Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: ePFd7OKBmCg/7iz8VA7itdxBfK/c5qHgIaVHu28Ftos=
Subject key identifier: EE:D3:FC:95:2A:9A:60:35:BC:E6:31:F6:18:DA:23:59:DC:EC:9E:A0
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 01969D881099CECA0625FD5F14D29770E1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 04EF
Signing time: Sun 04 May 2025 23:01:02 +0000
Manifest this update: Sun 04 May 2025 23:01:02 +0000
Manifest next update: Mon 05 May 2025 23:01:02 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: SCUeMznQUTNkMCunioLMWi6Igslx0qdvyf9fpz+yq9o=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:88:10:99:ce:ca:06:25:fd:5f:14:d2:97:70:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: May 4 23:01:02 2025 GMT
Not After : May 5 23:01:02 2025 GMT
Subject: CN=eed3fc952a9a6035bce631f618da2359dcec9ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:28:1c:c6:af:13:d5:5a:1c:15:63:df:32:
96:50:14:90:39:f8:8c:12:ef:c4:31:2d:90:1e:9e:
d7:ac:ce:8c:40:e0:ab:bd:41:89:81:72:18:40:a2:
a2:00:eb:cd:a6:cf:45:3c:e5:9c:8d:ee:3f:e4:05:
b0:12:26:66:92:62:c2:12:66:fa:ae:fb:89:82:80:
fc:ba:34:16:b9:e0:d3:95:54:27:25:25:ce:30:68:
f0:bf:3c:ea:07:d9:dc:d7:99:c9:95:b2:72:0e:92:
7d:af:e7:b3:f2:5a:a6:57:34:7e:22:80:c3:99:68:
20:3e:11:45:c1:b4:28:c9:12:6e:83:9d:17:8e:c7:
40:1f:3b:86:d6:3b:da:38:10:c9:a6:ef:ec:66:3d:
15:7b:50:9a:24:95:ef:eb:35:01:3c:c3:22:a7:ec:
ea:6f:f2:b5:d1:9c:cd:ee:62:e8:c9:b3:c8:06:e2:
50:b6:b9:89:81:0c:e2:c9:6f:6e:9b:96:1d:ab:15:
87:c3:f4:34:6f:f9:44:3b:9d:71:74:f9:25:9b:e8:
44:b0:8d:20:40:bc:04:0a:6f:ba:c3:05:fe:55:4d:
cd:4f:f9:07:5f:33:b4:ae:30:eb:df:29:ac:e0:be:
44:58:9e:0d:a5:22:83:ff:be:75:2c:ff:c1:d8:eb:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:FC:95:2A:9A:60:35:BC:E6:31:F6:18:DA:23:59:DC:EC:9E:A0
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4b:0b:66:c5:1d:e2:da:92:cd:f2:53:ac:95:37:9c:1f:24:
54:8a:d9:98:66:7f:d0:7a:11:19:21:8e:a1:e2:21:9f:b2:d4:
c5:ce:27:09:cb:cf:7b:f9:47:55:9e:6f:16:37:f5:80:74:63:
98:dc:46:c4:3f:bb:0b:6d:c5:34:4d:39:ae:37:6c:6e:19:c1:
b0:12:c5:47:14:24:e5:2d:a6:fd:ee:05:79:29:83:12:ea:67:
69:d0:4c:1d:1c:51:c7:49:27:c2:36:76:8f:98:d1:50:38:c8:
2e:b5:b5:cb:ec:e1:c1:f2:ba:55:2b:5e:16:d2:2c:7a:88:0f:
ec:44:58:07:44:44:ee:df:66:cb:eb:5f:7c:df:6c:94:05:b0:
06:a4:0f:f0:5a:31:ab:4a:c2:7b:a4:d7:56:88:2c:d9:1d:cb:
d4:57:3f:09:7b:31:ab:38:8c:45:77:3d:59:74:30:4c:75:fa:
e1:0d:60:52:86:73:1f:d6:ed:06:90:4e:60:23:70:ca:a1:4a:
3c:76:e2:e9:4f:ea:a8:49:df:58:d7:dd:95:6c:2a:5a:65:f2:
cf:7d:b0:fc:41:67:10:04:f8:9f:b3:68:39:db:be:ba:49:9b:
dd:30:16:71:49:f3:33:55:2e:f5:65:94:ec:35:94:02:5c:70:
cd:f4:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:36:42 2025 by rpki-client