Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: WmJ2iPPudbu0vSwghF4cMqMUWfDUQXUa99uaLN7H3MM=
Subject key identifier: D5:E1:3A:0D:2E:35:E4:61:F7:31:3B:1F:D2:57:4C:43:52:E0:14:4C
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 01965838D0C55C02C2DC59B659AC0324925C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1491
Signing time: Mon 21 Apr 2025 12:00:40 +0000
Manifest this update: Mon 21 Apr 2025 12:00:40 +0000
Manifest next update: Tue 22 Apr 2025 12:00:40 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: wWAJ2gU64lf+lzo5yq7I52MX2023+yUDvcAohY1yegM=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:d0:c5:5c:02:c2:dc:59:b6:59:ac:03:24:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Apr 21 12:00:40 2025 GMT
Not After : Apr 22 12:00:40 2025 GMT
Subject: CN=d5e13a0d2e35e461f7313b1fd2574c4352e0144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:f2:44:aa:51:69:5d:9c:d3:d4:e7:86:aa:
f0:a5:e9:ea:ed:fc:cd:10:99:82:ed:07:15:e8:29:
64:22:a2:cb:20:d3:f2:2d:aa:3e:fd:b1:80:9f:7f:
ac:25:3e:43:08:4a:73:b3:23:30:1b:69:7d:3e:cc:
4d:a7:02:ec:b6:f4:44:e2:69:d7:fa:dc:46:5c:2a:
66:51:d3:ad:a8:eb:85:18:28:cb:f0:bd:7c:0c:44:
13:a3:e8:ac:6a:06:5a:36:b2:aa:dc:89:2e:ae:d4:
d5:b1:d4:fb:c7:c1:41:85:87:37:62:ca:c9:18:51:
f9:d9:4a:1a:06:e6:8a:04:e3:dc:30:d8:28:6c:ff:
72:03:95:29:13:dd:ca:9c:c0:49:dc:eb:30:56:4c:
16:a3:e2:20:79:e9:a1:d6:8e:b4:b5:a3:56:09:26:
ed:27:56:03:cb:ac:b0:cf:82:d6:ba:61:8f:d2:6e:
92:7b:00:e2:bc:51:20:bf:0a:ce:ba:2b:76:78:ae:
df:cd:6e:2d:60:ed:51:73:c0:53:59:5e:51:a5:46:
70:83:4a:bb:4f:85:0c:07:9a:2e:f5:53:a7:c2:6e:
79:3e:2d:71:28:d8:76:69:46:5c:c1:28:64:27:93:
cc:b6:02:27:4b:be:bd:31:9b:8b:41:88:40:72:cb:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:3A:0D:2E:35:E4:61:F7:31:3B:1F:D2:57:4C:43:52:E0:14:4C
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:93:61:45:28:f1:e4:f2:17:f2:cd:1b:9a:83:93:03:3a:97:
c0:76:ab:cc:d6:cd:06:04:c7:94:ba:47:c6:06:03:e5:93:ed:
b6:18:b9:6b:e7:fc:ec:0c:19:e3:da:0c:c8:d5:78:f1:b5:ae:
3f:74:dd:8d:7d:6b:79:80:63:ce:9f:87:b0:ed:fb:b6:68:8d:
7d:de:cb:74:73:b2:44:12:3c:27:a1:12:47:ea:9f:1c:31:4d:
cd:45:1b:ac:cb:cc:bd:fe:e1:4a:c5:0a:68:be:be:ee:22:1c:
8f:fe:a8:02:a6:2a:70:76:11:9f:59:74:7e:07:a5:08:3c:fd:
36:30:0e:b6:c5:4d:70:2c:f0:97:82:6f:87:91:94:a0:db:94:
b0:34:0e:30:db:f4:3c:cf:8b:99:bc:8f:31:63:af:78:c1:7f:
5a:19:e5:09:62:f3:bd:1f:67:dc:a6:42:6a:85:3e:14:cc:de:
1c:0f:6b:28:bf:b7:3f:fe:98:9d:68:d3:30:30:e3:f1:3a:ac:
2d:14:72:99:b7:be:bf:dd:11:a2:88:5a:9f:ac:a3:07:a2:9d:
e3:84:5f:7d:2e:9c:d1:36:05:a6:8b:32:f7:9e:c3:a3:68:a7:
6b:91:51:5c:40:12:2e:88:0a:8a:b5:47:24:44:93:36:75:83:
b3:a4:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:02 2025 by rpki-client