Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: orm9tM1DJ7gv8kxiWND1ldYOQ/QIRuYRtNm8ilKekOU=
Subject key identifier: D8:EF:75:C3:2C:49:26:14:D9:00:80:D5:09:72:79:65:FA:81:30:1E
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 0196AA9ED3EDFCB453EE2ECBF0DF53088B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 12:00:57 +0000
Manifest this update: Wed 07 May 2025 12:00:57 +0000
Manifest next update: Thu 08 May 2025 12:00:57 +0000
Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: wfK8DbDKIZlYBId9B+hzlENTEw9ATMhx6XNvMcZFEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:d3:ed:fc:b4:53:ee:2e:cb:f0:df:53:08:8b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: May 7 12:00:57 2025 GMT
Not After : May 8 12:00:57 2025 GMT
Subject: CN=d8ef75c32c492614d90080d509727965fa81301e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:2e:b7:02:13:e4:25:b4:30:7f:53:0c:1e:
34:3a:5a:37:71:16:f5:43:23:a2:ed:b9:46:d1:bc:
5c:c0:0f:2c:f4:8f:36:38:ad:6a:03:2e:3d:d8:b2:
2d:20:35:1b:a0:35:b4:8b:08:c4:88:e7:10:cd:6a:
15:1e:16:19:16:b1:38:78:d5:7d:b1:51:f9:1e:a6:
85:44:a2:dd:37:73:b6:c0:e5:a5:5a:d2:7d:8f:ed:
1d:b8:af:f2:4c:2e:5d:a1:56:85:e3:af:e5:ec:74:
c4:4f:eb:d5:d5:99:e0:6f:d2:1c:ea:27:b1:e7:ac:
22:f9:d0:c2:92:6b:c3:05:6a:03:0e:89:ee:27:87:
10:d0:6a:96:52:b6:11:5a:38:89:ee:59:7e:18:18:
08:fd:90:d0:c4:c9:ba:5e:5d:9e:07:60:12:cc:ad:
57:20:0f:a1:7b:4d:36:01:4c:32:70:dc:ba:70:b0:
5c:80:d9:d5:8b:60:af:a4:0b:b2:da:dc:d2:3f:44:
c2:b3:29:56:68:6a:52:67:04:36:c6:ee:c9:5e:e6:
95:7f:25:b2:9e:b1:91:1c:c6:90:84:d0:b2:dd:46:
fd:c3:b7:df:40:2f:e3:f1:3b:35:62:56:7f:6f:21:
c8:8b:1b:60:0e:c9:a5:31:01:39:ca:16:db:c6:af:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:75:C3:2C:49:26:14:D9:00:80:D5:09:72:79:65:FA:81:30:1E
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d7:eb:09:ee:56:eb:b3:9b:a1:7e:25:5b:38:cc:60:bc:d8:
55:ac:de:cb:fd:79:0b:81:71:d1:d4:8a:44:d7:5e:2c:49:01:
5e:e0:ad:07:a7:dd:55:a5:1b:3e:da:1b:51:71:c5:d2:33:ee:
15:ef:05:93:81:1e:3d:a1:ac:26:43:48:a0:e6:dc:06:3f:7c:
7e:2f:5e:33:48:66:3a:91:f3:94:f3:6a:f6:42:3a:a1:84:3f:
94:59:4b:66:92:6d:95:7e:dc:90:6c:c7:70:cd:c7:83:7b:3e:
cc:e4:91:18:21:e7:8c:d5:3d:9a:f5:b8:7b:bb:f4:1c:9f:eb:
66:e9:22:8e:1d:4f:a2:71:a6:1d:79:b1:74:a6:4b:8d:75:67:
29:5f:1d:d1:bf:ee:c2:59:45:1c:67:bd:29:97:0b:81:c8:f7:
79:9f:1f:82:31:92:d7:00:ce:86:41:99:69:7f:7d:a7:3a:9e:
09:86:a8:a3:19:4d:7d:08:c3:83:8e:b1:bb:af:af:ab:ea:05:
d6:c3:e2:20:93:c4:d3:cc:0f:49:1b:67:b8:71:7c:29:23:75:
16:82:65:5a:fc:e1:cf:0e:a1:61:e3:1f:15:24:e6:4a:b3:07:
d8:9a:e7:df:d8:cf:8c:e1:47:ce:88:38:0c:33:8c:27:32:d5:
6b:64:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:58:29 2025 by rpki-client