Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: aksZRRdOmQu5KnuGOl9yhae2ad/Rj7/yp7/OK5N8CQ0=
Subject key identifier: C8:91:57:41:1B:49:29:D0:C5:EE:6C:1D:2B:CA:98:35:89:A8:E4:02
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0196B7106C6BFDFDAAB3E7469756E3011EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 0137
Signing time: Fri 09 May 2025 22:00:28 +0000
Manifest this update: Fri 09 May 2025 22:00:28 +0000
Manifest next update: Sat 10 May 2025 22:00:28 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: DNK1XdmVo1skdRWSEBQOghBANr64UIncc6/5sJ+dnEQ=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
5: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
6: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
7: _MuhnJ6s9fgxrMWOdWSQ3a9Mo5A.roa (hash: /NURNjdL1rUwg9BnJscsIm9Ms2LcxVnZNiDclEiZFfs=)
8: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
9: pPHmbMikVBACOA-xj0C6dNDZYpM.roa (hash: Tckf3zisW/juBkSkf5E1qa9SaVTAQq8IrgBpb3JvyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:6c:6b:fd:fd:aa:b3:e7:46:97:56:e3:01:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: May 9 22:00:28 2025 GMT
Not After : May 10 22:00:28 2025 GMT
Subject: CN=c89157411b4929d0c5ee6c1d2bca983589a8e402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:23:b0:a7:0b:5a:59:47:57:7d:a8:4b:db:
99:94:cb:a2:6c:a0:23:b4:44:77:9f:0a:58:2a:ae:
57:91:b5:ac:7b:da:a1:06:21:18:82:62:ab:04:d3:
cb:35:9b:2a:ab:f2:27:bd:eb:c4:16:d4:24:06:54:
cc:d1:d3:a3:39:c1:6c:ba:b0:14:fb:a7:e3:b4:6e:
77:60:7a:c1:c5:15:d4:36:39:61:94:5f:55:e0:d2:
50:ff:14:1b:34:95:d4:6f:3e:de:fa:92:4c:a6:6a:
c1:d9:c0:07:38:72:10:64:de:6d:12:fe:11:a8:a5:
71:69:e2:84:f7:80:5d:39:3c:fe:57:b6:0f:b9:26:
dd:85:75:40:a3:20:be:d2:e4:08:ee:81:5a:27:b8:
16:75:83:b3:67:32:d7:0e:21:0d:19:25:5e:6e:1e:
03:90:9a:ac:b4:43:44:58:4f:f9:26:04:ad:59:1e:
b8:de:9c:f0:20:c7:44:85:26:16:75:90:61:5b:db:
91:0e:ce:b0:b2:93:31:c0:d9:bc:9b:02:e9:e9:37:
18:6b:33:53:43:a9:90:88:d0:8e:87:f0:86:ab:e6:
d9:27:0f:89:34:a9:61:7c:1a:34:b8:0c:d3:9c:7a:
0d:58:ec:63:b8:25:2e:e3:ec:19:4a:8f:3d:2f:c7:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:57:41:1B:49:29:D0:C5:EE:6C:1D:2B:CA:98:35:89:A8:E4:02
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d5:16:59:8e:b5:b8:1b:be:57:89:77:ad:d8:a7:51:53:ac:
09:2d:7b:a5:a5:db:94:cd:95:80:0d:95:0f:cb:35:05:f1:b3:
a1:a5:d9:d9:e3:09:9d:80:b9:94:52:dc:92:4e:b4:8b:49:c0:
80:b4:d9:96:c1:90:74:2c:50:0f:86:24:03:a0:d1:5f:d7:6b:
d0:d6:55:d8:fb:d6:70:51:93:0a:cd:d3:94:61:c7:95:21:7e:
35:2c:95:68:07:b0:fb:4d:02:c0:9a:c8:ed:1e:8b:e3:9e:69:
b7:9d:61:f6:f9:b2:69:a2:82:6a:f9:27:fb:d7:47:02:2d:1d:
0c:d8:74:01:3d:12:96:c4:16:3a:f8:53:d7:d8:1c:66:fb:f2:
ac:ff:6e:1c:00:1e:14:27:f5:22:de:2c:0b:38:14:b1:62:9a:
ea:e2:35:a5:ff:ef:7c:28:57:70:dc:70:ff:2f:f0:5c:d7:12:
8b:16:69:92:7c:88:22:e4:09:60:90:70:fb:9a:37:f5:7a:0d:
75:a4:1a:f4:28:7c:33:ac:e7:10:34:d9:45:ea:c4:0b:5d:8f:
98:c1:b6:3c:a9:8a:d0:9a:fa:9e:cf:4d:e6:7c:b9:76:c7:42:
46:fd:66:2d:15:ef:68:91:48:3c:b1:d7:f1:54:75:63:9e:7f:
01:50:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:08:59 2025 by rpki-client