Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: itmNMpXxogDRmYp3MeVr9gSTigS/yj2joLBNfRpyXv4=
Subject key identifier: 8A:46:F7:DF:F4:41:11:66:51:07:E9:B1:AE:9E:1E:FE:E3:E0:CC:46
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 0196C0141AE8824576498C72E3C0CE991BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 16:01:05 +0000
Manifest this update: Sun 11 May 2025 16:01:05 +0000
Manifest next update: Mon 12 May 2025 16:01:05 +0000
Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: cFCk3qZ43qHg3dJTp9mFvAOih7gtpO1QnADBXsVLJ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:1a:e8:82:45:76:49:8c:72:e3:c0:ce:99:1b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: May 11 16:01:05 2025 GMT
Not After : May 12 16:01:05 2025 GMT
Subject: CN=8a46f7dff44111665107e9b1ae9e1efee3e0cc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:45:08:53:e6:c2:47:b1:60:c4:6c:de:9b:
5d:ea:93:de:d2:5a:78:f8:40:1d:05:7c:6e:57:a3:
01:c4:4f:3b:91:fe:01:63:f3:27:6f:7e:e9:a6:1c:
8f:c5:4c:85:32:10:41:58:20:1a:d9:82:73:e9:31:
86:b8:77:c1:cd:b8:58:82:4b:a0:d9:c5:67:fa:5c:
19:bf:26:91:fb:5e:21:b2:df:06:43:3d:7a:da:65:
68:50:21:ed:ed:92:e7:9e:c3:c5:9b:82:45:9c:30:
9c:ac:2c:1f:91:d5:d7:d8:d7:5c:ff:b0:5a:f4:83:
bf:83:fb:fc:9e:12:69:b4:a7:54:a1:3f:41:bb:fa:
22:0f:de:d2:4d:90:ab:d5:db:f9:78:05:0f:7c:74:
dc:f2:9b:1a:c0:10:f1:3b:32:90:de:fd:d4:cb:fe:
02:c0:0a:36:6f:b7:b0:ad:17:fb:51:fe:18:70:35:
d6:fb:c2:0d:a3:64:32:f0:6f:cc:65:7e:00:8e:0c:
0d:82:dd:5a:42:fc:10:e9:fa:ad:71:59:93:7b:5e:
d0:38:54:be:76:f5:7d:22:a0:35:28:83:ae:5e:01:
a2:39:45:59:64:db:a8:a9:f2:03:d0:06:ce:f5:ea:
ae:b1:34:8f:f9:57:f3:9c:26:ea:a0:0c:44:95:9b:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:F7:DF:F4:41:11:66:51:07:E9:B1:AE:9E:1E:FE:E3:E0:CC:46
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4d:06:3e:2c:24:97:64:07:d6:07:18:54:d0:39:31:8b:5f:
ce:49:66:a2:a0:00:67:83:dc:0d:80:6f:be:4a:18:67:a6:73:
1e:8a:eb:f7:67:1c:5b:22:85:71:c6:cd:69:9d:df:8d:2b:db:
b6:d2:68:46:e0:94:a8:8e:4a:61:af:94:16:07:f4:68:06:34:
5d:a3:48:9c:9b:96:04:ba:cc:b1:50:24:fc:28:aa:a0:13:32:
aa:53:a4:6d:14:37:db:7b:98:8f:cc:99:dc:0c:8a:73:53:d8:
bb:bd:bf:c5:dc:02:81:d2:bc:0b:ec:56:4f:e6:4a:1b:89:33:
6c:0b:b9:50:1e:df:c3:39:70:6d:78:01:6e:d2:82:14:6b:40:
42:98:18:21:99:f0:42:0e:c0:ec:ce:e4:c3:a0:5b:95:25:26:
55:19:d3:73:30:0e:3a:e5:c9:c7:fa:31:2e:68:73:e9:e7:aa:
2a:95:26:f5:71:68:a1:d0:42:02:76:1b:3b:b4:0b:83:28:5c:
8a:fd:47:30:d7:68:ae:a9:db:28:f2:8e:58:15:6b:e2:8e:c7:
36:3e:ec:d9:d8:07:bc:36:d8:2f:1f:6e:5e:46:f1:0e:37:9b:
cf:71:ee:4d:4d:4e:fc:5c:84:8c:1b:59:ef:4b:9d:c3:a5:b7:
cb:74:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:48:54 2025 by rpki-client