Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: wzk3y73iB1SNGmzueI+FUIAv7k/rji7tjzjjCzyq9bc=
Subject key identifier: 7F:C0:2D:97:A7:DF:A8:B1:DD:79:4A:3F:7B:96:EE:F3:6C:26:BB:FE
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 0196BCDBC4C34C1A98D4DABB75C8D116C252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 01:00:41 +0000
Manifest this update: Sun 11 May 2025 01:00:41 +0000
Manifest next update: Mon 12 May 2025 01:00:41 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: eROPg6GaVzfwHkC03AL+lBtQu8OaGVNzqG9v8ISXBaw=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:c4:c3:4c:1a:98:d4:da:bb:75:c8:d1:16:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: May 11 01:00:41 2025 GMT
Not After : May 12 01:00:41 2025 GMT
Subject: CN=7fc02d97a7dfa8b1dd794a3f7b96eef36c26bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:02:20:ac:c5:b0:fa:4d:38:10:5e:79:77:
e8:ac:44:7a:2b:fe:57:42:08:27:22:d7:da:dc:8b:
98:2f:f5:63:6b:14:a5:38:70:d0:3e:c7:89:13:a6:
9d:6d:89:00:52:8a:4d:2c:4b:a6:e8:4b:22:35:0d:
d9:e5:7a:ae:27:e7:9e:10:d1:02:85:85:22:a8:c7:
a2:7f:94:a9:69:fb:b6:b0:a8:51:2a:df:dc:73:ee:
52:1e:1b:f0:62:09:f8:a8:e5:c7:34:e5:aa:e1:a2:
af:e6:ab:5a:49:4a:c1:e5:32:61:1a:5d:83:5d:64:
e0:c8:c2:ea:3c:f9:01:bf:ea:85:99:65:c6:76:55:
88:68:c0:2a:e5:e9:9f:ac:d8:bb:87:a1:2d:a1:a0:
23:f7:e3:c0:38:1c:7c:05:bc:0d:b6:98:b5:4b:bd:
88:61:d2:a9:15:89:e1:e2:26:3b:10:fc:37:17:62:
f0:5f:94:33:bc:c0:0f:c8:24:08:d2:0c:76:c8:bb:
36:3f:8e:e2:98:68:0e:ba:d5:53:a1:c8:65:d0:a6:
22:e7:d0:e7:b1:c9:59:a6:90:a3:d6:04:68:70:43:
e3:59:a7:29:e0:9a:9b:a8:da:20:17:65:3f:fe:4b:
78:57:2c:62:c3:a5:6c:14:35:f9:7e:26:bf:8e:96:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:2D:97:A7:DF:A8:B1:DD:79:4A:3F:7B:96:EE:F3:6C:26:BB:FE
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:86:4a:20:02:5f:fc:71:c2:01:fd:7e:ca:d5:ae:95:38:
cb:a0:c1:fd:f3:e6:63:86:fc:6a:af:b2:e4:c0:4a:29:60:4d:
07:e4:60:95:74:87:1d:b9:94:44:4e:f4:ba:cf:c1:1f:f2:d3:
cb:b4:a8:9d:24:ae:f2:15:df:9f:77:28:67:6a:78:cd:1b:ac:
5a:c7:6c:1c:73:60:9e:b1:1f:13:ef:9d:a2:b0:25:b1:63:66:
ef:01:1d:e0:9c:27:02:ce:14:37:b1:df:bb:80:4a:44:4e:a9:
48:24:50:61:de:f8:07:8f:73:62:d0:30:1f:c6:90:ba:8e:84:
1d:f6:28:cc:6b:92:8e:85:73:60:d9:4f:fc:11:6a:9b:ac:f9:
e9:42:d4:f4:a1:17:9a:c6:30:37:cb:d2:40:6e:52:61:80:79:
aa:84:8e:97:d6:83:26:cc:5e:f5:65:bf:3f:72:de:6d:bf:ee:
ef:99:39:22:a3:63:1d:90:d6:8f:58:ad:73:4f:0c:65:30:4b:
ed:59:f1:ce:05:81:6f:2d:cd:ba:d4:1e:fc:b3:3f:03:14:bc:
5e:0b:0f:9a:5b:fd:63:44:b5:b1:c8:c3:53:d3:a3:5a:21:3e:
8b:d5:13:96:9a:7c:e6:ea:a8:c2:6a:4c:a4:3b:19:ec:06:05:
15:1d:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:32:55 2025 by rpki-client