Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: fSuNzhmRpTL1EyTrRcCkXJ+TO17T2f3B88ppk/YsPO0=
Subject key identifier: AD:B3:B9:E5:A2:C5:0F:DA:D4:A4:3C:A5:A0:07:F7:AB:30:10:A5:D0
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 0196C1263DC00C342F453759EA757CB00902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 21:00:30 +0000
Manifest this update: Sun 11 May 2025 21:00:30 +0000
Manifest next update: Mon 12 May 2025 21:00:30 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: m61HhWUkPOZQEWhQ0ycwxHOBYI8Rd9j/QhPECM2b0qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:3d:c0:0c:34:2f:45:37:59:ea:75:7c:b0:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: May 11 21:00:30 2025 GMT
Not After : May 12 21:00:30 2025 GMT
Subject: CN=adb3b9e5a2c50fdad4a43ca5a007f7ab3010a5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:47:16:7d:52:ee:ff:a3:ab:0d:01:34:22:
29:1b:12:55:27:f2:c5:eb:5f:27:ff:76:67:25:7d:
af:04:f0:70:a8:90:fc:73:21:68:73:8d:ac:74:38:
aa:79:6a:d4:b5:a3:a4:fb:3f:c7:73:c9:78:e8:ff:
e1:ee:dd:af:5a:86:04:89:e1:e2:f4:8c:e5:71:a3:
b6:53:9c:ed:d5:cd:b0:c2:51:45:01:10:a7:36:52:
4a:61:f8:08:cf:a6:31:23:c3:b7:5e:53:f2:94:c6:
c1:08:94:d3:0f:08:22:32:96:40:7b:42:93:22:eb:
20:94:03:2f:73:19:12:76:c1:dc:35:31:5e:5d:17:
8e:bd:0b:23:98:2a:c3:f1:88:da:fa:e9:4c:cf:52:
89:b4:ab:5d:37:41:f3:4b:22:23:21:42:f9:4c:81:
56:55:68:4f:27:7a:11:0d:75:97:fe:87:c3:ee:f7:
be:a4:8e:65:3d:d3:ce:ae:49:23:fd:54:c9:93:f0:
5c:57:98:e8:23:15:62:93:e9:4e:65:34:35:ad:f1:
e5:31:c3:72:0b:13:3a:7a:74:41:50:fa:09:ae:45:
02:e9:09:34:c8:94:68:b8:25:1f:86:a9:5c:db:07:
f4:25:de:0f:86:13:4b:b3:68:8f:d9:68:90:10:f4:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:B9:E5:A2:C5:0F:DA:D4:A4:3C:A5:A0:07:F7:AB:30:10:A5:D0
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:ca:1b:28:59:fc:fd:41:ea:fa:3a:3b:82:ed:7e:3a:d3:
b8:5b:cd:48:19:f6:1e:9b:b1:42:ce:7c:e3:a1:be:e8:3e:18:
c3:1b:5e:93:aa:0d:26:23:18:00:5a:59:e6:11:51:5a:76:cb:
bb:5a:68:0d:c5:cb:c7:73:df:6e:74:99:cf:87:1b:8f:f9:e1:
74:9b:32:07:38:7b:ec:e4:0c:ce:0a:d9:4c:97:6c:e0:bf:17:
d0:4c:b5:65:14:b9:a3:23:fb:ff:47:3b:d6:ec:54:d9:b4:3c:
d5:67:52:11:10:d3:3c:80:45:97:60:4b:fa:2c:7f:4b:0d:52:
0e:c2:bc:0c:64:54:b6:1a:4c:c4:36:df:91:5d:2c:2a:be:00:
fa:f4:7d:30:25:36:84:32:47:8f:07:21:5b:08:5e:a8:fd:6a:
e7:42:97:88:d8:34:60:13:3c:7a:80:70:ba:8c:12:1e:f0:1d:
64:13:d1:14:64:a6:36:0d:59:a4:0f:23:88:ec:7c:74:4c:2a:
38:55:bc:70:ee:be:2f:72:23:35:e2:1e:db:8a:1d:1d:fa:ad:
30:7c:6e:a5:7d:f3:4c:72:1c:7c:84:ac:3b:a3:c4:72:0b:4c:
14:f5:b2:9a:06:96:69:5a:66:68:ac:e7:7f:90:d0:4d:69:c7:
8c:28:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:12:54 2025 by rpki-client