Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: Zdikv0A6OK6nDZ6KwjF39Hn/JdGMoi49IaEaON8G684=
Subject key identifier: AD:64:8C:F3:79:77:21:71:43:68:0F:74:0C:94:FF:74:E8:E4:A2:05
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 0196B2C5B9D7B5769DAF45B16BBE0EA4D048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1010
Signing time: Fri 09 May 2025 02:00:24 +0000
Manifest this update: Fri 09 May 2025 02:00:24 +0000
Manifest next update: Sat 10 May 2025 02:00:24 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: CgmX6mg+g/sODnTUqecwx8Q1RpGOwt0gk4QkWZFFwAA=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:b9:d7:b5:76:9d:af:45:b1:6b:be:0e:a4:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: May 9 02:00:24 2025 GMT
Not After : May 10 02:00:24 2025 GMT
Subject: CN=ad648cf37977217143680f740c94ff74e8e4a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:23:a0:0c:58:9f:e3:da:cc:61:58:03:36:10:
83:f1:58:34:ad:75:a4:9a:12:9c:ca:c6:0a:ff:96:
bc:63:a7:0e:98:5b:7b:24:1d:1d:07:67:fb:26:90:
a9:8a:aa:d3:6f:c0:4f:f5:f4:64:c7:a7:d5:b0:7d:
26:2c:88:be:bc:d3:19:59:68:ca:22:01:8a:ed:4b:
65:0a:a0:0d:5d:4c:ec:c6:1a:7b:c9:43:78:3d:8b:
3e:ec:01:29:b1:7f:f5:c7:9c:c9:11:82:f7:44:fe:
68:df:b8:1e:76:08:3f:a1:a0:42:22:bd:66:d2:e0:
77:8c:f9:6a:34:64:53:4c:07:65:4f:06:1a:d8:c1:
af:ad:d8:75:8a:92:b1:5e:09:cd:82:38:e2:58:35:
01:eb:57:b4:88:37:74:59:dd:ac:33:c7:f5:91:e3:
5e:a9:c9:b5:af:59:f1:db:95:30:35:97:ab:fd:e9:
59:e2:23:bd:bd:49:b8:02:b1:c0:ee:37:92:97:96:
66:bf:b5:86:58:11:3b:a7:0e:ee:d3:22:2c:b8:31:
57:d4:83:d1:12:24:4a:1d:e4:94:79:fa:7b:f7:e8:
9b:2b:f3:cc:05:06:80:db:6d:80:b4:27:a0:7b:b3:
df:4d:53:6b:da:bf:78:d9:54:27:c7:31:61:9a:82:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:8C:F3:79:77:21:71:43:68:0F:74:0C:94:FF:74:E8:E4:A2:05
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ba:82:40:06:48:0d:eb:e0:c8:2c:d6:e2:53:bb:81:93:72:
10:cc:88:7a:b9:c8:15:36:ab:8c:d9:7f:31:b8:e2:90:f9:64:
bf:2a:68:14:68:b0:0f:50:1e:b9:36:1b:a4:7b:55:c5:f1:9e:
a0:1d:d1:df:0a:4d:f5:7f:b6:d4:8e:47:18:b2:4e:e9:24:db:
cb:fc:34:bb:31:2d:cf:4b:97:19:e3:2f:06:a9:10:8a:f6:3a:
53:20:5d:d2:06:46:6f:eb:54:60:b3:4f:34:9d:9d:be:67:c9:
df:ca:79:92:4c:a9:02:83:c4:d8:75:d8:d0:5f:87:8c:bd:0a:
99:71:fd:52:a4:a9:a5:74:00:57:f4:fd:8f:29:7a:3b:32:a4:
13:03:38:cc:31:8b:3b:0a:b3:9f:18:b9:8d:1f:3f:40:7a:13:
c3:b9:26:73:09:1a:89:9f:45:f7:6e:9c:ab:bd:71:78:b1:82:
08:98:43:b3:b7:94:aa:3a:23:99:48:22:a2:9d:a2:bc:6f:db:
e1:2f:54:81:af:13:75:42:74:80:ec:ca:d4:81:3f:d8:0f:e0:
86:0f:5d:e0:86:15:ba:c5:de:cf:23:eb:a8:78:4f:75:4c:bc:
66:57:dc:86:b2:87:21:51:a1:49:5e:e7:7e:fd:4f:5f:e1:ee:
90:cd:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:40:30 2025 by rpki-client