Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File: y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier: G0Et8IBQxikyFROU4bAnPNKLnrKqroIBeKQxw3hNNgY=
Subject key identifier: 1F:A3:8B:CE:F7:3B:C0:B7:46:B2:70:24:ED:76:F0:63:74:AD:48:0A
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 019644E893A6D6C772EC6BC81A55EF99A227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number: 0FA0
Signing time: Thu 17 Apr 2025 18:00:14 +0000
Manifest this update: Thu 17 Apr 2025 18:00:14 +0000
Manifest next update: Fri 18 Apr 2025 18:00:14 +0000
Files and hashes: 1: 3mViGQZ4y4dgsuOpVqTlOj7Fdak.roa (hash: bm9ouBBryfPy+46YnwBG/A6ErQmwE+ICHvcNK/AHLA4=)
2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: IGuIlGPD9oBtUONkpGJOv2FSgIiEgbTiCooifFjTS64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:93:a6:d6:c7:72:ec:6b:c8:1a:55:ef:99:a2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Apr 17 18:00:14 2025 GMT
Not After : Apr 18 18:00:14 2025 GMT
Subject: CN=1fa38bcef73bc0b746b27024ed76f06374ad480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:c0:cb:9e:69:66:22:d8:65:af:75:ac:de:
e2:73:27:cb:bd:f6:49:ba:18:d8:d5:a1:66:57:45:
1d:25:24:60:59:33:6a:e4:7e:c5:6a:f5:31:c4:3f:
89:1e:0d:9e:ef:ed:90:eb:6e:d2:a0:09:c5:2d:be:
47:65:8c:b0:bb:fa:54:bb:43:7f:55:7d:27:d9:91:
36:ad:1b:e6:45:e5:cf:c7:32:c1:d2:e3:df:4a:d4:
01:ae:cc:f5:4c:b1:19:7e:ba:d9:6d:5c:a1:1a:fe:
88:41:b0:48:23:cf:4a:30:75:5a:4c:b4:fe:1c:24:
55:d6:81:92:d0:95:be:9e:94:0d:03:4c:35:3d:a2:
ae:a6:10:10:a4:aa:a4:be:1d:87:7a:60:8a:7b:5e:
3f:4a:4f:4a:d6:af:0c:30:ed:70:73:d0:76:12:48:
c5:06:da:76:08:0c:3c:51:b8:dd:29:86:db:8c:eb:
fc:ad:c2:e4:1f:54:99:3d:a4:0e:db:2f:a9:67:cf:
a7:7b:94:57:85:5c:d8:9c:d9:24:eb:c8:85:d3:4e:
40:27:f0:11:6f:f2:05:45:db:c0:db:e2:55:d8:16:
37:72:13:c6:e3:80:16:72:4e:7e:bd:8c:a1:25:2b:
c1:74:33:8c:58:94:cb:e0:8c:59:e9:e0:d5:0c:7f:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:8B:CE:F7:3B:C0:B7:46:B2:70:24:ED:76:F0:63:74:AD:48:0A
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:b0:62:e8:7c:7e:94:cb:da:5a:f8:cd:43:0f:a6:ea:64:
9e:18:e3:9e:ee:4e:38:d1:eb:5f:1f:53:cf:d9:84:ee:e5:d7:
e8:55:ab:a9:1b:e3:f4:fd:71:8b:01:70:fc:4d:a7:69:f1:5d:
b1:bf:88:d7:47:51:69:25:c4:12:99:89:a3:34:49:c8:59:1e:
c6:64:e9:95:09:f8:0d:d2:8c:bd:de:a7:3f:b0:6f:48:7f:a2:
db:da:74:10:09:20:41:ac:11:c8:2b:6d:f6:d7:5a:08:49:39:
dc:e0:7e:30:95:aa:d7:48:29:50:8f:53:f5:e9:61:29:d8:b7:
d4:00:96:78:92:b3:36:11:13:d0:aa:1b:5a:fd:a0:21:88:d7:
6e:17:c9:17:4e:21:b2:ad:5b:33:19:cd:31:54:21:a8:a8:dc:
78:7f:71:6b:14:6a:30:41:a0:34:3f:b7:37:04:a8:18:fd:79:
c2:14:ba:cb:24:c6:17:92:37:90:35:e6:60:1a:44:8a:03:4b:
d2:1e:f4:d3:bf:35:44:d1:1b:d8:99:75:37:46:87:00:9e:5e:
6c:34:88:61:b6:1b:43:66:57:b1:e0:e2:f2:53:df:d1:a4:b3:
e8:a8:50:a7:87:0b:76:43:4e:48:d6:79:3c:26:e8:e9:fc:7b:
39:9c:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:21 2025 by rpki-client