Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: YCECdQnKavyCU4+DN/RkYKhAsUIca4HNliN6eti27jo=
Subject key identifier: 3B:0A:36:5C:D0:39:4C:A0:DC:BB:CD:7C:AA:08:8C:AA:4C:B5:D4:E3
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0196BA48923D6C3FF1FBDB2AC915E383ABA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 129D
Signing time: Sat 10 May 2025 13:00:40 +0000
Manifest this update: Sat 10 May 2025 13:00:40 +0000
Manifest next update: Sun 11 May 2025 13:00:40 +0000
Files and hashes: 1: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (hash: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: fbQwtoxV3wmqerGMjef7y/BIDl28tgDsY2q2uTpojms=)
3: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
4: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
5: WezcbaDCWCglJVxlkqENoVQ5GlY.roa (hash: kXoxzzMiFtQKZOeEaMcNXCC2S+tWWgxtkN6qKdf+Gxc=)
6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:92:3d:6c:3f:f1:fb:db:2a:c9:15:e3:83:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: May 10 13:00:40 2025 GMT
Not After : May 11 13:00:40 2025 GMT
Subject: CN=3b0a365cd0394ca0dcbbcd7caa088caa4cb5d4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:e1:3d:d1:89:60:f7:14:98:70:e3:4a:70:
17:2a:88:fd:6b:48:50:33:28:53:3f:48:e2:d5:94:
83:46:b8:2b:d7:cf:f7:37:21:b2:cf:de:ef:2d:69:
45:ca:38:e4:e6:55:75:11:c7:9f:ef:64:ed:64:47:
db:86:a4:48:34:f3:47:58:c0:c2:93:e8:13:dc:49:
c0:8a:2b:93:85:d8:1a:29:e2:33:44:f8:3e:d4:75:
16:d9:2a:f0:30:16:f1:45:25:ff:3a:43:df:07:59:
28:8b:03:a6:5c:8c:24:55:df:61:b4:33:5c:07:92:
10:3f:90:a4:f2:e3:ff:ed:fd:c4:10:cb:e1:37:be:
de:1e:c7:e5:c0:ba:17:f7:d3:f1:41:95:d8:25:3f:
6a:ca:8e:8d:fa:03:22:ca:51:b8:18:4f:b2:09:48:
2b:8d:cf:4e:f6:a3:66:ae:f2:81:91:0a:32:e5:a4:
49:cf:b8:57:d8:74:72:19:d7:49:25:5b:c9:e7:de:
e7:3f:c8:b5:c9:a5:24:ce:4e:a3:0e:a8:e5:c7:11:
8f:48:50:e8:9f:53:6d:f1:8b:76:7f:19:f3:6c:a8:
86:23:13:1d:dd:70:4d:3f:5d:49:72:4d:22:09:70:
f1:78:96:a4:33:66:0f:01:d1:32:d7:88:1a:08:bb:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:36:5C:D0:39:4C:A0:DC:BB:CD:7C:AA:08:8C:AA:4C:B5:D4:E3
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:67:c0:b6:04:03:33:96:4d:54:4d:c7:c4:5c:d8:c1:bb:00:
f8:28:14:7e:4d:57:dd:15:fc:00:1a:70:f3:6d:3b:86:a2:fe:
53:07:64:7f:2d:71:b9:b3:0c:76:10:7d:f4:67:83:bc:af:23:
8f:90:a6:7f:d1:d9:47:e4:07:f3:30:66:86:a4:7b:20:75:b3:
15:69:eb:e7:21:f2:6d:c3:ee:6f:ac:c3:92:b8:88:3a:a3:23:
dd:3c:24:52:e3:86:96:f4:55:82:3f:d5:4a:c0:94:f7:2a:86:
1b:c8:42:a4:2a:1b:3c:60:9a:b7:ef:6c:c8:14:df:95:ef:e7:
18:bd:13:4c:3f:35:e1:74:40:92:d3:5a:f1:8a:4d:fa:61:78:
85:13:24:20:ae:e4:64:d8:7a:c3:ae:7d:85:23:87:d5:92:85:
5e:f0:47:b6:f0:ed:38:5a:ca:11:22:67:bc:c1:57:93:5c:32:
e9:41:32:e7:96:ac:27:56:d5:af:83:ec:28:ae:af:cd:78:d9:
40:12:03:a3:c5:a7:60:3e:fa:ce:a5:50:8a:2b:69:46:9d:80:
b7:f9:81:8c:fc:a1:ef:88:d9:3d:cf:ab:62:f0:47:5a:16:ff:
bd:78:24:a9:65:71:5f:73:a9:d8:4b:00:d8:72:88:f3:82:3f:
a2:0d:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:05:03 2025 by rpki-client