Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: 0FabLMCimSD+0PatpySMQ6ZznqZcdDHXh1YE8oCgu9Y=
Subject key identifier: 00:32:07:24:1F:4F:2D:AC:EE:2E:A6:67:C8:73:0D:0B:48:D6:3E:E5
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 0196CA9751EAFC9418DF74EA91B1F9A5C268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 17:00:36 +0000
Manifest this update: Tue 13 May 2025 17:00:36 +0000
Manifest next update: Wed 14 May 2025 17:00:36 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: d7ETkYLxQSHvksMjdiBMqCs8WJUbg5Sf38lX4TNLW/g=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:51:ea:fc:94:18:df:74:ea:91:b1:f9:a5:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: May 13 17:00:36 2025 GMT
Not After : May 14 17:00:36 2025 GMT
Subject: CN=003207241f4f2dacee2ea667c8730d0b48d63ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:bb:76:1f:d8:14:96:aa:bc:77:7f:8d:77:
bb:cd:36:60:9a:73:27:9f:74:10:7d:8a:60:2c:5d:
00:79:66:26:81:82:c6:69:38:49:0b:c4:a0:19:44:
7b:c9:b9:07:7b:bd:46:72:81:6a:e9:bc:e9:d6:66:
91:24:b7:f6:f3:99:73:75:ef:94:0e:69:6b:9e:54:
fd:e3:0b:33:a4:ca:de:02:1b:e1:28:8d:16:d1:4e:
2a:60:a5:14:3f:75:5a:52:b2:08:cf:72:42:da:99:
9a:61:94:d3:b7:8e:6a:fc:85:4a:ec:f8:12:fa:b4:
0c:81:c1:88:2c:c1:ef:61:81:7a:f8:a9:1b:f9:fd:
ad:2c:32:3b:97:d4:2d:33:0e:05:70:59:e2:cd:db:
4a:c6:18:51:6d:1a:13:58:25:b8:cc:08:5e:e6:2f:
14:e0:d9:c6:1a:9e:37:77:6b:56:ac:c6:4c:e6:41:
b0:71:b4:ac:3b:a4:66:eb:e7:9d:b1:c6:9e:18:07:
84:57:51:8a:d4:37:e7:c8:19:bb:b9:07:6a:a8:c8:
8b:46:55:81:17:73:b3:1c:33:26:cf:9f:74:3d:04:
31:f1:5f:de:ac:f3:7a:98:42:ad:a7:5a:79:cf:6a:
dc:71:ac:9d:1e:7b:68:05:93:75:84:0c:24:89:ae:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:07:24:1F:4F:2D:AC:EE:2E:A6:67:C8:73:0D:0B:48:D6:3E:E5
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0f:81:20:18:7f:ea:5c:ec:da:bb:07:3e:be:9c:c9:24:35:
e5:3b:26:df:2f:66:82:48:53:23:6e:7c:cc:f8:37:8f:a2:19:
5c:ed:36:80:b4:bc:04:36:96:b6:36:97:d4:9b:17:56:23:81:
72:ca:22:95:68:cf:f5:6b:fc:f1:bd:bb:6d:ab:05:e6:10:31:
fc:51:1e:08:7d:e0:86:12:0e:9f:fd:29:46:c2:74:92:73:44:
60:dc:8b:49:b3:ee:c8:f3:1f:24:5a:58:5c:f7:31:c8:d3:00:
e1:84:da:9f:0f:1d:a4:0e:a3:2a:cb:2b:57:7f:88:1d:e3:3c:
96:d0:37:31:77:41:a7:b3:42:e7:f7:e4:29:01:da:c4:6e:19:
08:79:a4:4a:b4:f6:45:f3:fe:e2:43:ca:18:4c:d2:65:19:f4:
5c:41:2c:9d:bc:57:e7:5b:47:b1:71:23:71:58:c6:ce:f8:29:
7b:fb:2d:78:a1:90:0f:8c:26:a2:6e:38:48:a6:26:4a:a0:a4:
b2:fb:10:43:6a:06:53:2f:36:83:71:c2:21:8a:ee:89:ef:43:
67:c7:4a:0a:6f:61:e9:76:2c:5e:6c:c6:45:a7:b3:b6:d3:9b:
a8:7e:37:14:79:4e:04:09:4c:a7:b0:40:57:60:63:26:14:76:
95:02:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:57:57 2025 by rpki-client