Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: Z0KSjUgA+4vjhzCR8aA6x9Wg741moCTidWMo0Ac8FOo=
Subject key identifier: F4:2B:86:A4:1E:CF:0F:DD:9B:43:D5:45:10:20:47:CC:1E:C2:CA:1A
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 019658DDAFE863B0BFC971AC3011D7207355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 0106
Signing time: Mon 21 Apr 2025 15:00:45 +0000
Manifest this update: Mon 21 Apr 2025 15:00:45 +0000
Manifest next update: Tue 22 Apr 2025 15:00:45 +0000
Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=)
2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: Snq3tRTIEr5z5Ky0pRtvpt82Fq3vuESqXXghpUi7pXA=)
3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=)
4: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=)
5: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=)
6: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=)
7: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=)
8: pPHmbMikVBACOA-xj0C6dNDZYpM.roa (hash: Tckf3zisW/juBkSkf5E1qa9SaVTAQq8IrgBpb3JvyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:af:e8:63:b0:bf:c9:71:ac:30:11:d7:20:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Apr 21 15:00:45 2025 GMT
Not After : Apr 22 15:00:45 2025 GMT
Subject: CN=f42b86a41ecf0fdd9b43d545102047cc1ec2ca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:ca:4c:d9:57:ed:e1:74:99:e3:de:6e:7b:
1b:95:ce:b6:81:1b:72:d2:d2:f0:96:b5:e0:1c:25:
2e:a3:5f:fe:be:f5:37:fe:73:9d:68:d3:00:f2:93:
4a:d1:12:25:2c:b4:08:bd:ea:5c:4a:17:20:ae:98:
01:56:7a:18:c8:4d:96:61:28:b2:4d:8b:06:8a:3b:
e7:8d:61:f9:8f:a7:6a:78:32:c0:09:1f:29:02:7e:
67:29:38:1a:6a:25:f9:0f:15:e9:c5:26:64:fc:cc:
23:d4:7c:38:48:14:d2:19:ae:70:84:a5:7d:af:34:
24:5e:cf:0d:72:24:a6:c7:c5:cf:27:9a:b2:a7:2d:
4f:3a:a6:26:0e:fe:68:f4:24:fb:64:03:ac:41:7e:
4e:3e:5a:9c:c0:e1:e7:0a:2e:65:30:21:59:61:e0:
a0:e4:4e:15:4a:25:17:19:ba:7d:6f:64:71:27:98:
7b:61:4a:81:dd:94:68:b0:67:ae:eb:c6:ca:22:47:
a9:04:af:0e:3a:39:9e:e6:1f:0a:52:50:46:61:29:
e5:6a:33:fa:61:8c:56:8e:4b:b1:0d:10:69:c8:3b:
94:4e:23:13:d3:eb:81:82:f5:0f:d9:7a:43:8a:05:
be:56:53:22:a7:b5:4e:6b:70:36:ee:e6:93:79:aa:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2B:86:A4:1E:CF:0F:DD:9B:43:D5:45:10:20:47:CC:1E:C2:CA:1A
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:61:60:bb:ca:78:4c:70:04:d1:31:14:98:04:fa:13:c0:66:
0d:f7:1f:7a:5c:bc:a9:80:e6:1b:03:f2:6a:00:6b:e8:69:58:
57:c6:ee:3f:75:5b:6a:fa:29:24:91:11:14:d7:41:d5:96:2a:
52:86:a4:d8:de:cb:c6:16:46:89:a0:78:04:30:dd:93:21:7d:
f9:59:4c:bb:df:4c:3a:7f:c2:fd:b4:c6:4d:9e:fe:92:40:75:
ba:55:1d:e9:94:24:d9:16:e1:a2:16:40:99:64:ec:55:aa:01:
ab:69:e2:ca:b8:c4:97:69:3a:2d:12:38:ff:d4:36:26:8a:b8:
d4:73:8b:41:59:eb:ac:fb:e5:2e:1c:77:2e:79:01:47:13:79:
7c:e5:7e:ab:1a:fb:94:41:8e:b7:d6:31:bd:c9:72:35:ca:2a:
4e:6e:ae:53:44:c5:e2:f2:1b:3d:75:ae:b0:dd:49:ad:b1:c7:
7f:d3:d4:74:97:c4:93:ce:27:45:a0:1b:01:21:9e:46:b4:d1:
d6:f8:9d:fc:9e:b1:b5:89:14:02:a8:cf:25:ef:78:b9:a8:ce:
f5:4a:e4:35:45:58:ea:db:5a:4d:e4:d6:8f:ff:44:8e:5a:29:
1d:c6:00:6a:9c:68:19:18:42:42:79:1e:08:71:75:cf:ca:0d:
3d:60:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:09 2025 by rpki-client