Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: 8ywMQb3looZjhqTo7mms8D79BxtwNUZICeeXgbLsDBk=
Subject key identifier: 95:35:A3:74:88:8F:16:EA:26:68:F6:8F:4E:A2:25:80:65:30:BA:90
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019654C9797EE65C758E903D24F53ECC5498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0809
Signing time: Sun 20 Apr 2025 20:00:12 +0000
Manifest this update: Sun 20 Apr 2025 20:00:12 +0000
Manifest next update: Mon 21 Apr 2025 20:00:12 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: v2RO+fH4/nAImtmnX+mBlSnwt7IiMpr2w+DqRowqblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:79:7e:e6:5c:75:8e:90:3d:24:f5:3e:cc:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Apr 20 20:00:12 2025 GMT
Not After : Apr 21 20:00:12 2025 GMT
Subject: CN=9535a374888f16ea2668f68f4ea225806530ba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:36:46:33:13:1f:31:ad:f3:3c:29:a9:9a:
f2:5e:a7:b1:24:f6:a5:02:95:1a:5f:5e:48:18:22:
eb:39:bd:fb:fd:6e:ba:be:76:48:1c:b4:71:1f:8e:
24:cb:af:32:e1:e2:a7:d2:87:e1:73:58:6b:9a:19:
66:be:a0:30:70:f6:3d:e5:7d:de:59:c8:06:53:86:
93:8f:51:f7:c7:33:63:8d:6f:d0:1b:f8:df:d1:e9:
8e:0a:29:7a:55:3c:7a:f8:d1:da:23:c8:65:8c:f1:
3f:bd:6e:43:23:f9:a0:b8:59:c8:54:ad:b3:18:36:
59:5f:2a:86:eb:89:71:00:c6:ac:7b:4b:c4:bc:0c:
58:88:a9:0c:00:c4:3e:eb:42:d1:e4:de:29:77:80:
c7:30:d4:1f:32:e3:f5:a9:fd:4f:c5:81:18:77:40:
52:39:9b:a9:a7:17:c8:88:ad:99:d3:29:f2:5e:7a:
9b:a7:05:9a:90:14:cd:25:2f:db:e0:0b:f0:13:6d:
96:45:5b:df:5f:87:89:f8:6f:ac:4e:c3:6f:9b:90:
46:92:74:11:a7:e8:ce:59:25:1b:5c:d5:b4:4e:b1:
e2:bf:1f:68:16:54:8c:42:72:29:26:fa:65:13:9a:
d9:1b:b1:f9:70:64:07:58:d0:14:42:17:a6:8c:fd:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:35:A3:74:88:8F:16:EA:26:68:F6:8F:4E:A2:25:80:65:30:BA:90
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cb:16:03:bd:64:d7:ae:5a:c5:d5:7b:e1:6f:72:8e:e9:1e:
10:39:8d:37:2c:8b:17:df:a7:56:dc:d1:2c:42:f6:2b:7b:5a:
dd:81:df:e2:68:be:de:a2:d6:43:f5:6b:f2:2e:54:55:1c:9f:
94:3f:3c:2c:bc:62:a4:fc:9b:81:6a:4e:49:e3:8f:4b:a6:8a:
5e:c8:7c:dc:22:ea:79:9a:6c:bd:fb:74:68:4b:20:28:02:d6:
ea:5f:2b:dd:7d:26:77:fa:98:90:9c:84:c3:dd:d0:4a:8c:2c:
82:9f:95:f4:b2:70:35:48:95:36:40:9f:51:10:20:62:9f:22:
96:5c:de:e2:68:4f:d0:3b:eb:4b:7f:ad:62:15:3d:08:e0:e7:
b6:5c:e9:32:08:f9:d4:ab:aa:78:e9:34:95:ad:e0:7c:22:ad:
02:01:6c:5f:56:22:dc:cf:53:3b:a9:04:de:ac:ae:95:4a:e4:
ef:da:b4:79:8b:84:e4:67:d3:12:3a:f9:55:30:97:45:13:b5:
48:0c:b1:33:35:7e:2b:95:3b:57:fb:f1:ca:65:dd:1c:73:af:
fa:44:a8:b5:91:de:18:53:77:97:1f:9d:74:49:d4:df:37:68:
38:4c:6f:d1:81:c3:31:68:c1:87:ae:79:bc:ff:9d:91:e5:6a:
ee:66:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:31 2025 by rpki-client