Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: Rmuxo94malp9XaAmlWxmbuHVyo/X+2eY8zUyJkFsJos=
Subject key identifier: A4:E8:AA:C6:77:EC:6B:40:E6:1F:87:55:8B:8A:0F:70:5D:59:62:F0
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 0196BEC9E401FF10A0C5675F0A83B695AC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 10:00:24 +0000
Manifest this update: Sun 11 May 2025 10:00:24 +0000
Manifest next update: Mon 12 May 2025 10:00:24 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: FE1JtM+I56rt678fMT2l3FXfKv7G28TcLvA4DYp53OI=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:e4:01:ff:10:a0:c5:67:5f:0a:83:b6:95:ac:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: May 11 10:00:24 2025 GMT
Not After : May 12 10:00:24 2025 GMT
Subject: CN=a4e8aac677ec6b40e61f87558b8a0f705d5962f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:ff:91:0a:8b:e4:c3:0a:6e:68:5a:14:24:
6d:46:cb:21:cf:50:92:28:59:9c:6e:19:4a:47:7f:
27:d2:9e:ca:0f:ab:ed:39:d4:9c:d3:bb:55:f9:79:
ba:50:07:78:ff:1b:fe:2b:f8:24:37:2b:d1:d3:e5:
00:6c:2f:e0:2a:91:8a:46:86:01:4c:79:bc:86:93:
4b:8b:5a:71:54:77:5d:f2:2f:c6:7d:f0:ed:07:e0:
17:b8:9b:41:02:96:d1:e9:2a:71:c9:e4:68:a6:e3:
a9:82:04:09:4e:f4:a6:2a:8c:39:71:57:e7:c0:8d:
bc:28:21:c1:1b:a6:3e:49:e8:a3:c6:07:07:30:9c:
63:3a:db:34:57:61:e7:32:d8:56:72:c8:60:73:40:
98:44:5b:f3:f3:bf:ca:e1:ac:02:14:01:b1:34:4b:
34:38:ff:6d:3b:40:7f:bd:75:1b:2c:d4:17:f6:65:
1f:4b:5a:78:52:9c:79:9d:6d:40:f1:b2:dc:41:66:
4c:de:0a:5e:aa:27:60:25:f5:44:21:0a:34:ff:b5:
97:61:01:2b:1f:13:fd:8b:b3:f2:6c:6b:fa:4c:2c:
22:19:86:e4:0b:2a:a8:b8:86:71:b5:a7:12:28:7f:
e7:8d:2b:9a:e4:94:24:04:6e:09:5f:87:d6:e8:10:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:AA:C6:77:EC:6B:40:E6:1F:87:55:8B:8A:0F:70:5D:59:62:F0
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:63:b0:2b:e1:d4:bc:da:e1:59:1f:b1:8c:6a:0c:ac:f7:
93:02:b5:31:a9:14:69:59:8b:5d:2b:90:7e:01:14:02:35:7d:
68:90:6b:48:fd:17:5e:a4:47:a2:a5:fe:94:69:63:39:64:36:
dd:62:0a:63:06:d3:d5:1d:f3:4e:3d:47:c7:db:17:5a:f8:c5:
f1:53:ce:a2:09:13:f9:c8:aa:0c:fd:8e:31:47:71:08:41:dd:
73:a2:fa:0f:2e:d2:de:11:96:4c:c4:29:1b:28:1f:a4:34:ed:
35:80:0f:02:d5:91:57:b0:3e:6d:60:1c:3d:80:74:33:6b:ea:
a6:37:3f:34:60:d1:cc:83:42:5a:58:c0:71:c9:c4:1d:28:02:
c0:ff:df:55:b0:b0:15:93:78:28:4f:6c:2f:3a:60:f8:53:9e:
dd:00:fc:f8:0b:47:5c:9c:fb:08:5a:ec:10:9a:72:8b:61:21:
fa:5a:3f:c6:0e:9a:4f:d1:cf:b2:9a:e6:37:4e:86:57:9b:9e:
09:49:70:d2:7f:a1:dc:b2:9c:72:76:ac:5a:7d:26:48:69:1a:
af:00:65:e6:8c:f0:f8:9d:fb:73:81:d7:39:a9:36:34:47:97:
77:ff:aa:85:66:97:fc:40:75:98:0b:b6:8a:fb:a8:37:dc:e9:
05:5a:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:16:35 2025 by rpki-client