46:6d:b5:e9:07:fd:95:4b:f2:fc:fa:b7:c9:
06:25:e4:56:e7:5a:7d:4c:3b:03:7c:86:6b:9d:71:5a:c6:c1:
33:d3:9e:2e:0e:98:ba:a3:b7:95:f6:55:f6:44:31:85:40:77:
a7:8b:e8:53:e5:a9:11:a3:b1:ee:69:b9:ae:11:ae:e2:34:b4:
b4:9b:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:15:55 2025 by rpki-client