Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: Hh/YcC8hLfM/qLMSmPWENSN/CWAf9Mrrv9OjSfWNMrI=
Subject key identifier: 16:A6:61:D4:53:74:B2:C6:7C:A1:2D:9C:33:CA:AB:08:FD:9F:A2:85
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0196B9358E35927BFCA313337898275B8BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 1277
Signing time: Sat 10 May 2025 08:00:16 +0000
Manifest this update: Sat 10 May 2025 08:00:16 +0000
Manifest next update: Sun 11 May 2025 08:00:16 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: vDGS/tjrSr6J+66ar5z+pSFDDJHdhTWBiFtJQi1J0sk=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:8e:35:92:7b:fc:a3:13:33:78:98:27:5b:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: May 10 08:00:16 2025 GMT
Not After : May 11 08:00:16 2025 GMT
Subject: CN=16a661d45374b2c67ca12d9c33caab08fd9fa285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:d0:bd:51:a9:e4:d4:db:70:e5:ff:3b:e6:
1c:5d:f8:56:21:b2:09:e3:cf:ad:34:bb:50:bc:4c:
c3:bd:ff:c4:74:e5:ab:33:14:a3:97:7d:51:98:37:
7f:20:a5:18:98:61:af:34:69:49:8c:3a:7c:0f:85:
ee:af:4b:29:6b:6d:b3:9f:6a:f3:f2:d1:6e:82:92:
05:05:29:8b:34:c5:d6:35:fa:1f:ee:5d:d6:5f:ee:
a5:ca:ad:b9:ab:d1:f4:df:26:eb:86:02:e5:10:ea:
e3:44:09:eb:dd:3c:96:5f:41:87:97:9a:29:58:5e:
02:84:35:77:cd:6d:7d:f8:91:9b:8f:9a:e4:f2:c2:
94:78:63:9d:4d:84:fc:5f:ca:34:7e:37:23:46:1e:
a4:20:bd:1e:19:16:eb:20:03:38:b4:ba:4e:ec:cc:
34:e4:1c:c8:62:ed:88:79:8c:3c:8b:da:84:9a:d8:
95:ac:df:bb:47:95:97:e4:8d:b5:38:99:a3:0c:5a:
d2:8e:91:74:bb:0a:68:59:fe:75:e8:61:76:a1:dd:
24:17:6c:d2:f6:92:77:7b:77:10:1b:f6:ac:b6:f3:
71:c4:15:f7:18:4a:bb:53:d3:c5:ae:b7:ea:d7:65:
09:80:9e:59:47:fd:dd:56:b8:d8:a0:d6:f3:58:33:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:61:D4:53:74:B2:C6:7C:A1:2D:9C:33:CA:AB:08:FD:9F:A2:85
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:42:70:9c:15:af:98:e1:21:d0:c9:46:e6:68:63:b8:e1:29:
5c:62:21:87:d5:24:2b:1f:5c:20:1d:3c:8f:1c:a8:57:ff:61:
fd:47:ce:f2:c4:5b:55:c6:fa:1c:3e:42:45:df:ab:5a:72:ee:
60:fd:43:8a:a3:10:fd:63:72:10:2b:b9:ca:f5:1e:f8:7a:7d:
b6:9b:e1:8a:a3:1a:2b:98:10:e4:dc:7d:83:c3:64:62:51:fc:
bb:74:b3:a3:69:82:10:36:74:ef:c7:67:9e:58:d4:b1:b3:49:
41:41:98:19:72:b4:d0:ed:0c:fe:7b:9a:4a:c9:ac:fa:b9:47:
3c:37:d7:81:7d:8d:be:cf:d2:8c:1f:c7:ff:44:a0:53:ca:58:
8e:4b:e1:63:b0:47:c8:30:e8:c7:e1:6a:5b:76:b9:88:18:a6:
d3:5f:8b:07:bb:91:f7:4e:38:99:a5:05:2b:ea:5c:58:7f:43:
83:9d:29:55:16:a2:b4:cb:07:fd:56:3f:98:d5:3e:b9:9c:60:
33:4e:eb:25:99:03:12:ed:db:fe:dd:2d:4b:b3:b2:28:11:50:
a3:d1:c0:6f:e7:4f:b0:7b:05:bc:1f:6c:1f:c1:5a:e1:a6:76:
49:6c:78:ee:f5:23:35:50:8c:27:a0:ee:bc:e1:b8:90:9b:a3:
b3:5d:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:35 2025 by rpki-client