Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: GudUVvXUYtNt3fFFFt/JJfPjJ3RPtRF73oSXshPTBcg=
Subject key identifier: 42:33:F8:EC:AE:29:A4:0E:5F:0E:FF:33:4E:04:EC:4B:F4:EB:51:62
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 0196C683444926BB1B33C9EF72115BEC2D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 22:00:13 +0000
Manifest this update: Mon 12 May 2025 22:00:13 +0000
Manifest next update: Tue 13 May 2025 22:00:13 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: SB5tEWbFg2EUqpEGdKi1hZBrYyKZGsq4Cj/+xULq6D8=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:44:49:26:bb:1b:33:c9:ef:72:11:5b:ec:2d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: May 12 22:00:13 2025 GMT
Not After : May 13 22:00:13 2025 GMT
Subject: CN=4233f8ecae29a40e5f0eff334e04ec4bf4eb5162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:8c:b6:38:9c:c6:7c:24:c8:03:80:8d:5b:
32:9d:72:ad:67:41:88:92:7d:7f:8d:e5:08:dc:41:
2f:f2:19:28:2e:f3:4c:cc:3c:cd:35:ab:7f:6c:23:
cf:d7:9d:31:a2:ef:c9:9e:aa:50:96:ba:38:64:73:
41:a3:83:29:57:d5:54:ea:18:76:ab:dc:f4:2e:3b:
e8:6a:28:f6:c4:4a:09:c3:14:1a:6f:77:3e:62:2f:
68:9d:32:c4:78:ca:fa:94:24:c5:fa:b1:c1:3e:35:
d1:06:ec:7d:e9:d3:9b:5a:91:fa:e5:f7:4a:c8:35:
e8:cf:f8:72:fd:95:98:3b:d3:31:d8:9e:09:c8:1f:
7b:5b:ac:f2:e7:1b:c2:83:02:fb:9d:fc:34:68:e1:
3c:65:84:87:50:59:cf:7c:79:72:4d:c7:40:11:c9:
ec:61:7a:e2:a4:09:d3:1a:f1:bd:c9:d4:01:f8:b4:
5a:d7:db:a1:4d:7c:3c:6f:a9:77:8e:ad:00:86:7e:
d9:b9:8b:7a:85:c0:39:f7:ee:10:7b:66:ce:aa:b7:
19:f2:d7:5d:dd:3d:fc:b7:0b:94:22:17:8d:75:9e:
c1:8a:9c:17:a8:9c:3d:57:5e:ce:0d:fa:44:8f:13:
18:22:b8:65:f3:00:66:9c:2b:fe:d0:22:c8:b5:16:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:F8:EC:AE:29:A4:0E:5F:0E:FF:33:4E:04:EC:4B:F4:EB:51:62
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e8:4c:1d:de:d5:e3:85:34:c3:05:5b:4d:ae:d0:04:b4:a2:
4e:47:5c:c3:5a:d7:c2:ec:97:ef:f1:b6:5a:a3:be:82:c0:77:
ee:eb:0f:a5:07:3e:3a:18:37:86:31:43:0e:33:57:ee:a6:53:
90:0f:03:45:74:23:e6:49:45:c9:d9:6b:d0:93:3a:c0:fa:e8:
65:33:78:ba:cb:eb:0b:a9:d3:81:5f:91:b0:df:99:43:81:31:
48:91:58:7a:7f:1c:e0:d4:f5:e6:2a:fe:82:82:f4:68:47:a7:
a3:7c:f7:5b:a3:cd:0f:6e:c8:b6:9e:09:6d:aa:6a:34:b4:27:
cf:38:39:be:a5:47:16:79:67:de:49:f2:0c:37:fc:7d:09:99:
7d:a9:5a:fe:b9:8e:a2:91:26:f9:8b:15:76:0c:9b:2f:2b:a5:
0d:74:79:d9:7f:03:45:f5:b4:57:3d:eb:b6:24:4f:8d:f3:3f:
ea:c4:cc:15:88:46:ee:1c:cb:2e:f9:09:b1:90:ea:e6:89:4f:
c6:df:82:62:93:00:45:9f:b8:ce:b4:53:fe:0a:cc:37:12:db:
64:55:b9:4d:01:e9:54:28:21:4b:7d:d0:51:07:64:5e:06:eb:
f3:34:ba:de:69:ff:f3:b2:88:bf:a1:c0:a2:3e:fe:a4:99:f2:
ba:db:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:05:03 2025 by rpki-client