Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: 3CG9hfAMNdqfFp//rfwPQiOKAvoAvFYHE6D97WybkQo=
Subject key identifier: AC:D2:A6:EB:D7:C3:51:D8:16:C1:41:6E:A7:12:16:FD:C2:68:04:25
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 0196BE25B8AF001AB30845D40FCA0AC03D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1275
Signing time: Sun 11 May 2025 07:01:05 +0000
Manifest this update: Sun 11 May 2025 07:01:05 +0000
Manifest next update: Mon 12 May 2025 07:01:05 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: KP90RiUShU+KL/+jabqAR16NITO43207CSMYcKiMlbE=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:b8:af:00:1a:b3:08:45:d4:0f:ca:0a:c0:3d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: May 11 07:01:05 2025 GMT
Not After : May 12 07:01:05 2025 GMT
Subject: CN=acd2a6ebd7c351d816c1416ea71216fdc2680425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:67:d2:56:e6:aa:f9:35:68:d9:06:cb:83:
89:40:72:ac:2d:b6:dc:cf:a9:73:3c:71:ab:9e:91:
24:0b:83:8f:cd:3e:8b:54:6e:96:69:23:9d:f9:6e:
10:7f:bd:0f:d6:0c:e2:c4:77:d2:91:4d:f2:e9:07:
55:68:19:a6:70:30:83:ac:20:a4:6e:f1:bf:4b:e7:
34:98:5e:25:a0:92:0d:1e:30:4d:34:7b:48:44:b9:
4b:93:c6:e0:8a:02:92:ae:76:73:29:ad:f8:0f:e0:
30:90:dc:bb:3b:59:89:5f:ca:98:0f:a3:02:da:ed:
7b:2a:d8:9d:8c:e7:17:84:01:ca:3a:6a:c7:a0:da:
fc:be:f3:04:88:fb:17:de:d0:a4:c3:ba:54:6d:80:
8f:19:3f:d5:fe:8b:9b:58:08:05:97:5f:14:fe:1d:
74:8d:b5:36:2e:ab:92:45:61:e1:e2:fc:ff:e4:e7:
89:58:d6:07:75:94:fd:f0:d8:f9:16:8b:6a:a9:e1:
7c:5e:07:92:38:d7:7e:0f:0c:a4:2b:7b:f6:a6:14:
50:5e:a6:33:77:51:1d:46:b0:70:de:10:bc:e1:87:
57:4b:12:1d:b7:cd:01:89:c2:40:1c:f5:93:ce:3e:
dd:82:ee:87:cd:35:20:bd:62:00:d8:0a:e1:ce:fd:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:A6:EB:D7:C3:51:D8:16:C1:41:6E:A7:12:16:FD:C2:68:04:25
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3d:11:ee:1b:02:62:74:4a:86:49:ce:59:41:db:69:b3:71:
05:52:db:b8:fa:20:27:bb:1d:93:ea:0c:1b:bb:9a:5c:a5:f4:
a0:c7:bb:98:a1:19:6b:f3:2e:ef:a9:e5:c6:db:2e:3a:33:b8:
30:a7:56:7f:1b:12:06:16:29:8e:4e:d8:4a:51:f4:b8:9e:cf:
33:66:d7:3d:4a:ca:19:1f:b3:b0:b9:b3:35:f8:2a:0d:3b:5d:
83:d1:a4:35:76:25:52:51:4d:8e:2e:5c:e9:32:39:84:c1:6a:
ee:cd:5b:a3:e5:37:07:50:bd:c5:76:59:5b:92:f3:14:f4:ad:
f0:b0:44:c1:74:b9:ae:a5:f7:1e:a2:a4:f5:4e:2e:c4:1f:98:
cc:3c:1a:bf:02:23:1a:64:5f:88:a4:cb:c1:74:cc:f6:ba:05:
90:f8:8f:88:ed:7a:fb:01:50:eb:bd:c0:98:21:c1:3e:78:fd:
3c:b2:e4:07:11:ac:89:22:4e:cf:b5:bd:fa:2f:d7:63:a3:ed:
67:1c:c7:b2:ca:28:c5:d4:20:6b:f9:dd:5d:23:97:b7:8e:19:
d5:e7:12:21:15:a7:f7:02:43:aa:72:fa:48:aa:73:5a:97:c7:
2f:ff:84:50:fb:7c:46:c3:3b:af:89:5a:fa:f8:e9:80:4e:60:
bb:24:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:22 2025 by rpki-client