Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: oWPpMRAJ59b57ou8WnOEzKe0THO4i4Rujh7tJVwSS6w=
Subject key identifier: B9:94:0F:E7:14:67:76:8A:70:79:E7:16:03:AC:D7:1D:BB:56:3A:E3
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 0196AF16851BB9AE8E0E8BEE804E92EC30F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 08:50:10 +0000
Manifest this update: Thu 08 May 2025 08:50:10 +0000
Manifest next update: Fri 09 May 2025 08:50:10 +0000
Files and hashes: 1: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: Lnq1HMEI7Xl2lyvt1rgcQnknzvhtgrXOZtZYzY0EqNI=)
2: dXP8cJmIFG4IZHCqza00IVtVWSE.roa (hash: +w3l3aIBZ9hXLATQFyn+3KPTt55ZaevJCbvRlNbG/wI=)
3: jsd32GyUcOABxL3lbaYKa1U9QxQ.roa (hash: iIGtz/WTQ1JA6imPxlRGSNb4RKMQ3XrYAPCJJH9Foiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:16:85:1b:b9:ae:8e:0e:8b:ee:80:4e:92:ec:30:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: May 8 08:50:10 2025 GMT
Not After : May 9 08:50:10 2025 GMT
Subject: CN=b9940fe71467768a7079e71603acd71dbb563ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:e2:b8:5a:71:4a:e7:03:81:bc:b1:5f:a3:
bb:8c:b1:12:af:c8:b0:46:f3:5d:9b:db:61:a1:ea:
4b:1f:cd:cf:8b:8f:9e:be:c6:9f:fd:25:d3:d1:64:
ba:c9:ca:f5:d7:bf:2a:f2:8c:03:0f:c6:55:b5:0c:
35:7a:bd:f1:45:d2:e1:ea:8b:9a:4d:ab:5e:78:2c:
7c:a4:e1:f0:7a:f8:f0:34:b5:d3:8d:11:47:01:44:
35:33:99:7c:1e:56:14:a0:a3:0a:21:bb:f1:ed:b9:
be:f1:c6:92:32:6b:47:47:28:37:60:64:58:aa:b1:
0b:35:54:0f:59:40:75:b1:88:a2:5b:79:3d:7c:80:
5e:6c:61:c5:7a:70:cd:8c:dc:3f:c6:5f:ff:97:a5:
7b:3e:ba:2a:36:b7:08:28:99:e3:e8:dd:52:45:f0:
8e:72:48:4f:82:c2:02:5f:09:ea:47:cc:65:70:41:
68:f5:bc:6b:df:92:e6:d7:81:ee:a9:7a:f0:a9:d5:
66:1e:75:c7:62:20:02:0b:eb:50:2c:5a:24:ba:89:
cf:df:db:94:b0:6b:48:22:7d:07:2f:fb:04:c9:ac:
bd:dc:c2:37:6d:75:26:90:29:6d:39:b2:93:0e:56:
60:58:a7:9f:97:15:3a:98:36:71:e6:81:1c:61:4e:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:0F:E7:14:67:76:8A:70:79:E7:16:03:AC:D7:1D:BB:56:3A:E3
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:82:da:62:2e:7a:5e:52:e8:ad:22:db:ee:07:75:7d:9f:
d3:66:9d:cc:0d:a9:7d:ab:4c:ab:c7:d7:6c:85:a3:49:49:69:
04:72:7d:f8:82:3f:a1:0f:e0:e7:03:a7:24:73:4d:11:a2:8c:
d3:05:40:be:7e:68:4c:c6:b7:82:07:44:f7:47:f1:a2:67:17:
22:76:01:87:cb:eb:87:b0:1f:4c:01:19:3d:31:1f:af:47:18:
86:14:ec:5d:f4:77:e7:88:0b:2d:89:cd:32:6c:4c:3e:bc:95:
8e:3b:67:38:dc:bd:32:88:84:b6:54:ef:e8:b2:14:76:7d:fe:
66:8a:c8:08:da:21:32:e5:89:f4:b7:ec:01:99:1c:6e:1a:e3:
f4:34:f7:8e:8e:d8:f3:06:88:0d:f1:2a:fd:2a:8d:4d:e4:a2:
6f:08:0f:c8:71:23:5a:36:b7:a1:47:2b:df:33:82:c0:30:de:
9c:1a:31:bf:cb:94:d8:03:1f:98:cf:0f:e6:ec:a2:45:6f:a5:
1d:5a:cc:00:7b:e5:2c:68:bf:ea:58:ce:7a:d7:30:8d:6e:bf:
3d:80:17:80:b5:b0:fc:ca:b2:9b:21:22:60:7d:0e:3f:b8:d2:
5c:41:76:ee:4d:50:c1:12:f3:3a:ac:70:dc:cd:c1:cf:df:95:
bf:6a:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:57:04 2025 by rpki-client