Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: IDlXmdkX6ZLs0f1gnrE8QozrY6Nhky/VDWDYXsOqyTc=
Subject key identifier: 5D:F7:34:E2:57:29:0A:12:66:DC:A6:8B:12:48:AF:83:85:84:F9:74
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 01969FACF14EA2C954B5CD9755950A123A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 09:00:33 +0000
Manifest this update: Mon 05 May 2025 09:00:33 +0000
Manifest next update: Tue 06 May 2025 09:00:33 +0000
Files and hashes: 1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: G14KxhGjBGKL0QEMv2SaxsJ1RwdhCWpULMiwHRJnFdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:f1:4e:a2:c9:54:b5:cd:97:55:95:0a:12:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: May 5 09:00:33 2025 GMT
Not After : May 6 09:00:33 2025 GMT
Subject: CN=5df734e257290a1266dca68b1248af838584f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:46:3a:f1:95:e9:50:5d:51:eb:ca:2a:2b:
ce:29:8f:37:9c:bf:d6:17:cc:87:df:56:66:57:18:
d0:55:af:07:67:76:fb:7f:52:c3:b7:ee:ee:30:ef:
49:54:08:ea:ef:34:80:af:2d:58:4d:2f:9b:cb:60:
37:1a:12:36:58:80:32:17:d4:ac:fc:50:cb:71:b4:
9d:09:05:f9:4f:2b:c9:31:05:54:b5:32:8d:c8:5d:
6c:53:a8:c7:a2:87:28:a1:f4:7b:1b:74:68:67:24:
d8:a5:1e:46:78:41:ca:08:c8:88:ce:0f:1e:a6:d3:
05:61:14:43:64:47:ad:3e:27:c9:3b:f1:ac:35:bd:
9a:0b:5b:6a:6a:fc:be:76:c0:e2:4b:75:6c:13:4f:
43:f0:48:c4:be:11:b3:e4:73:29:db:f8:fc:1b:f0:
d9:1a:fc:51:1d:e1:b8:6d:7d:da:46:95:9a:7d:53:
77:c2:05:9a:a6:9a:de:c9:48:71:0e:66:11:9d:50:
9c:46:b3:3b:cf:c8:6a:c8:ce:87:07:31:27:38:37:
54:6d:d5:b3:40:bf:00:27:a6:97:de:b9:e8:66:a9:
61:5d:63:fd:e0:98:24:8f:75:2f:fc:2f:a5:7e:b4:
58:7f:1a:a4:f1:f2:4d:d7:76:dc:90:1a:11:68:22:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:34:E2:57:29:0A:12:66:DC:A6:8B:12:48:AF:83:85:84:F9:74
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fd:1e:35:8b:46:f6:97:80:de:8a:4b:10:c5:fd:2a:e5:32:
1d:26:af:c8:c0:bf:51:19:3b:60:23:53:22:ca:68:58:74:35:
a6:79:b1:d7:02:de:ae:31:eb:6b:4f:70:cd:5f:bd:0c:2c:f3:
29:62:95:35:ba:2e:bd:0c:f8:c2:1d:53:a1:c9:43:dc:08:08:
56:13:42:cd:68:63:a4:d6:1d:e6:24:9a:a9:e0:ed:30:a6:6a:
76:c4:54:12:0d:81:91:2b:a6:b7:cb:53:87:fb:b7:b0:43:5f:
e5:d0:99:33:a0:83:1b:23:ee:5a:93:2e:f1:74:4b:e1:a2:06:
24:41:4d:05:19:14:4e:72:3c:c3:3f:bc:25:45:8e:fa:d3:87:
0a:b2:89:9e:ec:ab:f6:28:76:b7:9d:eb:e1:f4:ee:26:a4:50:
59:ed:51:27:b9:e3:47:57:13:df:1d:76:fc:62:06:83:35:25:
f2:27:fa:b7:52:ec:83:75:26:40:25:99:29:39:5b:12:98:c9:
16:f3:5f:6b:82:8b:29:d7:5f:c2:4a:f8:89:e6:3f:9f:bd:20:
67:21:66:b6:e2:0d:62:ef:6a:7f:e2:28:fc:4f:5c:16:e3:c8:
dc:87:15:11:70:9b:a8:9e:6c:9a:e8:3b:9d:fb:d5:dd:19:98:
71:23:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:41:46 2025 by rpki-client