Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: iBQ+2nbm0Hc9SZvCjHZtPz2Nw0nxWCKvslopK3D3WUo=
Subject key identifier: 15:04:51:6D:6C:62:C8:FA:BA:98:57:ED:0A:D7:CC:BA:12:58:05:14
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 0196C4CC1D2499408BFDFF70088B8C0A65A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 14:00:33 +0000
Manifest this update: Mon 12 May 2025 14:00:33 +0000
Manifest next update: Tue 13 May 2025 14:00:33 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: i8xSeG6Kx7u0N47GdbyNb3EB2HtAJKcgPt+i+aHBhNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:1d:24:99:40:8b:fd:ff:70:08:8b:8c:0a:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: May 12 14:00:33 2025 GMT
Not After : May 13 14:00:33 2025 GMT
Subject: CN=1504516d6c62c8faba9857ed0ad7ccba12580514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:84:5c:ed:91:95:93:9a:87:e9:cd:7a:39:
86:b3:4b:3b:70:d3:36:c7:7c:b0:c3:88:21:d2:ee:
e4:e7:dd:31:b9:1c:03:ef:51:5b:07:18:a1:d3:04:
0a:86:b2:08:d8:a4:0b:08:c7:fc:27:f6:c5:45:40:
f2:d5:0c:52:48:ff:58:31:27:a9:11:91:87:0b:17:
1d:f9:2a:15:9f:de:84:1d:90:7c:9a:11:c2:1b:d8:
5b:2a:64:a6:97:fc:9c:12:77:37:31:e4:a6:d0:99:
93:f7:e2:47:02:ed:80:27:39:ca:8f:60:2c:82:6e:
22:85:10:64:46:ca:1f:2a:15:ae:e5:69:d2:a5:f0:
41:30:ef:44:5b:3f:57:97:89:97:1d:f5:dc:4f:ea:
76:3e:ab:16:57:72:19:e1:df:07:3d:1e:c7:ca:61:
c6:e4:76:a3:db:08:87:79:21:b8:ad:14:06:de:df:
c5:46:a9:80:36:da:bc:52:ff:b3:e9:2c:65:d7:ae:
68:59:5e:f8:de:07:7c:5b:b3:38:c8:c3:ad:29:db:
f2:ab:cb:f2:2d:eb:d2:eb:f9:17:ae:22:05:ff:43:
6f:e9:60:f3:f5:64:f4:d2:9c:5a:a1:3a:52:62:8b:
79:39:8b:60:68:0f:37:c5:33:41:a4:00:da:2a:35:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:51:6D:6C:62:C8:FA:BA:98:57:ED:0A:D7:CC:BA:12:58:05:14
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6c:02:e0:f5:e7:11:3a:88:09:68:8d:fe:11:15:2c:67:10:
9a:b1:a4:d4:c9:40:69:8a:92:e9:14:00:57:f9:3b:68:29:41:
44:0e:65:37:11:aa:11:16:99:fe:d0:c7:a5:39:43:11:cb:ee:
58:82:3c:a3:d2:cf:40:fb:d1:8c:c7:5f:47:6a:b7:3d:bd:3d:
e6:04:5a:60:04:d1:b9:08:b5:81:23:6c:dd:b2:12:38:1e:07:
70:51:47:3d:ba:eb:e4:e1:0a:90:7d:ab:45:86:27:c2:98:c5:
99:18:ed:72:1a:bc:82:f1:3e:a0:55:38:c3:2d:d9:ae:03:0c:
70:9c:2c:84:c2:ee:d2:e7:d9:08:8b:8b:56:d4:a1:fb:aa:85:
0f:46:71:52:ce:f5:97:b6:d3:ee:60:c9:8e:a6:e4:d7:28:eb:
31:d3:98:bf:60:de:31:d5:cc:de:8a:9b:a0:86:e1:e4:f7:b4:
1b:4d:4f:41:a2:7a:f6:c5:21:de:fc:60:fc:71:7e:65:29:7e:
9c:a5:96:2d:6e:f7:cb:18:d0:2d:a2:de:5f:64:b4:23:28:b2:
1e:22:54:0a:b2:b0:02:d1:ec:32:13:51:b3:1d:64:af:da:46:
40:2b:db:d1:25:f7:27:7c:d0:c8:80:89:9a:0e:7a:5a:d7:e8:
f1:36:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:54:54 2025 by rpki-client