Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: WpKBPGDRGkUqPPg3prJcr6LCRRhUXBzR6KRB2O1gEJw=
Subject key identifier: F7:12:9E:66:96:08:EB:E9:F2:A8:7E:5E:C2:78:83:B0:68:66:49:1C
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 01965349856044E7BBABBA6FC0D2E62E0E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 040E
Signing time: Sun 20 Apr 2025 13:00:49 +0000
Manifest this update: Sun 20 Apr 2025 13:00:49 +0000
Manifest next update: Mon 21 Apr 2025 13:00:49 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: XwU7bsXcTT5suPR7nxVLOplKGiO03b5Fk2jUsN7saUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:85:60:44:e7:bb:ab:ba:6f:c0:d2:e6:2e:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Apr 20 13:00:49 2025 GMT
Not After : Apr 21 13:00:49 2025 GMT
Subject: CN=f7129e669608ebe9f2a87e5ec27883b06866491c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:04:ab:4c:2b:66:ff:db:b6:10:a7:77:f7:
7d:08:0d:27:5a:63:53:86:fa:55:71:ff:61:80:c3:
39:c0:d8:09:62:46:a8:85:dc:86:0b:f4:17:26:4b:
e7:56:78:fa:ad:48:f7:e9:38:ea:90:49:b3:d2:35:
a7:2d:07:8e:cb:26:44:f6:3f:0c:df:e6:a9:41:ad:
03:ad:fe:b9:ca:dc:e4:4c:79:58:4e:59:ff:43:6a:
82:60:dd:ae:e4:ae:ce:b7:f7:03:f4:65:8d:4f:28:
85:7a:5f:a6:b4:3b:51:4d:8e:2a:25:3f:06:3e:af:
c5:1d:da:6f:d4:cd:4a:a7:ef:f5:b0:d4:2b:c0:29:
fb:9e:10:a4:ab:cf:13:02:6c:3f:ca:a0:8d:07:fe:
a8:83:47:cd:30:02:4d:1e:a6:f3:e1:b9:62:da:2d:
2a:57:a6:2d:a0:0b:f3:26:bc:92:15:22:8c:33:17:
d9:69:6e:35:25:c8:f4:e0:98:a5:c4:cf:9e:b9:98:
c2:2c:c9:87:12:92:f8:be:9c:15:e7:5f:fe:6e:83:
73:89:3c:85:de:ee:04:34:57:49:22:e5:d2:2d:a7:
1e:34:00:68:a0:74:2f:bd:73:ef:8f:97:26:41:98:
57:48:9a:a0:01:e6:ae:3e:b4:9d:d2:b3:17:20:c7:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:9E:66:96:08:EB:E9:F2:A8:7E:5E:C2:78:83:B0:68:66:49:1C
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:74:ff:5e:3b:27:50:49:8b:4a:10:be:cb:ca:52:60:03:b4:
52:e1:7d:04:40:7c:71:a0:d1:c8:d9:15:e9:8c:48:e2:b1:62:
b6:aa:3b:ee:97:7a:82:bf:a4:19:d3:1f:59:40:32:49:f8:15:
88:45:c7:2f:29:89:e2:47:9e:4c:80:e1:8d:3b:83:ad:60:d8:
99:13:7b:33:55:63:60:e9:05:7f:08:8d:12:ec:9c:f2:3c:33:
75:61:8c:88:e8:9b:21:4b:be:99:f9:7d:b4:c1:b4:c8:b3:f4:
e7:3d:6f:70:ec:6a:7d:cf:ad:cc:46:32:d4:92:b8:bf:ea:46:
cb:d2:d2:83:02:11:0c:c6:15:15:5b:5e:30:7b:2a:00:97:b3:
cb:ec:74:03:b1:fc:09:2c:29:30:fa:f3:8d:ca:2a:a1:34:c9:
39:00:69:21:a7:30:6e:63:d5:4f:d2:d9:dd:65:ac:0a:7f:df:
6e:04:60:4d:80:6d:34:ab:f8:15:de:32:b1:41:0c:6e:e8:41:
81:13:e0:a8:44:23:37:ae:e4:e1:9f:60:cf:14:ee:11:35:44:
ee:26:80:f4:7e:ab:f7:b2:0c:51:20:07:c0:e0:13:9d:f5:b3:
4f:74:20:5d:30:86:51:0f:57:f6:2f:67:12:4e:b0:03:69:00:
4c:18:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:23:49 2025 by rpki-client