Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: CPdgJbK9AUK2b9Ik5Bbq4hNmzc1L1SzGPGexHf8KVhY=
Subject key identifier: A2:80:9E:51:86:80:71:C7:34:4A:93:E7:A2:44:3A:CA:65:4F:E0:AF
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 0196C53A99DEE54062C10575C46910D33FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 16:01:13 +0000
Manifest this update: Mon 12 May 2025 16:01:13 +0000
Manifest next update: Tue 13 May 2025 16:01:13 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: jdrEOVAZZJ+iQU9i1ArV+bNptxsXrYAj3kWSQXYiEvA=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:99:de:e5:40:62:c1:05:75:c4:69:10:d3:3f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: May 12 16:01:13 2025 GMT
Not After : May 13 16:01:13 2025 GMT
Subject: CN=a2809e51868071c7344a93e7a2443aca654fe0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:1d:fd:e0:bc:ae:69:b7:9f:fa:ca:42:f1:
a7:0b:91:b3:04:e6:c0:96:24:82:12:a4:ed:82:eb:
b2:89:de:34:6b:8c:c3:79:2b:b0:2f:6f:0a:a9:05:
ea:f3:40:94:51:d3:38:1f:c9:27:87:98:8a:c9:55:
82:f5:4b:7b:8a:46:ed:d5:9e:22:28:93:66:bb:e2:
7f:0b:47:1a:3a:cd:2b:6b:5c:2f:36:60:6a:f3:1a:
08:2f:b4:30:c9:38:e5:8d:59:53:f5:b4:5f:e9:ba:
31:dc:3f:a0:10:ed:ee:d6:5e:df:fb:0b:cf:03:89:
85:74:84:f9:51:9e:9b:8f:45:57:74:fa:28:16:e3:
af:78:d4:e4:ab:be:07:ac:05:b9:d5:84:10:04:f6:
17:ce:8f:17:78:88:22:38:30:9d:8b:6e:a5:7b:cd:
28:99:64:57:b1:ca:a9:4d:00:5e:4c:6b:64:d4:a9:
2e:a6:e5:cf:f3:7b:e4:6b:20:dc:6b:30:f6:14:55:
dc:36:ea:e7:5e:fc:c9:96:86:94:70:91:e5:a1:d2:
58:43:fe:6d:4f:46:42:ef:b0:51:ae:0e:a9:22:fb:
c9:e9:e9:80:c6:ad:5d:34:3e:ac:fc:fe:15:15:08:
e1:3f:e9:ea:da:66:43:c4:9e:5d:cb:94:d9:fa:97:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:9E:51:86:80:71:C7:34:4A:93:E7:A2:44:3A:CA:65:4F:E0:AF
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f7:28:75:16:8a:1f:b4:61:6f:9f:20:82:bd:f2:cf:0e:f0:
33:77:c2:a5:b8:c6:7b:92:29:83:c8:80:f5:96:10:df:92:82:
46:35:5f:2c:7b:2b:df:b0:d6:6e:0c:20:b5:3d:f3:c7:88:b7:
90:76:5b:c1:53:35:b1:82:a3:96:e6:2c:e8:97:aa:d9:90:b6:
6d:cd:41:73:ee:69:2f:55:7f:34:fc:3b:f8:a9:76:c1:a2:20:
3c:dc:9c:0d:93:ef:1b:49:86:c4:55:1a:1f:e4:0d:48:27:75:
b8:58:81:dd:94:c8:3b:16:cd:22:87:70:8a:69:28:f9:6d:da:
76:39:28:5b:6d:18:22:c8:09:62:e8:2b:35:0d:d4:7c:2f:b1:
78:c1:46:86:a0:33:dd:5e:57:40:ec:09:09:fd:8e:7b:21:e2:
45:4e:82:0c:f0:65:ff:eb:98:91:55:8f:23:1c:05:67:00:21:
d0:2a:ce:6e:ca:a0:9d:ef:8f:aa:6d:50:87:41:b8:02:93:da:
12:5a:5a:15:5f:c3:23:e4:7b:06:24:6a:e1:cc:1d:5a:e8:1c:
55:c7:a5:da:6a:9b:26:ba:0d:40:34:78:e9:ce:02:1b:10:b4:
3c:4a:4d:71:40:92:42:f5:e1:32:32:26:3e:91:fe:11:8f:e0:
09:f7:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:10:16 2025 by rpki-client