Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: uau3lLsjrXHtoK5+y9oQhHHk0fS9Pbuat2ezxbAq6ik=
Subject key identifier: 1A:35:79:FF:DD:AB:75:95:58:89:1A:B9:DF:FC:F4:3B:DC:45:E6:B1
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 01969D87F5AEEA85B5A226680D535418DEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 23:00:55 +0000
Manifest this update: Sun 04 May 2025 23:00:55 +0000
Manifest next update: Mon 05 May 2025 23:00:55 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: MGBc1a/xBJpt30s3LNcj2scvx8BJvSwGKJZ0OyZl7a8=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:f5:ae:ea:85:b5:a2:26:68:0d:53:54:18:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: May 4 23:00:55 2025 GMT
Not After : May 5 23:00:55 2025 GMT
Subject: CN=1a3579ffddab759558891ab9dffcf43bdc45e6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:b9:c2:75:01:a4:6f:fb:43:43:62:c7:f8:
b0:58:d6:d3:d2:e5:0d:4d:a9:1b:a4:8f:5f:da:f5:
86:96:53:e7:e7:05:bf:8c:12:38:f1:ed:c3:91:99:
d5:4c:74:68:d5:12:7b:3f:b2:f2:81:ad:a8:f7:6d:
b4:05:58:a1:a0:36:5f:4a:c6:92:8f:f4:64:5c:ed:
7c:22:70:15:a6:c8:80:db:59:c8:39:9b:29:c2:b6:
5b:b1:d8:6a:55:b9:1d:00:d8:c3:e2:3c:c4:89:7a:
4c:f3:11:fc:30:32:c7:b5:0b:a9:ac:85:b4:da:58:
26:1c:1e:7f:aa:c6:26:e8:92:92:33:b2:3a:95:18:
7d:d7:47:a6:b5:cf:08:7f:ed:58:8b:75:e3:58:0e:
4a:c5:b4:c2:f2:5e:67:03:b2:46:16:0a:cc:d6:c1:
48:54:fc:eb:ee:d9:2e:81:72:e4:4d:33:1a:73:28:
e6:98:b7:7c:9f:04:34:c5:cc:63:7d:f1:52:71:03:
7b:55:41:c8:cb:0c:9e:85:50:28:c1:52:d2:6d:a9:
d5:d9:9a:96:4d:79:24:f4:ae:89:68:a4:a8:34:ec:
bf:d7:d3:03:9f:41:f0:0b:f7:10:0b:a4:e4:92:01:
75:7f:70:2c:9d:3b:5d:7c:84:fa:3e:e2:b3:e9:46:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:79:FF:DD:AB:75:95:58:89:1A:B9:DF:FC:F4:3B:DC:45:E6:B1
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2c:aa:e6:70:ee:14:85:c0:8c:28:b9:55:34:6d:24:99:3d:
2f:cb:11:2c:7d:04:33:cf:9a:2c:58:86:e9:dd:7e:a1:e6:46:
b1:0f:2d:2b:7a:0c:20:66:9d:ee:1a:70:4d:f7:20:35:c9:86:
8d:eb:22:2f:0a:dd:ba:8b:c0:ce:57:ac:20:9b:58:44:ef:aa:
02:3e:c9:5c:a5:a7:68:13:66:7d:e5:8a:e4:b8:1c:8f:dd:c0:
0c:0b:34:d9:2c:d7:38:2a:f2:78:0c:cd:a7:3d:fd:87:c4:61:
bf:ab:86:d9:fc:a9:bf:35:dd:2b:4e:ec:30:22:c4:5b:73:24:
ad:a2:69:42:4d:5c:81:53:46:3d:2e:cb:82:c6:37:b3:03:bd:
eb:43:4b:b9:3d:28:bd:9d:d9:28:e2:b6:e7:46:21:1b:56:6e:
55:f4:39:dd:f8:5e:50:be:29:5c:c3:50:2d:2a:d3:0f:35:43:
56:50:7a:f2:14:2c:d7:85:3a:d2:f0:be:d1:77:67:3c:a5:9e:
06:ed:bc:37:e1:35:53:ea:9e:5f:34:64:99:b2:72:8d:2e:ae:
99:fe:6a:5e:2c:8e:2e:63:4f:33:b6:16:46:a4:59:dd:57:04:
f6:3c:56:a4:1d:61:bc:d1:a5:79:b9:e0:a5:5f:ea:c8:c5:30:
6e:b2:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:10:17 2025 by rpki-client