
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: vY6oOLWM4ZumJpcEX9c9uIgYSthvATzhpG2wlHDSORM=
Subject key identifier: B9:57:63:D7:8B:93:A4:4C:26:74:E3:B3:2B:D8:E9:DC:62:6B:4C:BD
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 0196C8A8EE4F7CD165A43B4C5F98C3F68728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1281
Signing time: Tue 13 May 2025 08:00:36 +0000
Manifest this update: Tue 13 May 2025 08:00:36 +0000
Manifest next update: Wed 14 May 2025 08:00:36 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: ViwghfTSEQ4+21sEj+kL3h592/cUgkukfdPXPuKC1x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:ee:4f:7c:d1:65:a4:3b:4c:5f:98:c3:f6:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: May 13 08:00:36 2025 GMT
Not After : May 14 08:00:36 2025 GMT
Subject: CN=b95763d78b93a44c2674e3b32bd8e9dc626b4cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:2d:c9:19:6e:ee:f4:62:50:a3:24:10:74:
f8:5b:09:f7:c9:bf:ad:10:23:58:20:f0:e4:a0:4f:
01:b8:4f:c1:06:e3:df:78:0c:2f:3f:8d:5b:9d:4d:
40:44:e2:f5:b2:13:83:ac:31:4d:95:a0:a9:06:51:
22:5b:b2:c7:ac:98:5a:55:81:69:69:e8:94:82:50:
f1:43:e3:c9:2d:48:93:a1:15:0d:cc:d0:d9:a2:b9:
08:77:8e:7f:1f:ab:90:ac:4d:9e:31:7a:cc:e1:81:
01:14:ca:86:48:8c:48:12:35:73:95:be:78:7e:f8:
56:9d:21:09:7c:9b:d4:19:b3:d1:9b:13:7d:07:a8:
e5:bf:ce:60:03:82:ea:5f:f2:05:a0:bf:47:7d:38:
84:2d:95:b5:67:8b:2e:2a:b9:08:89:da:57:4e:c8:
0b:b7:c6:a0:54:05:fa:2d:41:2b:89:86:5d:8a:13:
37:e8:d8:10:a0:82:27:a5:76:6b:c5:a7:b3:74:c6:
fa:7f:87:c9:66:59:bb:70:59:95:65:ed:71:bd:bf:
e1:5d:60:b5:47:d9:ff:b6:87:7b:47:8c:7c:8c:24:
46:b9:b2:e1:af:e3:ca:47:4d:1e:f1:d1:50:95:af:
8d:5a:30:b3:1f:26:8d:1b:86:0b:ad:22:09:62:d0:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:63:D7:8B:93:A4:4C:26:74:E3:B3:2B:D8:E9:DC:62:6B:4C:BD
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:02:f9:c6:9c:ae:47:d9:8b:77:75:40:82:4b:af:75:50:78:
da:ad:8d:4c:96:44:f6:6c:49:a0:92:00:b6:e9:97:82:f8:c4:
db:f4:38:bc:10:05:91:7d:3f:28:d2:53:25:3f:4c:ad:ef:f1:
83:2c:74:b7:0b:9d:6f:38:e6:88:be:1c:ac:56:f1:7d:6f:37:
20:ac:59:9e:2f:44:0d:67:3e:61:f3:d7:95:ea:6b:62:df:e2:
a4:ed:76:6f:92:58:14:21:af:66:7d:4e:3e:72:59:ee:e9:e0:
15:17:bd:b3:bc:cd:03:ae:08:33:d4:55:ad:4d:f0:fc:31:2d:
7f:3e:4a:1a:d3:96:cb:5c:d3:90:01:f3:1f:7b:68:ce:f7:68:
1a:2b:11:1f:c9:66:88:af:dc:c9:31:af:13:b6:d2:06:c1:bd:
ba:91:dc:ee:31:4e:af:79:8f:f1:9f:2e:98:ba:a7:47:24:e5:
a3:f4:e1:47:6d:f7:ec:84:7b:bd:3f:39:ac:34:1f:48:d5:1f:
f9:17:da:c2:84:12:22:27:1f:41:4e:5b:00:61:1e:52:6f:08:
4f:82:c2:a2:4f:61:40:3d:27:6b:fa:61:45:d3:05:68:f2:88:
cc:b9:17:3c:50:45:5d:f5:2f:38:a1:ab:63:20:30:cb:a5:cd:
e1:f8:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:07:58 2025 by rpki-client