Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier: vzCwF2tJJewcs31LCB7nrwMVuOIAbJdQw0PYT+1kIKM=
Subject key identifier: 9A:4F:1B:C4:D3:A1:50:24:B2:E6:66:F4:23:F2:CF:D2:46:81:C4:73
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 01969E9A113DED9970410576C8F13AC2169A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 04:00:19 +0000
Manifest this update: Mon 05 May 2025 04:00:19 +0000
Manifest next update: Tue 06 May 2025 04:00:19 +0000
Files and hashes: 1: 2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa (hash: p8QjhotvBCdHOmxF54vBU0ccs9eUkA9Pdd1QgMIFymw=)
2: 7qLq7aTWNHbxDovy4cDmNUB81ok.roa (hash: 45Whc0u7xWoUwZs881UVCIUC5K/sXDTJpbpU9JZ3Gm0=)
3: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: VBzt0fml6iRtSlZypcU0oBP83mxpn1a+FYD8h3xN+sQ=)
4: Jf85FwwWGAMm_y1gyBMRf8ZylY8.roa (hash: hqLNtg3bR55HcspgRfJxtmFSYZlPqsuiPGUD5+xKsFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:11:3d:ed:99:70:41:05:76:c8:f1:3a:c2:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: May 5 04:00:19 2025 GMT
Not After : May 6 04:00:19 2025 GMT
Subject: CN=9a4f1bc4d3a15024b2e666f423f2cfd24681c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:d1:2f:f7:bf:1c:1e:37:bd:69:fb:77:5c:
3b:14:1c:94:99:d6:5b:3f:29:92:61:14:e2:cf:4a:
9e:77:ac:ba:51:27:72:49:50:b2:9c:90:4d:ca:a7:
4b:5d:10:2b:2e:96:2e:0a:32:e1:c8:2e:90:36:2a:
63:2c:24:78:7d:bb:f1:c5:2c:32:b4:f9:62:11:a1:
75:0e:df:6c:04:95:a8:1b:7f:44:29:15:6f:d8:93:
5a:94:ff:c7:84:a8:c7:e6:b6:b9:3d:30:9c:94:7c:
f4:56:07:46:80:be:7f:06:6c:17:b5:29:6b:c3:15:
e4:fc:4e:0b:9f:31:63:07:17:03:09:6f:ca:b5:f8:
85:8c:21:67:3b:d4:5a:23:35:b5:87:90:f0:96:63:
a8:6b:be:82:c3:4c:6e:9d:86:da:47:99:2e:d2:eb:
c3:9c:19:8f:3e:de:9b:0b:30:d1:fa:45:0a:59:e3:
6c:2a:e1:b4:d4:9f:66:d4:b1:81:62:67:9e:df:ea:
1a:28:95:1c:b6:16:3c:3e:22:7e:23:6e:b8:d6:06:
9c:89:a4:32:58:86:36:95:17:20:ba:d7:87:74:8a:
9c:00:c2:4b:55:e2:3b:0b:cb:e5:29:76:b0:06:db:
be:1c:eb:4d:c4:33:59:36:21:0d:60:3e:41:73:93:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:1B:C4:D3:A1:50:24:B2:E6:66:F4:23:F2:CF:D2:46:81:C4:73
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:77:aa:fb:48:6a:5a:61:38:03:b1:35:a1:ca:6d:d1:39:
04:b0:82:2d:0c:6e:19:87:30:58:b2:cd:c6:e1:af:43:00:6e:
04:b3:d6:59:5c:d8:05:40:a8:92:24:f0:41:1c:ad:03:3a:4c:
f2:22:8f:70:b6:41:d8:db:9e:f6:ad:36:e7:ac:55:08:09:ee:
69:5a:8e:0e:54:00:14:6a:88:df:07:5d:32:ad:63:3e:d5:84:
d6:a3:bd:97:0e:59:da:1b:48:02:a8:3d:52:f0:73:58:d5:2a:
5f:9f:ad:84:85:93:1e:5e:15:49:22:89:2b:b3:d7:d7:75:ae:
8c:31:5a:fa:bf:4a:be:7e:b0:4e:66:08:b0:63:23:37:2c:29:
11:32:53:0f:34:bb:d8:94:12:39:2b:41:0a:7b:93:bb:f6:94:
f9:50:f1:d2:6c:d9:65:9c:c7:f2:ca:93:04:59:e0:68:e0:b3:
f4:08:62:d1:92:66:60:1a:e6:83:94:2c:ca:27:a7:c6:53:16:
64:0e:81:41:96:fa:8a:d3:3e:ba:48:a3:90:f7:8e:c0:81:fd:
8d:14:ff:61:6a:3b:f7:5a:86:1a:cc:88:27:f5:79:ab:e4:4a:
94:2b:5a:f8:dc:c2:49:fa:68:78:6f:59:97:57:8d:c4:c3:b1:
df:97:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:26 2025 by rpki-client