Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: PiUQ5qq7OcRUkhayzIAz8xfy8GhfDN350UyXRgvXgXE=
Subject key identifier: 8D:C1:BB:12:33:22:0D:7F:1A:C1:DD:52:8C:14:F6:B1:69:D2:E1:A0
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 0196C7965C06C7C42FFF1A1A6D2BEC9FE003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 1315
Signing time: Tue 13 May 2025 03:00:42 +0000
Manifest this update: Tue 13 May 2025 03:00:42 +0000
Manifest next update: Wed 14 May 2025 03:00:42 +0000
Files and hashes: 1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: CJ8b2BydE4oN+s4VMhTfWPSC+aRmJuCA/C3RBcxpYC0=)
2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:5c:06:c7:c4:2f:ff:1a:1a:6d:2b:ec:9f:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: May 13 03:00:42 2025 GMT
Not After : May 14 03:00:42 2025 GMT
Subject: CN=8dc1bb1233220d7f1ac1dd528c14f6b169d2e1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:d2:36:2d:d8:86:6d:1e:30:30:aa:69:fe:
56:16:1f:05:7b:25:82:c0:71:7f:61:bc:3c:b0:b8:
77:a8:b9:c5:50:11:cd:eb:7c:97:6a:3d:0b:75:b3:
d7:b2:aa:9d:5b:11:95:8f:07:40:d8:44:75:fc:e5:
ad:4d:71:c4:e5:a6:38:42:6e:80:20:09:af:dd:68:
b6:66:cc:fe:53:81:f1:03:54:c5:60:9a:18:5f:00:
0d:a0:f9:24:e3:95:82:7b:01:c7:97:e8:98:26:db:
53:db:61:e0:b0:f2:fd:8d:90:70:4f:b7:6a:a0:2c:
2f:7f:e7:ee:fe:13:17:88:34:9a:bc:1c:97:f8:ff:
61:41:09:78:f0:ac:a2:4f:d9:d1:67:ad:51:e7:41:
a6:a5:65:53:cb:df:02:52:b4:93:bc:62:f8:0a:46:
88:1a:f5:f7:cc:76:e0:a4:7b:4c:da:67:12:3f:df:
e8:7c:3e:16:e5:be:87:df:98:b9:0f:c9:8f:a0:00:
24:37:e7:e8:6c:ad:9a:d9:cf:16:0a:3e:56:7c:99:
81:20:68:13:bd:e6:f4:e4:9b:9e:44:44:94:43:87:
3a:f1:c0:a8:36:0b:d6:91:3b:dc:2c:59:db:ed:ff:
38:03:7c:f4:e2:e7:d5:c2:5b:ea:40:8b:40:d7:af:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:BB:12:33:22:0D:7F:1A:C1:DD:52:8C:14:F6:B1:69:D2:E1:A0
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:cd:b4:72:8e:63:38:f0:e9:fa:30:52:db:05:cd:51:c8:
4e:ad:e4:4f:87:61:39:23:fc:d8:ae:3b:b2:b2:ae:c7:56:a4:
a2:81:d5:ea:57:c4:0a:52:be:57:33:71:9b:05:5d:c8:5e:af:
91:84:f9:3b:84:56:f4:b4:34:c0:99:74:c6:0b:f8:4c:e4:22:
55:8d:3a:cb:3b:7c:ca:de:fc:1a:b5:33:0c:4c:d5:87:ba:4c:
c3:56:94:a6:9b:e4:36:71:92:b6:65:b6:4a:12:54:f7:17:dd:
08:63:d6:ca:0e:38:ae:fc:31:7e:06:88:ca:c7:01:5a:d3:62:
ae:b4:04:71:53:8d:1f:21:b8:6c:db:0b:17:12:2e:b3:87:bf:
ad:2d:01:dd:ff:1f:d2:38:25:03:f7:54:3c:0e:29:2a:59:64:
c6:84:4e:35:64:d9:5b:c3:d1:96:e5:95:3c:28:c0:87:1d:24:
61:ea:ea:80:5a:cc:da:7c:a9:4e:be:e6:6f:97:c8:80:29:c7:
7c:dc:37:4a:ca:ae:2b:c5:68:ea:7e:a3:fc:76:6f:53:29:79:
2d:37:49:d9:63:c2:b5:a3:11:96:bf:13:61:3d:66:75:92:35:
cb:9d:dc:14:0a:1c:ae:bb:82:04:37:d2:ff:16:9d:44:9f:9e:
58:1e:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:31:54 2025 by rpki-client