Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: YW2JuvtMauEdRbtU7otc4t8o+v/uI1uNlRXvwd5IGx8=
Subject key identifier: 12:40:DD:9D:CF:EC:D2:6E:A6:ED:41:36:54:13:52:85:5D:D5:47:4F
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 01969CAC94B2386252B196ED5B7872E3EE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 1269
Signing time: Sun 04 May 2025 19:01:17 +0000
Manifest this update: Sun 04 May 2025 19:01:17 +0000
Manifest next update: Mon 05 May 2025 19:01:17 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: FUdBHeMZReGnH5rI0huqDIucbsCM+v2T9YYhxA3EQD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:94:b2:38:62:52:b1:96:ed:5b:78:72:e3:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: May 4 19:01:17 2025 GMT
Not After : May 5 19:01:17 2025 GMT
Subject: CN=1240dd9dcfecd26ea6ed4136541352855dd5474f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:f2:f7:5e:ce:79:73:de:ba:af:27:cc:71:
84:5e:2b:a4:b3:9a:08:01:3d:54:17:ef:64:32:3a:
8b:c3:05:94:d2:17:fe:db:5e:3c:61:a8:75:93:80:
a2:61:cd:ee:b6:ad:7b:e1:15:94:76:82:03:aa:25:
4a:df:27:7f:4b:95:65:c0:05:72:3a:d4:87:cc:63:
13:80:5d:8d:cd:b8:6e:36:8b:3f:3f:7a:6e:36:1c:
e3:76:be:70:8f:99:fe:3d:2f:82:c8:45:64:07:cd:
30:1b:c3:ec:bb:20:93:41:0b:73:ee:b8:f3:11:92:
0e:3c:58:f1:c7:ba:18:fb:51:30:39:9d:30:f7:f9:
0e:76:bc:c9:04:0e:fd:69:c2:d7:8f:fa:3f:1e:55:
80:57:18:96:57:12:df:53:c5:97:5b:f7:9b:b2:39:
81:7a:2b:be:04:0b:08:10:f6:8f:46:14:a9:73:fa:
4f:83:58:3a:27:90:cf:86:1b:4f:21:be:db:9e:da:
87:6b:eb:58:3e:00:60:29:09:f1:82:3e:c9:fa:de:
90:b8:45:f9:ae:2d:87:dc:ff:5f:b9:b4:0f:8c:e3:
78:5a:a8:7a:98:c2:14:13:94:87:16:aa:96:06:21:
cf:1a:fd:cc:52:15:a5:fc:5d:ee:b8:fe:5a:2b:d1:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:DD:9D:CF:EC:D2:6E:A6:ED:41:36:54:13:52:85:5D:D5:47:4F
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8b:bf:a6:6c:be:72:91:ba:be:45:87:79:56:cd:ec:a5:36:
ba:7d:fb:2e:e0:8f:dd:e5:0a:30:bc:dc:33:57:5c:72:17:e6:
28:50:de:4b:77:a1:53:cf:34:60:40:f4:63:80:06:07:0e:d6:
4a:a0:38:eb:89:5f:2b:00:64:79:f7:c3:c3:fe:15:dd:ba:3d:
2d:12:34:34:0c:72:4f:ca:5a:24:20:05:6b:74:75:f0:e5:f6:
57:0e:cf:29:84:0a:63:22:42:77:1b:62:13:23:d3:5a:e9:a4:
45:29:a5:4b:7c:3e:a5:76:6d:1c:10:f3:da:65:7e:8e:0d:62:
49:e0:75:5d:67:36:9f:dd:d2:26:3e:75:e2:d2:9c:26:01:fb:
37:b3:f1:a0:4f:c3:aa:c1:a5:2a:6a:44:63:5f:37:29:05:75:
61:ed:16:27:90:14:ea:35:3a:ef:25:9a:e6:d0:4c:5c:a0:d1:
2c:1c:03:b5:aa:fb:b6:eb:37:71:f9:4b:76:4c:66:db:c6:14:
cc:b6:97:28:6f:31:ec:71:ab:e8:cc:ac:1a:7b:25:f0:ff:73:
27:9f:ab:92:6d:77:6b:20:14:af:3a:1c:a9:04:0a:29:05:bb:
e8:8e:a4:45:8a:4d:1d:4f:62:09:b9:56:e1:5d:49:f2:88:e5:
73:c9:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:22 2025 by rpki-client