Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: nTWpJDKJsz9FPJ5bm4O1uJm8jstsCLtL9kzBmoFskwY=
Subject key identifier: 9A:0F:21:82:99:36:F5:21:A8:5C:10:6E:6B:15:90:98:C0:A8:73:7D
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 01965537F37EAE87EE68CF5D6197AF95CF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 22:00:52 +0000
Manifest this update: Sun 20 Apr 2025 22:00:52 +0000
Manifest next update: Mon 21 Apr 2025 22:00:52 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: J+xe6IbEQFXBDNEU7irrRKgQyQnjn1cYhsXJ9ouQcQY=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f3:7e:ae:87:ee:68:cf:5d:61:97:af:95:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Apr 20 22:00:52 2025 GMT
Not After : Apr 21 22:00:52 2025 GMT
Subject: CN=9a0f21829936f521a85c106e6b159098c0a8737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:6d:3c:bf:8b:bc:fd:87:44:fb:bb:fc:f6:
67:98:6f:ee:13:b8:94:f5:e1:14:a5:61:55:00:dd:
09:c2:19:ee:71:db:93:13:e0:09:3e:f2:21:4f:46:
63:08:c6:1a:69:69:56:c2:5a:11:23:24:a9:50:9d:
6d:f5:3d:78:3a:fd:32:05:c2:6d:ed:8c:96:e9:52:
5b:93:ac:60:bd:27:c9:52:b0:3c:23:80:aa:45:8a:
ff:c8:67:83:96:04:71:18:a3:f9:88:61:ba:04:c9:
d7:4b:71:a7:99:91:19:c3:24:84:3e:f3:c5:4e:e0:
f3:d0:cf:54:09:ee:3e:f7:62:1a:23:bc:9e:ed:45:
01:ba:2a:b9:75:88:3e:e9:5b:03:09:0a:e0:0b:a1:
3a:5e:1c:da:a7:ae:54:7e:3c:bf:81:f4:26:eb:4b:
6d:83:69:3f:44:d1:69:82:98:39:e9:73:95:6b:c8:
17:d1:b4:5e:c1:7f:78:5f:f3:3f:01:f8:bc:5e:42:
19:5b:50:f8:d6:59:97:6a:e0:f3:30:19:30:a9:d5:
2d:23:e4:0b:4a:3e:9d:38:09:8b:22:6a:28:3f:b2:
2b:70:1d:25:c7:1e:1c:4a:3f:10:9c:e1:47:64:47:
fe:4e:ee:fd:55:cb:27:7b:8a:41:24:b6:90:ff:a8:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:21:82:99:36:F5:21:A8:5C:10:6E:6B:15:90:98:C0:A8:73:7D
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4e:eb:33:51:6c:6d:23:b8:ae:ef:8c:76:e7:46:22:d3:dd:
6e:24:d1:01:bf:3e:78:aa:95:f6:62:dc:39:ce:dc:64:e4:0f:
73:a6:1d:71:10:85:79:07:f0:a5:51:8f:28:b4:1c:ff:06:3d:
21:48:a3:ba:f8:ec:5b:59:96:7f:5d:02:69:e9:4f:6b:27:84:
72:d1:ad:33:31:12:5f:ac:a3:30:e0:33:3f:96:c6:be:e3:b1:
70:c6:15:e8:0b:27:f9:46:a2:cb:87:5f:26:dd:74:06:6f:52:
67:f2:a8:79:e6:a5:55:02:16:bc:c1:a5:6e:fc:22:25:ee:c1:
9d:f5:8e:37:b3:ab:05:6b:ce:3e:3d:4e:8a:99:97:94:07:e4:
7f:e4:99:d7:c5:b6:35:bb:1d:28:75:51:1a:08:e4:2b:87:f5:
d1:9e:c8:17:0e:c4:ad:5a:cd:43:2c:dd:ed:23:89:02:3f:6f:
da:c9:e6:57:e9:e8:48:a8:6e:09:1c:02:6b:5a:f7:e8:01:55:
23:c4:aa:f4:8d:6d:23:37:bf:2e:cd:13:09:a6:e3:2e:da:25:
c3:f1:f0:1a:4d:f3:09:a2:c8:e8:e2:34:a5:da:67:15:0b:0e:
15:eb:d4:a8:8f:06:8f:90:99:48:49:82:9c:2a:7a:51:4a:17:
e5:ce:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:19 2025 by rpki-client