Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: b0JleVNE2VPDxHkqqasBL3wqEETzjEJ9UkHCbeY4fLs=
Subject key identifier: 3D:D8:31:27:46:91:F5:B8:93:7A:A0:8A:41:8D:D4:C5:0E:D5:D4:2C
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 0196A088EDCFEFB3D6A5E966F6FCDA4153BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 13:00:50 +0000
Manifest this update: Mon 05 May 2025 13:00:50 +0000
Manifest next update: Tue 06 May 2025 13:00:50 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: Jsky/kjrc6sh4Ef31PWC6fpOof/MuVMWZDtHSd6nXpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:ed:cf:ef:b3:d6:a5:e9:66:f6:fc:da:41:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: May 5 13:00:50 2025 GMT
Not After : May 6 13:00:50 2025 GMT
Subject: CN=3dd831274691f5b8937aa08a418dd4c50ed5d42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:9c:89:56:f8:7e:fc:11:52:64:b9:75:3c:
4e:9f:76:70:d4:33:c0:0f:69:bd:17:aa:98:0d:01:
5e:88:a5:2a:f4:3f:89:c0:d6:3f:a4:87:fe:3c:e8:
fb:4e:b0:9f:a3:a8:dd:95:b2:f9:3e:08:de:7d:4f:
d5:da:04:c1:d0:fe:42:13:e2:b2:6a:f5:17:c4:e6:
89:68:6d:b5:f6:d0:49:d7:15:6f:48:bd:d9:e4:19:
42:5d:cb:ce:9b:ec:7b:1f:c4:54:1a:18:df:a2:24:
21:87:28:55:17:bc:e0:36:e7:30:b9:68:2a:dd:f2:
36:28:1e:67:f2:90:49:86:93:e0:c9:73:2d:a1:39:
24:5b:a6:a5:c0:65:b0:52:12:c0:4d:6f:7a:c8:b5:
0f:ec:e4:94:43:08:5f:2a:20:b7:4f:b3:78:5d:44:
85:df:ec:09:b6:5f:82:a2:1d:4d:aa:00:d7:57:47:
dd:4b:ff:25:c0:db:61:58:73:ed:66:3c:86:d5:1b:
57:61:11:49:1d:66:77:e5:ca:18:0d:1d:3d:5d:a2:
62:30:bc:b5:ae:82:fb:bf:6a:56:b4:4e:92:b9:7c:
fc:aa:9a:7d:1b:67:db:cf:cf:2e:c3:11:64:67:9c:
b4:c7:b8:08:e9:73:fb:6a:61:b3:ce:37:20:76:20:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:31:27:46:91:F5:B8:93:7A:A0:8A:41:8D:D4:C5:0E:D5:D4:2C
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:ce:69:ce:2f:3a:d1:b1:38:3d:01:0c:a4:08:d0:ef:c6:
5c:37:0f:0c:a9:40:a5:a3:01:cb:f1:26:21:e3:ee:c2:d0:94:
85:7f:37:2a:4e:f2:33:5b:55:f7:1e:59:a5:76:a8:1f:35:be:
ed:d9:63:af:fc:f9:13:a7:1d:49:f6:7a:34:c0:ae:36:e3:99:
e4:44:14:12:06:5f:57:e4:3b:5f:02:fc:1a:4e:6a:32:cd:5b:
b7:76:7a:f8:a7:46:9f:6e:92:fd:01:7e:e9:c4:ec:dd:f2:84:
94:11:ed:68:43:95:9f:15:d9:a0:93:0b:83:3b:4d:62:8b:01:
4b:d4:60:5c:9d:8f:dd:0f:5c:31:b0:02:fb:38:dc:15:d7:c4:
55:a5:5a:47:12:57:8c:53:34:18:76:cb:0a:89:e6:7c:fc:48:
57:cf:da:89:4c:0e:df:72:e6:90:bf:c0:ee:07:91:4f:ad:aa:
35:a7:6c:1c:b8:b7:2c:76:02:7f:4e:a8:d0:c0:ce:0b:2a:ff:
4b:ba:bb:17:98:11:12:97:ec:6b:42:21:37:57:4a:33:e6:7d:
03:88:74:66:66:0c:ed:d8:90:0c:6b:3c:3e:10:99:93:09:e4:
49:f7:f8:1e:6e:dd:69:f5:9e:c8:bd:ef:cd:d7:86:c9:7f:46:
1a:c1:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:38:38 2025 by rpki-client