Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: DXt7m9eklfwUZRyeEiTr2dtObGjnf2E9i1Gh6x4zXy4=
Subject key identifier: 1F:92:1E:6F:22:89:94:67:9A:51:83:D6:44:79:88:C6:8B:BE:90:84
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 0196C125FED819C75987BD90BC00F9553F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 21:00:14 +0000
Manifest this update: Sun 11 May 2025 21:00:14 +0000
Manifest next update: Mon 12 May 2025 21:00:14 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: Uz4x/V2XBysRE8hwIcWg7QBGLo5IOTlUZUNwWEO94gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:25:fe:d8:19:c7:59:87:bd:90:bc:00:f9:55:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: May 11 21:00:14 2025 GMT
Not After : May 12 21:00:14 2025 GMT
Subject: CN=1f921e6f228994679a5183d6447988c68bbe9084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:64:23:30:d6:44:33:8b:0f:75:af:01:fe:
af:5a:ce:fd:0a:52:6f:d5:8e:2e:97:f4:1d:05:6e:
80:45:cf:aa:dc:ca:32:36:0d:8a:a1:0f:a1:3d:0a:
29:61:53:34:9e:28:bc:f1:42:22:0b:f9:52:b3:fc:
f5:50:c3:92:97:ac:c3:41:60:39:f1:c6:9e:73:d4:
36:19:aa:c3:d6:21:4a:45:9d:34:47:e3:61:3b:96:
d6:6d:c2:bc:0f:68:32:b8:82:e5:f5:9f:0a:13:92:
d9:04:f5:fd:72:b8:25:60:85:fd:c6:75:a7:82:55:
07:a5:23:bd:0b:23:e3:a1:84:09:1a:c6:d8:70:7e:
f9:a7:90:26:06:14:07:32:97:5c:5c:fa:ae:d1:80:
2c:78:d7:40:42:55:90:60:b3:43:93:09:ec:46:2b:
36:61:74:17:fe:cc:48:a2:da:00:83:15:ef:af:8a:
ae:10:5c:94:ce:48:2e:84:57:02:26:48:e1:d1:92:
69:b6:79:34:47:59:30:cc:bb:cd:e2:6c:59:24:6d:
96:89:dc:3e:00:0f:66:97:93:81:f1:10:d5:64:eb:
1f:8e:71:26:4f:79:0a:83:b7:4d:5d:8c:0b:d3:3b:
5d:d8:00:e3:03:9f:46:0f:b1:f5:14:3e:7d:65:27:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:92:1E:6F:22:89:94:67:9A:51:83:D6:44:79:88:C6:8B:BE:90:84
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c3:0c:ba:6f:7b:0a:22:0c:3a:65:0b:8f:38:56:d5:67:33:
8f:92:e3:a1:af:00:b3:13:58:27:18:44:6d:39:d4:65:93:43:
ce:4e:46:bd:d5:f1:b2:0b:2b:c4:c7:72:d0:9d:a6:db:32:4a:
63:3a:b8:56:f6:16:86:2c:f2:da:3e:8b:07:81:b3:85:9f:bb:
ff:37:8f:8a:f4:7a:a8:64:1c:0b:ef:e6:ef:06:34:70:57:c0:
38:74:f1:08:75:12:57:30:9a:c8:73:39:88:67:be:5f:c3:0e:
c0:ed:f1:b5:e9:e0:78:09:32:7c:76:ca:3a:e1:8a:1b:54:5c:
e1:12:e0:f2:3b:6f:dd:c0:24:39:73:fe:c9:33:66:20:77:11:
93:c5:25:a8:9a:0f:6f:7b:47:75:2a:96:ea:99:4b:14:7e:a4:
ed:99:60:f7:f6:6f:59:b2:55:16:42:3a:21:e8:45:56:9c:0c:
17:89:bd:61:57:8c:d8:6c:55:09:5b:e6:c6:e4:0d:6f:8b:17:
06:43:b5:b4:1a:77:68:4c:a4:b2:15:61:9c:8d:95:ed:33:cb:
44:c9:1d:01:b8:96:5f:d4:06:04:3b:e5:d7:ea:3a:64:9b:ff:
6d:cd:f3:93:55:35:0c:66:44:e5:96:50:ae:0a:39:22:6b:ca:
cc:ee:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:23:57 2025 by rpki-client