Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: RMohFAWD3NMfmEXjbVnLn2lMblnLhgEDTK1iqB/iaO8=
Subject key identifier: C1:1C:9D:F8:C7:B3:48:92:CD:31:A9:61:8F:24:41:E6:ED:E7:BC:CC
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 0196553885B996C6D96790FEBDF1FF4C2DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1506
Signing time: Sun 20 Apr 2025 22:01:29 +0000
Manifest this update: Sun 20 Apr 2025 22:01:29 +0000
Manifest next update: Mon 21 Apr 2025 22:01:29 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: 1HWa76vUQZR+jMPyG/yfr2Xe393fMMZ70r2j1AphOW0=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:85:b9:96:c6:d9:67:90:fe:bd:f1:ff:4c:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Apr 20 22:01:29 2025 GMT
Not After : Apr 21 22:01:29 2025 GMT
Subject: CN=c11c9df8c7b34892cd31a9618f2441e6ede7bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:1b:3b:84:d3:5b:2f:c7:de:18:f0:8c:35:
06:79:d8:0c:f8:f6:12:32:e5:e3:e5:94:b8:9c:b8:
e7:fe:65:ef:66:50:78:ed:f1:b0:91:d9:9a:f6:ba:
5d:78:06:a8:48:e1:08:23:27:c1:5c:04:c4:04:03:
19:b6:28:ff:97:b9:73:59:5f:49:66:c7:ac:34:2a:
6c:87:d8:44:da:3e:44:53:9d:a2:be:84:6b:f8:f0:
8f:c4:2c:ba:c8:fe:cb:d7:5c:a8:30:74:3e:f1:7b:
14:14:04:f9:1f:b8:04:e2:5b:55:6b:b8:0d:df:32:
4d:b7:27:38:b7:29:7a:09:a2:5b:ed:3d:46:4e:56:
2e:38:b7:b9:6d:ad:d1:0c:6e:92:1c:4e:85:bd:1b:
aa:e1:48:ab:0d:3f:d0:ca:b9:78:9e:3c:f9:38:57:
7a:1f:aa:eb:17:96:fb:18:47:18:ee:1d:c6:b2:c0:
4a:c5:43:45:35:5a:ce:49:90:72:7c:bd:a7:56:7e:
df:2c:7a:a8:9f:58:8b:d9:69:88:c5:37:d2:c8:68:
34:33:df:25:b8:83:75:57:38:90:d6:75:84:32:93:
96:cc:24:cc:44:9f:89:b6:d5:02:fd:e9:81:7e:aa:
ff:d1:40:60:83:ce:fd:4b:06:cd:b8:1c:90:18:61:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:9D:F8:C7:B3:48:92:CD:31:A9:61:8F:24:41:E6:ED:E7:BC:CC
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e5:32:0d:f5:fd:2b:4d:ec:3a:82:42:93:ab:17:0b:f3:72:
e2:eb:6b:43:3b:3a:21:5e:b2:e0:38:dc:e1:da:3f:9f:63:2b:
09:07:ec:09:ad:71:9a:e7:f3:87:be:c5:94:ab:a3:93:b1:88:
69:75:33:75:3c:77:8a:cf:84:a8:61:ef:31:93:73:c4:96:84:
02:b2:ab:f8:a8:db:22:e9:ac:10:67:79:66:e0:09:e0:aa:85:
0c:c0:29:db:2c:de:ce:95:90:44:d5:39:45:99:fc:8f:35:c7:
73:7d:07:a3:e2:04:27:7d:62:f8:1b:21:73:c2:a0:54:f4:da:
12:c2:ab:89:1a:a6:3e:e8:ca:5c:8a:7f:19:ba:61:da:db:aa:
02:c0:82:50:40:51:ec:56:67:e0:fc:eb:18:14:d1:ef:b2:96:
10:dd:e7:18:4b:a7:ff:f5:ff:5c:cd:87:fb:d6:ac:84:7f:05:
7d:5d:7c:11:63:ef:f5:f6:6b:0a:48:f3:9e:90:43:ca:5e:d9:
90:00:73:a9:1b:bb:c4:03:7f:b0:bf:5a:87:cc:2e:80:4c:a0:
b2:62:31:2d:e8:2b:1a:8d:69:52:de:86:33:11:8f:0f:db:0c:
2b:22:62:b9:96:3b:05:30:47:19:84:fb:32:8f:a5:1d:db:79:
36:58:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:23 2025 by rpki-client