Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: v3orin3kGD+H+j/AqrDtppmJQ/I1W1kRn5k9b2ARFuU=
Subject key identifier: D1:82:91:5E:04:FA:24:C5:6B:03:C3:6E:E4:F1:4E:53:19:6F:25:50
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 0196C80414889EC35D97E4AD78B21126B186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 05:00:32 +0000
Manifest this update: Tue 13 May 2025 05:00:32 +0000
Manifest next update: Wed 14 May 2025 05:00:32 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: SoHe0D8eNqTnmJcyV8EoEVbGshfb/LJ4QxNztWHcDL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:14:88:9e:c3:5d:97:e4:ad:78:b2:11:26:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: May 13 05:00:32 2025 GMT
Not After : May 14 05:00:32 2025 GMT
Subject: CN=d182915e04fa24c56b03c36ee4f14e53196f2550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:bf:f6:1a:82:ee:a3:d8:e7:9c:36:97:77:
44:48:8d:4c:6d:9b:e7:98:c6:1a:da:2b:be:15:d3:
a2:84:57:54:6c:01:95:26:ba:c7:a3:ea:9d:06:7b:
36:25:23:ea:a5:49:23:37:5a:30:3c:bc:7f:c3:0c:
ae:bb:02:88:41:4e:fd:34:4d:4c:84:26:61:48:47:
19:55:01:c4:27:5d:81:97:09:3c:7f:7c:bc:85:c0:
b2:f3:44:b2:5c:b7:4a:af:1c:25:e7:d2:cf:d0:2f:
86:13:2a:81:ac:7f:1a:83:b8:1b:86:f3:ba:6c:c9:
52:98:a2:67:a7:db:e0:af:78:3b:98:a5:1b:44:b0:
5e:5e:7e:63:f2:9f:b9:6a:7d:44:d5:cf:2d:24:c4:
55:55:92:0f:c9:fe:93:d8:49:97:97:31:cf:58:28:
79:37:db:75:46:9a:84:6e:c8:2f:8e:55:c3:7a:48:
f9:3b:1b:b2:ea:dc:40:13:4e:13:20:5a:1b:c9:26:
5d:90:b4:a1:7a:44:b3:a1:63:c4:e0:0a:fb:7e:db:
f2:8d:7e:10:e9:31:d8:ad:b2:1c:23:f5:14:1e:1b:
3e:27:22:64:4b:58:9d:bd:27:f9:1d:8f:46:5d:ff:
a3:99:50:84:0e:1d:a9:5d:c2:a3:70:17:62:32:43:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:91:5E:04:FA:24:C5:6B:03:C3:6E:E4:F1:4E:53:19:6F:25:50
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:26:6b:aa:f0:d1:60:d4:f8:56:c3:5b:4d:c8:4a:e8:91:a3:
26:81:68:65:8f:f2:bb:37:3e:fe:e9:db:26:ba:32:af:32:00:
25:bd:d1:76:a5:1b:48:9a:b4:56:d9:ab:43:94:aa:2e:54:81:
dd:3b:52:6b:92:f9:e8:d1:f0:92:1b:7e:4c:c0:0c:05:aa:0a:
eb:b2:1d:5f:87:ae:5b:96:a4:90:e9:df:c3:ab:fe:c4:69:7e:
b5:76:d6:81:97:df:cc:f7:00:0f:f7:70:7b:d6:fa:20:38:4c:
d2:27:e7:41:06:f9:d3:3a:6b:07:65:a1:97:07:0c:12:75:22:
bc:5f:d5:57:fe:78:8d:79:65:82:7f:4a:dc:cd:fa:b9:ed:5d:
ff:18:bc:8d:c3:1f:ec:4c:b5:46:aa:a9:27:5b:f7:14:b5:15:
ab:37:2a:f2:84:00:b0:06:ef:45:e4:60:57:b6:04:c5:07:f6:
a8:e0:36:68:f4:83:0d:e7:a4:6a:46:ce:02:d3:51:5f:46:c8:
ad:07:f4:4b:2e:06:fa:4a:48:df:12:ab:96:c3:2b:60:eb:7f:
e0:65:64:6d:12:f2:c3:b7:7c:b2:19:e9:04:f6:c7:fb:65:bd:
ff:8f:87:13:fc:f8:50:65:54:3d:ea:78:7e:55:2d:2a:aa:8c:
98:52:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:52:25 2025 by rpki-client