Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: gz5gic0lax9jOtTFQ4Mr3jPcBVNgvBLyS8mFnHh6xWA=
Subject key identifier: DD:E3:A9:C3:F8:4B:A0:E3:4A:26:B7:CC:35:07:FB:F9:A3:55:94:09
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 019653B7BF87A598D198F6CD8F16C14657F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 1217
Signing time: Sun 20 Apr 2025 15:01:13 +0000
Manifest this update: Sun 20 Apr 2025 15:01:13 +0000
Manifest next update: Mon 21 Apr 2025 15:01:13 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: u88kYbuiJyStsBoCOv7ppbv7WHiklqZwyDAu8uxydl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:bf:87:a5:98:d1:98:f6:cd:8f:16:c1:46:57:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Apr 20 15:01:13 2025 GMT
Not After : Apr 21 15:01:13 2025 GMT
Subject: CN=dde3a9c3f84ba0e34a26b7cc3507fbf9a3559409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:e4:ec:8a:b1:04:a9:0b:ad:fe:10:f6:2c:
39:9b:a9:bc:33:49:6a:5b:19:e1:ca:67:4f:c0:46:
d3:5d:8f:e6:13:85:3a:00:97:47:9c:59:22:af:6c:
f7:dc:67:ce:cd:4d:9a:58:59:b8:ad:0a:9f:9f:a2:
68:4c:88:5b:4f:6c:5a:13:04:1c:ab:5f:bc:73:c6:
17:95:52:40:38:27:87:88:f2:59:67:f6:7e:9f:5a:
5f:af:65:b7:9d:c2:c6:e7:69:bc:f8:b5:33:6f:ae:
76:3a:28:72:f3:54:3e:7a:3b:e4:68:f6:c3:ee:0f:
05:20:55:48:c9:37:c0:84:ba:bd:f6:66:52:6f:ad:
35:82:da:2d:ec:15:c9:b8:bf:ab:16:0d:fa:ef:69:
35:e8:0d:db:97:43:d8:81:9b:52:6c:6c:18:e9:e9:
f4:d5:01:e0:64:78:50:76:f8:a1:43:3a:e0:df:df:
51:c7:2a:3a:6b:12:5d:c1:7b:db:47:62:2b:79:c1:
b8:98:15:de:05:2d:d9:ae:df:c9:b0:d7:aa:f9:38:
be:c2:9c:09:66:9e:7d:86:8b:1d:76:2e:ad:22:e7:
1a:8c:a7:55:77:a4:8a:03:bd:8a:86:34:48:ef:40:
b1:14:11:be:4f:cc:63:26:4d:0d:25:cd:30:f5:91:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:A9:C3:F8:4B:A0:E3:4A:26:B7:CC:35:07:FB:F9:A3:55:94:09
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:98:ce:39:75:41:b8:46:22:fc:bc:9b:b5:3b:46:4e:ff:77:
d3:66:0a:4e:f7:67:7c:e2:d9:7c:c7:66:8e:33:e9:2e:46:85:
3e:5d:62:de:b6:de:74:07:d1:da:2d:5e:eb:2e:7d:4a:45:6d:
7a:7e:48:d5:5d:9d:16:87:ac:78:00:97:73:ed:df:0f:18:bc:
8c:f0:a3:f8:98:ce:f1:d3:a2:3e:41:a9:05:9e:13:3b:ad:4c:
b9:6c:ad:1d:b3:3c:71:12:41:61:42:5c:55:2c:9b:86:e9:fc:
4e:bc:53:c0:6d:38:6b:e8:2c:8a:14:6b:47:42:34:71:a2:cf:
b7:56:ce:6f:ef:53:ff:d7:0e:cd:06:4c:6c:86:f3:7b:6a:33:
47:30:27:f2:39:5c:a0:67:55:b2:9d:db:34:87:08:b0:a9:cd:
bf:47:74:ea:3a:ee:97:52:5e:e2:13:ff:32:9a:b3:65:10:77:
ac:ad:b7:42:36:fb:2f:e7:9c:42:65:9d:e7:d4:0e:f7:56:95:
34:1b:3c:4f:6b:04:ba:1f:71:60:54:0d:7b:5c:6a:7c:8c:bc:
37:00:03:e3:42:5d:df:48:5d:33:d6:ee:0a:66:e5:f9:5e:27:
35:da:69:55:ab:62:de:50:6f:a8:ba:37:6b:ad:af:a2:72:b7:
32:02:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:43:33 2025 by rpki-client