Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: MqH8W6nRkNx38w3MeCsPoHzW5ZB3W7mc606AD8xP+o4=
Subject key identifier: D2:02:EC:EE:83:19:DE:23:84:44:0C:41:9F:24:A4:D9:BC:A5:3A:43
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 0196A49C882AEDA1732F1DC1C4B6421F4B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 08:00:43 +0000
Manifest this update: Tue 06 May 2025 08:00:43 +0000
Manifest next update: Wed 07 May 2025 08:00:43 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: WlYEE/FLp/a+d8TkoBZl47/B3+1dm+vj7Fbs7xo3R00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:88:2a:ed:a1:73:2f:1d:c1:c4:b6:42:1f:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: May 6 08:00:43 2025 GMT
Not After : May 7 08:00:43 2025 GMT
Subject: CN=d202ecee8319de2384440c419f24a4d9bca53a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:19:8b:66:21:4e:0a:fa:2b:17:a5:40:97:
9e:22:1d:32:72:7d:06:9a:a5:4a:a2:a9:87:b1:bf:
2f:7b:4c:45:e4:95:1e:03:dd:58:e8:de:b8:80:bd:
21:42:9d:32:98:b6:37:bb:24:b1:96:29:83:79:12:
5b:5f:e7:82:60:7d:74:e8:84:9d:1d:0a:3f:d8:1c:
9e:e0:85:d9:9f:b1:c7:44:6d:41:7a:46:2b:c7:22:
ac:fb:c8:93:76:8f:92:0a:c9:5e:c6:e7:ef:4d:ee:
20:89:21:b5:29:66:0f:a3:8d:df:59:2b:eb:ac:5d:
59:84:10:ce:ef:a6:2c:23:11:27:5e:0a:8a:3e:b9:
0f:8a:8c:bb:19:47:55:8c:85:01:95:0d:b1:ec:e7:
14:44:6a:fa:34:8e:48:50:21:cf:e8:2c:9b:26:99:
50:82:62:cb:2f:61:bd:fc:da:7a:f3:84:9f:bc:81:
6f:15:b9:bf:37:af:f1:21:ea:ab:e2:84:de:f0:a8:
b8:e8:73:99:41:88:3e:96:53:cb:05:79:83:06:09:
df:66:18:39:3e:9d:4c:f5:35:34:3b:da:68:e7:17:
35:c8:f7:ff:6e:b8:58:e5:ef:d2:97:16:75:a0:89:
e8:16:d4:a0:cb:e3:3b:40:0b:68:96:92:c9:a3:9b:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:EC:EE:83:19:DE:23:84:44:0C:41:9F:24:A4:D9:BC:A5:3A:43
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:7d:ca:7b:f5:87:b3:57:54:ef:f6:c7:d8:ef:6c:e6:5f:
2b:fc:ab:59:c0:1c:0b:7a:35:84:6a:01:3d:91:4b:2f:f3:6d:
ff:a1:82:e5:fa:fb:3c:df:f3:2a:ae:4c:e6:61:74:5c:50:e5:
3e:e5:4d:8a:b1:8a:4e:63:58:63:78:3a:ef:b4:b7:15:b1:08:
98:d2:53:63:cb:12:f1:da:4f:17:fd:d5:92:dd:4b:84:b3:5b:
e8:69:a7:62:96:52:99:74:c4:f1:f2:d0:08:01:bb:90:0f:6a:
72:04:95:e5:5e:74:ac:a0:19:08:39:85:59:d0:b2:64:42:64:
f2:6f:a0:99:12:cd:56:7a:33:a3:bc:64:7e:40:4b:19:86:9f:
f2:04:94:0f:8b:18:12:ae:45:c5:82:63:31:df:cc:04:b1:31:
a8:90:92:a6:e3:ba:38:88:74:ad:f3:b8:6d:75:51:4f:b0:93:
35:f4:6a:b7:c6:b8:9f:40:2b:cb:f2:c2:bb:58:42:e3:d6:79:
dc:d8:e1:09:1d:7f:b5:e9:c2:68:4c:dd:94:21:b3:f9:75:d7:
c3:ef:7c:b9:2f:92:0d:4e:9b:b7:6e:22:d6:38:2a:3e:58:f7:
82:8f:bf:e0:0d:25:71:c8:9a:a6:06:44:f1:9c:d7:08:08:67:
3b:36:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:12:33 2025 by rpki-client