Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: eMAvgIaGXKfbZhqb/eRDLLaf/ppcPC4cfBy9UsHlqro=
Subject key identifier: A4:27:38:B0:AE:E6:4A:23:B6:F5:1D:60:AD:11:05:DC:C2:1B:81:F9
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 01969F07E68AB4DB63CE61D977A584ECF394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 06:00:17 +0000
Manifest this update: Mon 05 May 2025 06:00:17 +0000
Manifest next update: Tue 06 May 2025 06:00:17 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: PmlFW3qSX5rTJZKXmm6q7OhVw4Jp8eFtzsmt6RdP9kI=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:e6:8a:b4:db:63:ce:61:d9:77:a5:84:ec:f3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: May 5 06:00:17 2025 GMT
Not After : May 6 06:00:17 2025 GMT
Subject: CN=a42738b0aee64a23b6f51d60ad1105dcc21b81f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:ed:71:5b:cc:0d:2e:64:16:cb:95:d9:cd:
b0:07:c7:fa:b9:69:cc:82:1e:a6:b3:bc:1b:a4:aa:
64:b7:b0:34:98:3b:6e:1f:fd:62:7e:15:c7:a5:14:
14:8c:48:5a:df:94:30:dc:08:88:b1:b0:37:35:d6:
9a:f4:de:23:6f:98:f8:d5:0a:57:a9:35:f9:28:f9:
bf:ad:44:7d:a2:6a:59:25:c5:10:3a:b6:c1:84:17:
0c:1c:58:eb:d7:08:0a:a3:71:b1:1b:32:21:84:9d:
11:29:94:9f:4f:5a:73:87:59:97:8c:e1:e5:e4:39:
d2:32:65:d7:f6:62:02:a8:b3:32:c9:21:39:41:5d:
81:dd:1e:18:88:ca:8c:62:27:97:c9:35:b6:6d:34:
36:fa:45:22:31:c7:13:74:f2:09:e3:80:21:2a:a9:
13:ad:55:80:a1:82:45:fb:c1:35:df:fa:89:ae:99:
47:00:22:27:27:0f:7b:50:71:89:4c:3f:51:80:08:
3a:94:28:6b:63:82:d0:0e:8d:36:fb:cd:e7:02:5a:
ee:0c:dc:10:b7:d1:21:37:9d:d8:e7:f8:b0:f3:32:
d6:3a:67:47:3f:83:26:5d:9d:6d:5b:9c:e9:4c:75:
54:0f:04:df:a5:c6:b3:cc:0a:00:5a:d8:4c:76:a2:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:38:B0:AE:E6:4A:23:B6:F5:1D:60:AD:11:05:DC:C2:1B:81:F9
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:0e:d4:ff:7b:e6:2b:2c:4f:62:ed:09:d6:89:a1:16:31:
2b:38:01:11:a7:73:68:87:0f:c9:0a:cf:0a:51:65:48:bf:89:
94:b1:b8:07:d6:3b:be:d7:a5:b0:8a:a0:a5:ee:1c:23:0c:f0:
f5:04:cb:58:a8:d6:66:0d:53:c9:ca:68:67:a0:2e:70:e6:41:
cd:4c:b2:3c:6c:11:9d:1a:39:51:0f:33:ca:8e:4e:ac:80:a8:
7f:c2:17:1e:c4:17:fc:98:53:92:d3:40:93:5a:36:95:3b:c3:
54:65:28:83:92:14:91:99:14:72:84:17:99:96:51:8a:54:92:
69:24:f2:78:93:84:39:c8:68:87:7a:f7:30:13:ef:eb:c7:fe:
1e:5e:46:a7:b6:6c:2d:c9:7c:11:2d:5a:12:e9:7f:0e:5c:2d:
76:a6:d4:93:72:31:91:9d:4a:2d:58:b3:e6:3a:cd:d9:c9:c2:
82:22:ef:70:71:28:90:84:f3:ff:a1:e3:77:df:6f:c1:d8:3f:
fd:a4:35:10:c3:9d:df:c5:8f:d4:80:f5:d6:5d:24:0f:47:a0:
d1:2e:97:8b:71:f0:9b:a7:40:0e:1e:fb:e3:59:d0:a1:3b:a8:
6e:78:da:37:e3:68:82:e6:55:1a:11:2a:d0:20:af:a3:fc:66:
ea:c7:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:33:05 2025 by rpki-client