
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: MeGJVrkJiLWoF28ffV2RhyA5R4Rv8RnnIuE9d1xETgQ=
Subject key identifier: E1:8A:66:0E:CB:F2:2E:C8:D0:3D:BC:FF:F0:4B:6F:77:DC:91:C0:19
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 0196C502DCFBD154AA4B163A30F2A46A8F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0749
Signing time: Mon 12 May 2025 15:00:21 +0000
Manifest this update: Mon 12 May 2025 15:00:21 +0000
Manifest next update: Tue 13 May 2025 15:00:21 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: aFfD4dwCudeAHYkfbyRRHmsc0KpUv/e8eiFFl0/22vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:dc:fb:d1:54:aa:4b:16:3a:30:f2:a4:6a:8f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: May 12 15:00:21 2025 GMT
Not After : May 13 15:00:21 2025 GMT
Subject: CN=e18a660ecbf22ec8d03dbcfff04b6f77dc91c019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:d3:52:fc:24:74:a5:f3:47:e1:61:04:90:
15:81:a9:31:68:b1:c8:de:b6:1a:47:6c:e6:bf:03:
f9:e5:39:df:02:fd:c5:e3:df:d3:2c:d1:84:e3:bd:
cd:af:83:bd:3a:fb:ec:4c:98:5b:24:68:9b:00:3c:
7b:4d:8c:df:f3:09:da:e8:0c:97:f7:9b:90:c8:3e:
5e:07:7f:2d:ec:72:ab:51:2c:91:1b:f8:89:20:c4:
d0:8d:c3:46:2f:72:75:69:ec:4e:9b:bf:1d:6f:29:
37:43:f0:4e:f8:e3:d0:7f:ad:40:e3:ba:23:28:03:
62:7c:57:e2:e4:fe:44:cb:bb:b5:23:ed:f3:36:6d:
d7:aa:44:e0:2d:84:7b:49:94:56:be:11:c7:53:9c:
8d:52:3f:af:6d:bb:f0:51:dd:69:0a:42:26:75:18:
cb:46:fb:12:2c:81:54:86:7a:6d:ad:b7:c5:cd:4e:
24:79:9d:b8:d3:b4:63:b7:50:53:e8:e7:40:f8:1e:
91:c2:99:91:9b:63:a6:af:f5:b8:46:0f:c8:93:e9:
e2:3a:71:56:10:68:c2:89:f7:46:b9:28:fb:c4:21:
bc:31:c8:36:7d:d2:49:b0:b7:9b:53:99:a1:9c:40:
3d:7c:fb:2b:5e:80:e3:32:8f:ef:aa:d2:82:45:92:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:66:0E:CB:F2:2E:C8:D0:3D:BC:FF:F0:4B:6F:77:DC:91:C0:19
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:db:a7:c7:a0:8a:37:1e:70:60:b6:27:96:c5:b8:50:6d:
e1:9d:d7:fd:fb:ee:12:e9:55:a1:64:b8:a5:8c:ec:dd:43:94:
3e:1a:12:b6:7a:1e:7a:15:55:72:fe:3e:16:df:d9:27:c5:3b:
01:98:93:50:ab:e7:35:a3:f5:d8:95:ad:79:7c:33:ed:d8:1c:
02:43:ab:a1:1f:82:90:a0:57:aa:a1:70:06:af:64:7c:d6:c7:
76:96:1d:e1:b0:44:7e:33:15:63:62:fb:c4:b2:7b:50:ad:bf:
97:3b:90:89:bc:ca:ac:11:fc:26:e0:8a:31:dd:21:3a:67:45:
72:b9:b3:16:73:27:a4:13:62:ce:5e:3f:c2:db:7b:97:34:e3:
04:b6:2d:46:de:10:b6:a6:5b:c0:fb:82:d6:0e:4f:04:7d:7e:
f1:74:4b:65:40:d3:5f:ea:df:81:41:c3:d1:e1:8c:b8:f6:57:
dd:8c:c2:cc:c8:77:5a:1e:a0:e1:a3:33:d5:1a:7d:c0:9d:50:
98:b5:cb:1a:cc:f1:71:20:6e:05:ae:c1:60:27:c5:91:a8:60:
a6:4e:e0:15:2a:ac:f3:2e:f1:ed:e4:50:0c:07:16:e0:9f:e9:
aa:c4:0c:7e:cd:c5:2c:77:9e:ac:92:47:f6:d2:5a:25:bd:a9:
5f:29:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:15:58 2025 by rpki-client